What can an AI agent do with
Stay connected while you are away?
This lets the app stay connected and keep working when you are not signed in. By itself it opens no extra data. It keeps alive whatever else you approved.
How to spot it
On a Xero connection or settings screen, this is offline_access.
With it, an agent can
- Keep its connection to Xero working without asking you to sign in again.
- Keep using your other approved permissions on a schedule or overnight.
It cannot, on its own
- See or change any data on its own.
What a bad day looks like
If the agent misbehaves, it can keep acting while you are away, using everything else you approved.
Set it up safer
- Disconnect the app under Connected Apps in Xero when you stop using it.
- Check Connected Apps now and then and remove tools you no longer use.
Ask the company selling the agent
- What does your agent do while I am offline?
- How do I pause it without losing my setup?
Source
Checked against Xero documentation on 2026-09-28. All Xero permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.