← Back to search

xero-mcp

GitHub Actions Scanned 29d ago

A Model Context Protocol server allows Clients to interact with Xero

npm ↗
? Not scanned yet

Versions

2.2.2latest
Jul 29, 2026
2.2.1
May 30, 2026
2.2.0
May 25, 2026
2.1.0
May 23, 2026
2.0.6
May 23, 2026
+ show 18 moreshow less
2.0.5
May 17, 2026
2.0.4
May 17, 2026
2.0.3
May 17, 2026
2.0.2
May 17, 2026
2.0.1
May 17, 2026
2.0.0
May 17, 2026
1.5.2
Apr 3, 2026
1.5.1
Mar 23, 2026
2.0.0-beta.1
Mar 23, 2026
1.5.0
Mar 23, 2026
2.0.0-beta
Mar 23, 2026
1.4.1
Mar 22, 2026
1.3.0
Mar 25, 2025
1.2.1
Mar 21, 2025
1.2.0
Mar 21, 2025
1.1.2
Mar 19, 2025
1.1.1
Mar 19, 2025
1.1.0
Mar 19, 2025

Tools 0

No tools indexed yet.

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 9

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 475 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%