Billable time reaches Xero with no spreadsheet in between.
Approved billable hours land in Xero as a draft invoice, priced by the shared rate engine and left for a person to send.
Connected once, scoped per organisation
A connection belongs to your organisation and nothing else. Tenant isolation is enforced by composite foreign keys in the database, so a cross-tenant read is an error rather than a code-review question.
Incremental, cursor-tracked syncs
Syncs resume from where the last one stopped rather than replaying from the beginning, and every run is recorded with its outcome, so a failed sync is visible instead of silent.
Scoped credentials, revocable
Access is held as a scoped credential you can rotate or revoke, and every use of it lands on the same hash-chained audit trail as the rest of the account.
How it works
Approved billable hours land in Xero as a draft invoice, priced by the shared rate engine and left for a person to send. The connection is scoped to your organisation, holds a credential you can rotate or revoke, and records every sync with its outcome, so a run that fails is visible rather than silent.
Syncs run incrementally and resume from the last cursor rather than replaying from the start. Every access lands on the same hash-chained audit trail as the rest of the account, so who connected Xero, and when, is a matter of record.
Xero connects to WorkMonitor through a first-party connector maintained in this codebase. Approved billable hours land in Xero as a draft invoice, priced by the shared rate engine and left for a person to send.
Four steps, once
- 01Open Settings → Integrations and choose the connector.
- 02Authorise the connection and pick the scope it may read.
- 03Run the first sync, then review what it brought across.
- 04Set the schedule, and watch the sync history for failures.
What you get either way
Connected once, scoped per organisation
A connection belongs to your organisation and nothing else. Tenant isolation is enforced by composite foreign keys in the database, so a cross-tenant read is an error rather than a code-review question.
Incremental, cursor-tracked syncs
Syncs resume from where the last one stopped rather than replaying from the beginning, and every run is recorded with its outcome, so a failed sync is visible instead of silent.
Scoped credentials, revocable
Access is held as a scoped credential you can rotate or revoke, and every use of it lands on the same hash-chained audit trail as the rest of the account.