quickbooks-online-mcp-server — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Monitor this implementation for changes in adoption, MCP interface, maintenance and permission boundary.

Reviewed Oct 10, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Access QuickBooks Online company financial information through MCP

What we know

The QuickBooks MCP Server lets AI assistants access QuickBooks data via a standard interface. It uses the Model Context Protocol to expose QBO features as callable tools, enabling developers to build AI apps that fetch real-time QBO data through MCP. Access QuickBooks Online company financial information through MCP.

Maintenance / activity evidence

GitHub REST pushed_at 2026-09-15T17:56:34Z

Tracking evidence observed Oct 10, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: medium.

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Scoped by connected account, local OS, and configuration; verify exact permissions before installation. Reported action classes: create accounting records; update accounting records; delete accounting records. Complete write authority is not verified.
OAuth 2.0 Intuit developer application; sandbox recommended first
Sensitive access: Account-level financial records and Intuit OAuth tokens

Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

417 repository stars

Stars observed Oct 9, 2026.

Repository total for intuit/quickbooks-online-mcp-server.

All limitations / Review context

Has quickbooks-online-mcp-server changed its specific MCP integration, install method or privilege scope, and does it justify shortlist promotion?

High-impact permissions explicitly documented; no known blocker to an accurately caveated public Radar listing in limited first-party review.

Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens.
Scoped by connected account, local OS, and configuration; verify exact permissions before installation.
OAuth 2.0 Intuit developer application; sandbox recommended first
Account-level financial records and Intuit OAuth tokens
Reviewed write actions: create accounting records; update accounting records; delete accounting records
Sensitive access: Account-level financial records and Intuit OAuth tokens
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
No exhaustive advisory or runtime review performed; never infer installation safety.
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
Setup and runtime permissions are implementation- and account-specific; follow linked upstream documentation.
Repository pushed_at explicitly observed

Original activity observations

GitHub REST pushed_at 2026-09-15T17:56:34Z

Technical identity

github.com/intuit/quickbooks-online-mcp-server

Exact implementation source: https://github.com/intuit/quickbooks-online-mcp-server ↗
Reviewed resource type: MCP Server
Repository identity: intuit/quickbooks-online-mcp-server

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 10, 2026 · Latest source observation Oct 10, 2026

GitHub repository ↗
intuit/quickbooks-online-mcp-server
Recorded repository material and project history.

Setup · Watchlist

Install & Agents

claude-code

Publisher instructions with a documented client setup path.

Source evidence observed Oct 14, 2026.

Additional setup details required — see the specific gaps below.

Warning

Can create/update/delete accounting data; use sandbox and least-privilege access.
Documentation-only: user must review side effects, account credentials, version and platform before running.
Source-backed ordered steps assembled from publisher README; not claimed to be one verbatim block.
Publisher shows this as a Claude Code MCP JSON configuration example. Do not label as Claude Desktop config or Codex TOML; verify actual host schema before applying. Publisher-supported parameters assembled into a machine-readable JSON example; placeholders are user-specific and no real credentials are included. Treat as reviewed composed example rather than a verbatim executable test. Replace the supplied credential/path placeholders privately; use the named host's configuration schema.
Preserve the .env token store until you decide whether to revoke its credentials.
Distinguish client registration removal from software uninstall, persistent data deletion and provider OAuth/API-key revocation.

Install / connect
Publisher instructions
QuickBooks Online local MCP server; create an Intuit developer OAuth application before connecting.
publisher documented example · Publisher instructions · Review before use
```
npm install
```
package install · Publisher instructions
git clone https://github.com/intuit/quickbooks-online-mcp-server.git cd quickbooks-online-mcp-server npm install npm run build

Configure / authenticate

MCP100 setup guide

QuickBooks uses Intuit OAuth app credentials and auto-rotating refresh tokens. Create an Intuit Developer app; run npm install and npm run auth for first-time browser authorization. QUICKBOOKS_TOKEN_STORE_PATH must be an absolute writable host environment path if overriding token storage.

Advanced configuration · claude code json example · MCP100 composed guide

claude code json example · MCP100 composed guide

{
  "mcpServers": {
    "quickbooks": {
      "args": [
        "/ABSOLUTE/PATH/quickbooks-online-mcp-server/dist/index.js"
      ],
      "command": "node",
      "env": {
        "QUICKBOOKS_CLIENT_ID": "YOUR_CLIENT_ID",
        "QUICKBOOKS_CLIENT_SECRET": "YOUR_CLIENT_SECRET",
        "QUICKBOOKS_DISABLE_DELETE": "true",
        "QUICKBOOKS_DISABLE_UPDATE": "true",
        "QUICKBOOKS_DISABLE_WRITE": "true",
        "QUICKBOOKS_ENVIRONMENT": "sandbox",
        "QUICKBOOKS_REALM_ID": "YOUR_REALM_ID",
        "QUICKBOOKS_REFRESH_TOKEN": "YOUR_REFRESH_TOKEN"
      }
    }
  }
}

Check connection
Suggested check
Validate MCP tools with a connected sandbox company; do not create invoices or alter production records.
Remove / uninstall / revoke
MCP100 setup guide
After unregistering, remove the project checkout only if no longer used; local OAuth token store is separate.
Distinguish client registration removal from software uninstall, persistent data deletion and provider OAuth/API-key revocation.
claude mcp remove quickbooks

Official Documentation & Sources

What it does

The QuickBooks MCP Server lets AI assistants access QuickBooks data via a standard interface. It uses the Model Context Protocol to expose QBO features as callable tools, enabling developers to build AI apps that fetch real-time QBO data through MCP. Access QuickBooks Online company financial information through MCP.

Capability: Finance & Payments
Resource type: MCP Server
Industry: Financial Services & Investing
Best fit: Access QuickBooks Online company financial information through MCP

Representative uses

Look up invoice and customer records
Review company accounts and transaction history
Use sandbox data to prototype accounting workflows
Access QuickBooks Online company financial information through MCP

Limitations

Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens.
Setup and runtime permissions are implementation- and account-specific; follow linked upstream documentation.
Repository pushed_at explicitly observed

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: OAuth 2.0 Intuit developer application; sandbox recommended first
Permissions: Scoped by connected account, local OS, and configuration; verify exact permissions before installation.
Data handling: Account-level financial records and Intuit OAuth tokens
Cost: may incur external API or infrastructure charges; unverified
Risk and cautions: Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens.

Access scope and cautions

Write actions: Not verified create accounting records update accounting records delete accounting records
Sensitive access: Account-level financial records and Intuit OAuth tokens
Risk level: high
Security notes: Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-09. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Look up invoice and customer records; Review company accounts and transaction history; Use sandbox data to prototype accounting workflows; Access QuickBooks Online company financial information through MCP.

What setup and authentication are documented?

A complete connection procedure is not verified. Client notes: Command provided only where first-party command or package existence is established; verify the client configuration against upstream documentation. Production OAuth redirect requires HTTPS; sandbox localhost callback is supported; refresh tokens may rotate. QUICKBOOKS_DISABLE_WRITE/UPDATE/DELETE may disable tool categories. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: OAuth 2.0 Intuit developer application; sandbox recommended first

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. The partial inventory lists: create accounting records; update accounting records; delete accounting records. Recorded permission context: Scoped by connected account, local OS, and configuration; verify exact permissions before installation.

What data-handling boundary should I consider?

Account-level financial records and Intuit OAuth tokens Recorded sensitive-access context: Account-level financial records and Intuit OAuth tokens.

What limitations and risks should I check before use?

Financial write/create/update/delete tools exist; category disable flags are documented; use sandbox and least-privilege tokens. Setup and runtime permissions are implementation- and account-specific; follow linked upstream documentation. Repository pushed_at explicitly observed. No exhaustive advisory or runtime review performed; never infer installation safety.