Skip to main content
Guide2 min read

QuickBooks MCP server: connect accounting to Claude (2026)

Let an AI read QuickBooks invoices, customers and reports. Set up a QuickBooks MCP server via OAuth — start read-only and sandbox. Setup and safety.

A QuickBooks MCP server lets an AI client query your accounting data — invoices, customers, expenses, P&L and balance reports — so you can ask Claude to summarise finances or find an invoice. Community servers wrap the Intuit QuickBooks Online API over OAuth. Here's the setup, safely.

Not financial or tax advice. This surfaces your books for analysis; verify anything important against QuickBooks itself, and keep a human in the loop for any write action.

Step 1 — create an Intuit developer app

QuickBooks Online uses OAuth 2.0. In the Intuit Developer portal, create an app to get a Client ID and Client Secret, set the redirect URI, and start in the sandbox company before touching real books. Note your Realm (company) ID.

Step 2 — configure the client

Community servers vary; a representative shape:

{
  "mcpServers": {
    "quickbooks": {
      "command": "npx",
      "args": ["-y", "<community-quickbooks-mcp-package>"],
      "env": {
        "QUICKBOOKS_CLIENT_ID": "your_client_id",
        "QUICKBOOKS_CLIENT_SECRET": "your_client_secret",
        "QUICKBOOKS_REALM_ID": "your_realm_id",
        "QUICKBOOKS_ENVIRONMENT": "sandbox"
      }
    }
  }
}

Swap in the exact package from the repo you vet; complete the OAuth flow on first run. Restart the client; see MCP config file location.

Verify

In sandbox, ask: "List my 10 most recent invoices and total outstanding." Real (sandbox) data back confirms it works; switch to production only once you trust it.

Common problems

  • OAuth errors — redirect URI mismatch, or sandbox vs production mismatch.
  • 401 after a while — tokens expire; the server must refresh them.
  • No tools in client — see Cursor MCP not working.

Security

Accounting data is highly sensitive. Start read-only and in sandbox, grant least privilege, never let an AI post transactions unsupervised, and keep secrets out of shared config. See MCP security best practices and how to vet an MCP server.

Going further

QuickBooks pairs with a spreadsheet server for reporting. Compare with Xero MCP. Browse the finance category or curated loadouts.

Loadout

Build your AI agent loadout

The directory of MCP servers and AI agents that actually work. Pick the right loadout for Slack, Postgres, GitHub, Figma and 20+ integrations — with install commands ready to paste into Claude Desktop, Cursor or your own stack.

© 2026 Loadout. Built on Angular 21 SSR.