Skip to main content
Glama

Invio Xero MCP

approve_xero_pending_change

approve_xero_pending_change
DestructiveIdempotent

Approves a change YOU (or another assistant on this account) have already proposed to Xero - create_xero_invoice, update_xero_invoice, create_xero_contact, update_xero_contact, create_xero_manual_journal or create_xero_credit_note - and immediately executes it. This is the ONE tool in this connector that actually writes to a live Xero ledger; treat it with the same weight as send_invoice or archive_business, not as a formality. Call this ONLY after the person using this account has clearly said, in their own words, to go ahead with THIS specific change - never infer approval from context, never call this speculatively "to see what happens", and never approve a change without first showing them what it actually says (call list_pending_changes if you do not already have its summary in this conversation). If they seem unsure, or ask what a value means, answer the question and wait - hesitation is not consent. Only once they have clearly agreed, call this with confirm: true. Afterwards, relay the real outcome verbatim: whether the write to Xero actually succeeded (and, if so, the id/number Xero assigned), or exactly why it failed if it did not - you cannot retry a failed write yourself, only draft a new change. Approving in Invio's own Settings > MCP > Xero screen remains available at all times and works exactly the same either way.

Input Schema

NameRequiredDescriptionDefault
confirmYesMust be true. Set this ONLY after the person using this account has explicitly said, in their own words, to approve (or reject) this specific change - never infer consent from context, and never pass true speculatively "to see what happens".
pendingChangeIdYesThe pendingChangeId of the row to act on - from list_pending_changes' own result, or the pendingChangeId a draft-creating tool (create_xero_invoice etc.) just returned. Never invent one.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • removedInput schema / additionalProperties
      Removed value: -false
  2. First observed

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark this as destructive, non-read-only, open-world, and idempotent. The description adds crucial context beyond them: the write is real and live, the agent cannot retry a failed write itself, it must relay the actual Xero outcome or failure verbatim, and approval through Invio Settings remains equivalent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the purpose and immediately follows with the critical approval and execution warnings before the outcome instructions. It is somewhat verbose and repeats consent cautions already present in the schema, but the length is defensible for a destructive live-ledger write.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a high-stakes destructive mutation with no output schema, the description covers approval preconditions, the need to inspect the pending change first, execution behavior, failure handling, outcome reporting, and the equivalent Settings path. An agent has enough information to call it correctly and report results safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and both parameters are already fully documented in the schema, including confirm's const true requirement and pendingChangeId provenance. The description reinforces consent semantics and says to call with confirm: true, but it largely repeats what the schema already provides rather than adding new parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: it approves an already-proposed pending change and immediately executes it. It enumerates the draft-creating tools it applies to and explicitly distinguishes itself as the one tool in the connector that writes to a live Xero ledger.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-to-use and when-not-to-use guidance: only after the user has clearly approved THIS specific change in their own words, never speculatively, and never without first showing them the change summary via list_pending_changes. It also covers hesitation and questions by telling the agent to wait.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources