The business problem:
As a modern agency, we are moving away from fragmented, individual desktop setups. We are centralising our team workflow inside headless cloud orchestrators (like Google AI Studio and Vertex AI) so everyone (from developers to leadership) can query financial insights securely from one central workspace.

Currently, AI agent integrations heavily favour local-first protocols (like desktop-bound MCP servers). This creates a massive architectural wall for cloud-first teams. Desktop-first setups rely on interactive browser logins and local environments, which completely block stateless, headless cloud workflows.

The Blocker:
Cloud orchestrators operate entirely in headless cloud environments. They cannot open interactive desktop browser windows to click "Connect." They require standard, stateless web connections.

Why This Matters:
- Supporting the A2A Standard: As the tech industry aligns around open standards like Google's Agent-to-Agent (A2A) protocol, integrations are shifting from traditional UI dashboards to multi-agent collaboration. Exposing machine-readable schemas keeps Xero at the cutting edge of this shift.
- Unlocking Enterprise & Agency Adoption: Larger accounting partners and agencies operate under strict cloud-first IT governance. They block local desktop clients for security reasons. Enabling centralised cloud access allows enterprise teams to safely adopt Xero AI workflows at scale.
- Reducing Support Overhead: Right now, teams are forced to hack together complex, brittle local proxy infrastructure to get AI tools to talk to Xero. Exposing clean, cloud-native endpoints eliminates this setup friction entirely.

Our Feature Request:
To allow businesses to securely connect their centralised AI agents directly to Xero data without massive engineering overhead, we need Xero to expose a cloud-to-cloud option containing:

1. Standard OpenAPI 3.0 Schemas (JSON/YAML): A clean schema detailing available read-only tools and endpoints that can be dropped directly into the "Tools" section of cloud platforms like Google AI Studio.
2. Static, Long-Lived API Bearer Tokens (or M2M Client Credentials): Support for secure, stateless Machine-to-Machine (M2M) authentication, eliminating the need for interactive desktop OAuth loops.

Thank you