This seems to be an issue with the API itself, either they've updated the API and/or your authentication for the API isn't functioning correctly. I'd suggest referring to the Xero API documentation, specifically any recent updates or changes to their API and/or I would reach out to Xero support. The fact that the data is "sanitized" leads me to believe that the data is being passed through to the API correctly, but that the API parameters or settings are likely incorrect.
If this reply has answered your question or solved your issue, please mark this question as answered. Answered questions helps users in the future who may have the same issue or question quickly find a resolution via search. If you liked my response, please consider giving it a thumbs up. THANKS!