Security Report
✓Verified by MCPForge

Xero Accounting MCP Security Report

Independent security and governance assessment · Assessed June 22, 2026 · Last updated July 1, 2026 · Verified 2×

90

Security

82

Compliance

90

MCPForge Score

Security Findings

Security

+Server reachable and responding
+No destructive operations detected
−Financial operations detected — approval workflows recommended
−Credentials Vault not configured — API keys may be exposed through direct agent access if tools require authentication

Compliance

−User/contact data handling detected (GDPR/CCPA obligations)
−Payment operations detected (PCI DSS obligations)
−Credentials Vault not configured — configure to ensure proper server-side key management

Risk Analysis

233 tools analyzed
High Risk41
Medium Risk101
Low Risk91

By Category

Delete10
Billing66
Write66
Read91
○No approval workflows configured

Governance Assessment

Formal Security Review
Not Started
Credentials Vault✗ Not Configured
Endpoint ProtectionNot Enabled
Audit Logging✓ Active — All tool invocations logged

Agent Reliability Assessment

Description Quality

192/192 tools have descriptions · avg 52 chars

100/100

Excellent

Output SanitizationPASS
Agent Reliability Score
99/100 · Excellent

Governance Maturity

Basic2/5 controls enabled

Not recommended for production. Configure governance controls before deployment.

View full governance assessment →

Production Readiness

Enterprise Ready

90

MCPForge Score

→Configure the Credentials Vault to protect API keys from direct agent exposure.
→Enable endpoint protection to require API key authentication on direct MCP calls.
→Start a formal Security Review to qualify for the "✓ Security Reviewed" badge.
→Review the 41 high-risk tools and configure approval workflows where appropriate.
View full profile and installation instructions →