{"service":"Xero Sync API","docs":"/docs","auth":"Bearer token required for all /auth, /sync, /contacts, /transactions endpoints","webhooks":"POST /webhooks/xero — authenticated by x-xero-signature, not by token"}