Bolt.new AI and Xero integration: Step-by-Step Guide 2025

To integrate Bolt.new with Xero, you don’t “connect Bolt to Xero” directly — instead, you build a normal web backend inside Bolt.new (Node/Express is the simplest) and integrate Xero using their official OAuth2 flow and REST APIs. Bolt.new simply gives you a browser-based environment to scaffold the server, store environment variables, authorize against Xero, and make real API calls using your Xero app credentials. In practice: create a Xero developer app, get OAuth client ID + secret, set callback URL to your Bolt dev server, implement the OAuth flow inside Bolt, store tokens, and then call Xero’s accounting endpoints normally.

 

What you actually do (short version)

 

• Create a Xero OAuth2 app in Xero Developer Portal.
• Copy the client ID, client secret, and set the redirect URI to your Bolt.new dev server URL (for example https://xxxxx.bolt.run/callback).
• Inside Bolt.new, create a tiny Node/Express backend with the official xero-node SDK (or raw REST if you prefer).
• Add your credentials as environment variables in Bolt.new.
• Implement the OAuth authorize → callback → token exchange flow.
• Call Xero APIs like “Get Contacts” or “Create Invoice”.

 

Why this works

 

Bolt.new is a development environment — not an integration layer. It runs your backend exactly like any other Node server, which means you use the same real Xero OAuth2 flow you would in production. You only need:

• API credentials from Xero
• OAuth redirect URL that points back to the Bolt server
• Storage for tokens (an in-memory variable for prototyping, DB for production)

Everything else is standard web integration.

 

Step-by-step (detailed, safe, no made-up parts)

 

• Go to Xero Developer center → “My Apps” → “New App”.
• Set Redirect URI to something like:
  https://YOUR-PROJECT-NAME.bolt.run/callback
• Copy your client ID and client secret.
• Open Bolt.new and create a Node.js project.
• Open the Environment panel and create:
  XERO_CLIENT_ID
XERO_CLIENT_SECRET
XERO_REDIRECT_URI

Now install the official Xero SDK:

npm install xero-node

 

Minimal working integration server (inside Bolt)

 

// server.js
import express from "express"
import { XeroClient } from "xero-node"

const app = express()

const xero = new XeroClient({
  clientId: process.env.XERO_CLIENT_ID,
  clientSecret: process.env.XERO_CLIENT_SECRET,
  redirectUris: [process.env.XERO_REDIRECT_URI],
  scopes: ["openid", "profile", "email", "accounting.contacts", "accounting.transactions"]
})

// Step 1: Redirect user to Xero login
app.get("/connect", async (req, res) => {
  const consentUrl = await xero.buildConsentUrl()
  res.redirect(consentUrl)
})

// Step 2: OAuth callback handler
app.get("/callback", async (req, res) => {
  const tokenSet = await xero.apiCallback(req.url)  // Exchanges code for tokens
  res.send("Xero connected successfully.")
})

// Example: Fetch contacts
app.get("/contacts", async (req, res) => {
  const result = await xero.accountingApi.getContacts(xero.tenantIds[0])
  res.json(result.body)
})

app.listen(3000, () => console.log("Running on port 3000"))

 

How to test in Bolt.new

 

• Open the web preview of your Bolt server.
• Go to /connect → this brings up the real Xero login.
• Approve permissions → Xero redirects to /callback.
• Now call /contacts or any other endpoint.

 

Hardening for production

 

• Store tokens in a real database instead of memory.
• Rotate the client secret according to Xero best practices.
• Add HTTPS if your hosting environment doesn’t enforce it.
• Implement refresh token handling (xero-node supports it automatically).

 

This is the full, real, correct way to integrate Bolt.new with Xero — no shortcuts, no magic, just a standard OAuth2 + REST workflow executed inside the Bolt workspace.