canonical: https://jentic.com/apis/xero.com/xero-files-api

# Xero Files API

These endpoints are specific to Xero Files API. The API exposes 18 endpoints secured with oauth2 authentication.

## For AI agents

Programmatically uploads a file to the inbox, retrieves files. Covers 18 operations with oauth2 authentication.

## Scope

Does not handle payments, communications, or crm - use for storage and databases only.

## Capabilities

- Uploads a File to the inbox
- Retrieves files
- Update a file
- Deletes a specific file
- Monitor Xero Files API operational status and events

## Use cases

### Storage and Databases Operations

Use the Xero Files API to perform storage operations programmatically. The API provides 18 endpoints covering core functionality including uploads a file to the inbox, retrieves files, retrieves a file by a unique file id.

Example prompt: Call POST /Files to uploads a file to the inbox

### Automated Files Management

Automate files operations by combining multiple Xero Files API endpoints. Agents can retrieves files and then retrieves a file by a unique file id in a single workflow.

Example prompt: Call GET /Files to retrieves files, then verify the result

### AI Agent Integration via Jentic

AI agents discover and call Xero Files API endpoints through Jentic without managing credentials directly. An agent searches for the required operation by intent, receives the matching endpoint schema, and executes the call with Jentic-managed authentication. This eliminates the need to read API documentation or handle oauth2 tokens manually.

Example prompt: Search Jentic for 'uploads a file to the inbox', load the operation schema, and execute with Jentic-managed credentials

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| POST | /Files | Uploads a File to the inbox |
| GET | /Files | Retrieves files |
| GET | /Files/{FileId} | Retrieves a file by a unique file ID |
| PUT | /Files/{FileId} | Update a file |
| DELETE | /Files/{FileId} | Deletes a specific file |
| POST | /Files/{FolderId} | Uploads a File to a specific folder |
| GET | /Files/{FileId}/Content | Retrieves the content of a specific file |
| POST | /Files/{FileId}/Associations | Creates a new file association |

## Key resources

- **Files** — Operations available to regular developers

## Why Jentic

- **Setup:** Wiring the Xero Files API by hand means implementing its OAuth2 flow, sending the tenant header, and managing files, folders, and associations yourself. Through Jentic you install once, import the Xero Files API from the API Directory, store the OAuth2 credential once, and your agent calls it.
- **Permission scoping:** The Xero Files API puts the file id in the URL path (/Files/{FileId}), so a rule can pin your agent to one file: it can read that file and its content. You choose the operations it may call, so destructive ones like deleting a file are not included unless you add them.
- **Credential handling:** Your Xero Files API OAuth2 credential is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'upload a file to the inbox' or 'get a file's content', and Jentic returns the matching Xero Files API operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

## Related APIs

- **Dropbox** — Alternative storage API
- **Box** — Alternative storage API
- **Amazonaws** — Complementary storage API

## FAQ

### What authentication does the Xero Files API use?

The Xero Files API uses OAuth 2.0 for authorization. Through Jentic, these credentials are stored encrypted in your Jentic One instance and injected at execution time, so raw secrets never enter the agent context.

### Can I uploads a file to the inbox with the Xero Files API?

Yes. Use the POST /Files endpoint. The API returns structured JSON responses that agents can parse and act on directly.

### What are the rate limits for the Xero Files API?

Rate limits are not specified in the OpenAPI spec. Check the vendor documentation for current limits. Through Jentic, rate limiting is handled automatically with retry logic built into the execution layer.

### How do I uploads a file to the inbox through Jentic?

Install the Jentic SDK with pip install jentic, authenticate through Jentic One, the self-hosted execution layer, then search for 'uploads a file to the inbox'. Jentic returns the matching Xero Files API operation with its input schema. Load the schema and execute the call - credentials are injected automatically.

### How many endpoints does the Xero Files API have?

The Xero Files API exposes 18 endpoints covering files operations.

### Can I limit what my agent is allowed to do with the Xero Files API?

Yes. Because you self-host Jentic One, your own rules decide which Xero Files API operations and credentials the agent may use. The file ID sits in the URL path (/Files/{FileId}), so you can pin the agent to a single file and let it only read that file and its content while withholding destructive calls like DELETE /Files/{FileId}. Nothing beyond the operations you grant, such as GET /Files or POST /Files, is callable.