Connect Claude to Xero — without exposing your books
Ask your AI about invoices, bills, and cash position — while contact details, bank lines, and card fragments are stripped out before the model ever sees them.
Your AI shouldn't need your customers' details to answer about them
The usual way teams wire an AI into Xero is a raw MCP server or a CSV export. Both hand the model everything: contact names and emails, bank details on bills, phone numbers in invoice notes.
Waqi sits between your AI and Xero as a redaction proxy. Claude gets the numbers and the structure it needs to answer; the personal data in each response is masked mid-pipeline, logged, and never reaches the model provider.
Live in minutes, nothing to host
Connect with Xero
One click, sign in, approve. Waqi requests read-only scopes only — it can never edit, pay, or send anything. No API keys to find.
Get your member link
Every person on the team gets their own protected MCP URL, so the audit log says who asked for what — not just "someone did".
Paste it into Claude or ChatGPT
Add it as a custom connector and ask real questions. Every response is scanned and redacted before it leaves Waqi.
What gets stripped from Xero responses
- Contact emails and phone numbers on invoices and bills
- Bank account lines and IBANs wherever they appear
- Card number fragments in payment references
- API keys or secrets accidentally stored in notes
Detection runs on every response, including inside free-text fields. Every call is written to a per-member audit log, and any listed free-text field can be hidden from the model entirely with one click. How Waqi handles data →
Questions teams ask before connecting Xero
Does Waqi get write access to my Xero account?
No. The OAuth connection requests read-only scopes (invoices and contacts, read). Waqi cannot create, edit, approve, or pay anything, and you can revoke the connection any time from Xero’s Connected Apps page.
What exactly does the AI see?
The structure and the numbers — invoice totals, dates, statuses, aged receivables — with personal identifiers replaced by typed placeholders like [EMAIL:a1b2]. The placeholders are stable, so the AI can still reason about "the same customer" without ever seeing who it is.
Does this work with ChatGPT as well as Claude?
Yes. Waqi is a standard MCP server, so it works with Claude (Settings → Connectors), ChatGPT (custom connectors in developer mode), and any other MCP-capable client. One link works everywhere.
Where do my Xero credentials live?
Waqi stores only the encrypted OAuth connection (AES-256-GCM), decrypted just for the moment of your own request. Your Xero password is never seen or stored — sign-in happens on xero.com.
How fast is setup, honestly?
Connecting Xero is about a minute (sign in, approve). Adding the link to Claude is another minute. There are no servers to run and nothing to install.
Not ready to buy today? Take the Pilot Pack.
The 14-day pilot checklist, the DPA, and the security model — everything you need to evaluate Waqi properly or make the case to your team.