QBO MCP read-only

A Model Context Protocol server that lets an LLM agent query QuickBooks Online — never write to it.

Read-only

Multiple independent layers ensure nothing this server does can change your QuickBooks data. Custom queries are accepted only if they read; everything else is rejected before it leaves the server.

Connecting an MCP client

claude.ai (web)

Settings → Connectors → Add custom connector (Beta). Fill in:

Name

QBO

Remote MCP server URL

https://qbo-mcp.illumbria.com/mcp

OAuth Client ID / Secret

leave blank — dynamic client registration

On Add, claude.ai will register itself, walk you through QuickBooks login, and start using the connector. No secrets to copy by hand.

Available tools

Tool	Purpose
`qbo_company`	Company info
`qbo_search`	Find a Vendor / Customer / Item / Account / Class by substring
`qbo_query`	Custom `SELECT` QBQL (read-only)
`qbo_bills` · `qbo_invoices` · `qbo_purchases`	List with optional date range
`qbo_vendor_expenses`	Bills + purchases + totals for a vendor
`qbo_account_activity`	Line items posted to an account (Purchase + Bill + JournalEntry)
`qbo_missing_attachments`	A vendor's transactions that have no attached file
`qbo_attachment`	Metadata + signed download URL for attachments on a transaction
`qbo_pnl` · `qbo_balance_sheet`	P&L and balance-sheet reports
`qbo_ar_aging` · `qbo_ap_aging`	Aging summaries

How sign-in works

When you add the connector, your MCP client is walked through a standard OAuth handoff to QuickBooks. After you click Approve, your client gets an access token bound to the company you authorized. Your QuickBooks credentials and refresh tokens never leave this server, and your MCP client never sees them.