What can an AI agent do with
All business transactions (view only, being retired)?
This is the view-only version of the broad transactions permission. The app can see your invoices, bills, payments, bank transactions, and journals, but cannot change them. Xero will keep it only until September 2027.
How to spot it
On a Xero connection or settings screen, this is accounting.transactions.read.
With it, an agent can
- See your invoices, bills, quotes, and purchase orders.
- See payments, bank transactions, and bank transfers.
- See manual journals, receipts, and credit notes.
It cannot, on its own
- Create, change, delete, or email anything.
What a bad day looks like
If the agent leaks what it reads, your customer billing and spending history could end up with the wrong person.
Set it up safer
- If it only needs invoices, ask for accounting.invoices.read instead.
Narrower permissions on Xero:
- Invoices and bills (view only)
accounting.invoices.read
Ask the company selling the agent
- Which of my transactions do you actually need to see?
- Do you keep a copy of my data, and for how long?
Source
Checked against Xero documentation on 2026-09-28. All Xero permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.