An agent can connect on its own if it already holds X_API_KEY.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool list unknown
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package
Tool list unknown · checked 2026-10-20 19:10 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
MCP server for Xero — global cloud accounting: contacts, invoices, payments, items, reports
Official server.json
{
"name": "nz.co.invio/xero",
"title": "Invio Xero MCP",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://www.invio.co.nz/api/xero-mcp",
"type": "streamable-http",
"headers": [
{
"name": "X-API-Key",
"isSecret": true,
"isRequired": true,
"description": "Your Invio connector key: the last part of the connector URL Invio shows once in Settings > MCP > Xero. Send the key with no prefix."
}
]
}
],
"version": "1.0.0",
"websiteUrl": "https://www.invio.co.nz/xero-mcp",
"description": "Every Xero organisation you run, in one AI session. Writes wait for a person to approve them."
}