Integrations

Integrations connects XO to the rest of your stack — a full API and webhooks, an app marketplace, and native connectors to Saudi government services and popular platforms.

REST API & webhooks

1. Go to XO Core → Integrations → API.
2. Create an API key / token with scoped permissions.
3. Use the REST API to read/write XO data from your systems.
4. Subscribe to webhooks so XO pushes events (order created, invoice paid) to your endpoints.

📷 Screenshot: API keys and a webhook subscription list.

App marketplace

Enable/disable apps and connectors from the marketplace — e-commerce (Salla, Zid, Shopify, WooCommerce), accounting, logistics, and more. (Commerce-specific apps live in Commerce → Apps.)

Saudi government integrations

Native connectors for ZATCA (Fatoora), GOSI, Mudad, Qiwa, Muqeem, and Nafath — so compliance and HR data flow without manual files.

Import / export

A consistent Excel/CSV import-export framework across modules for bulk data and migrations.

Best practices

• Scope API keys narrowly and rotate them per policy.
• Prefer webhooks over polling for real-time integrations.
• Use native gov connectors rather than manual file uploads where available.

Troubleshooting

• Webhook not received. Check the endpoint URL, that it returns 200, and the event subscription.
• API 403. The key lacks the required scope/permission.

Related guides

• Commerce — Apps
• Tax & ZATCA Compliance
• Embedded Analytics