specification: API Commons Rate Limits specificationVersion: '0.1' schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits provider: Xero providerId: xero created: '2026-05-04' # Provenance stamped 2026-08-11: this artifact was written by the API Evangelist # bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35. method: generated modified: '2026-05-05' reconciled: false tags: - Rate Limiting - Accounting - Finance - Small Business description: Xero publishes per-app, per-tenant rate limits on the developer portal at developer.xero.com (minute / daily / concurrent ceilings, plus Retry-After / X-Rate-Limit-Problem headers). The canonical rate-limit page was unreachable (timeouts) during this reconciliation, so specific numeric ceilings have not been refreshed here. sources: - https://developer.xero.com/documentation/guides/oauth2/limits/ - https://developer.xero.com/faq/api/api-rate-limits/ notes: WebFetch against developer.xero.com timed out during this reconciliation. Refresh once the developer portal is reachable; values published there are authoritative and supersede this artifact. limits: - name: Per-tenant ceilings (numbers in canonical Xero developer docs) scope: tenant metric: varies limit: see https://developer.xero.com/documentation/guides/oauth2/limits/ notes: Xero documents per-minute, per-day, and concurrent ceilings per app per tenant on the developer portal. Higher limits are available via Xero's app review for production partners. policies: - name: Per-app + per-tenant scoping description: Rate limits are scoped to the combination of OAuth client (app) and organisation (tenant); each tenant authorisation has its own counter. - name: Backoff description: Xero returns 429 with Retry-After when limits are exceeded. Clients should honour Retry-After and apply exponential backoff with jitter. - name: App review for higher limits description: Production partners can request elevated limits via Xero's App Partner program after passing the app review process. maintainers: - FN: Kin Lane email: kin@apievangelist.com url: https://apievangelist.com