What can an AI agent do with
Xero file library?
This lets the app view and manage your Xero file library. It can upload, update, and delete files.
How to spot it
On a Xero connection or settings screen, this is files.
With it, an agent can
- Upload files to your Xero file library.
- Update and organise files and folders.
- Link files to records like invoices.
- Delete files.
What a bad day looks like
A tricked agent could delete receipts and documents you keep in Xero Files.
Set it up safer
- Use files.read if it only needs to read documents.
Ask the company selling the agent
- Why does your agent need to delete files?
- Can I get a list of every file it changed or removed?
Source
Checked against Xero documentation on 2026-09-28. All Xero permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.