Connecting to Xero

Prepaidly uses the usual Xero authorization code flow. You sign in at Xero, pick an organisation, and approve the permissions the app asks for. Xero then sends you back here with a short lived code; our backend swaps that for access and refresh tokens. Tokens stay on the server, not in the page.

Permissions

The app needs read access to settings (and often contacts) plus the ability to create and read journals so it can post manual journals and confirm they landed. If offline access is on, refresh tokens keep you signed in until someone revokes the app or the grant expires.

Steps

1. On Connect to Xero, start Connect to Xero (first file) or Connect New File (additional org).
2. Sign in to Xero (use MFA if your policy requires it).
3. Approve the permission screen.
4. Pick the organisation to link. For training, use Demo Company.
5. After redirect back to Prepaidly, confirm the org appears under Xero Files as Connected and press Refresh Status if the badge lags.

After OAuth

Xero may briefly show a confirmation screen while Prepaidly finishes linking your organisation. If something fails, read the message on screen, then fix the connection from Connect to Xero and try again.