A Postman collection for authenticating to the Xero API. Please note that this collection provides access using OAuth 1.0a. Our newer collection using OAuth 2.0 can be found here.

Follow these steps to quickly get up and running with the Xero API and Postman:

Click the button below and select the Desktop version of Postman (Chrome extension doesn't support environment variables):

Go to the Xero developer portal and create a public app.

Note Postman doesn't support the RSA SHA1 signing method so you can't use the partner or private app types.

If you haven't already signed up for a xero account you can do so here.

Copy the consumer key and consumer secret of your app into the ConsumerKey and ConsumerSecret environment variables in Postman.

Select Xero from the environment drop-down menu in Postman

Hit Send on the GET Request Token call in Postman.

In the response section go to the Test Results tab and copy the authorization url.

Paste the authorization url into your browser, login to xero, select the org to connect to and copy the oauth verifier to your clipboard.

Select the Authorization tab, paste the verifier into the Verifier box under ADVANCED

Congrats! You're now authenticated and can start making API calls. Your access token will last for 30mins, after which time you'll need to report steps 4-6 to get a new token.

Click Send on the GET Organisation request to make your first API call.

Now that you're authenticated, import the official Xero OpenAPI (Swagger) description and import all the endpoints for the Accounting API.