diff --git a/manifest.json b/manifest.json
index 9eb9e02..b83c99a 100644
--- a/manifest.json
+++ b/manifest.json
@@ -50,7 +50,19 @@
       {
         "url": "https://(.*).xero.com/.*",
         "methods": ["GET", "POST", "PUT", "DELETE", "PATCH"],
-        "timeout": 30
+        "timeout": 30,
+        "settingsInjection": {
+          "client_id": {
+            "header": ["Authorization"]
+          },
+          "client_secret": {
+            "header": ["Authorization"]
+          },
+          "global_access_token": {
+            "body": ["refresh_token"],
+            "header": ["xero-tenant-id"]
+          }
+        }
       }
     ]
   }