Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

QuickBooks Online

OCI · GHCR.IO/WYRE-TECHNOLOGY/QBO-MCP:V1.6.4

MCP server for QuickBooks Online — accounts, customers, invoices, bills, and reports.

0 this week 49 Trust /100

Last scanned (5 hours ago)

Scores higher than 73% of OCI servers

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency19
Schema Quality & AI Usability85
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 15575 tokens (~116/item across 134 items; 133 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
  • Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "qbo_invoices_send" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 134 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
  • Supports UI / widget rendering.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 −2

    No change was recorded against any check on this day. Stability & Change Management went from 97 to 80.

  • 10 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 4 Oct 26 +1
    • Stability: 0.97 → pass security
  • 2 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 30 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Sept 26 −3
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 17 Oct 2026 · Analysed oci/ghcr.io/wyre-technology/qbo-mcp:v1.6.4

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 133 exposed · ~15,557 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
qbo_sales_receipts_create ~208

Create a new SalesReceipt record in QuickBooks Online.

NameTypeReqDescription
BillEmailobject–Customer email, e.g. {"Address": "customer@example.com"}
CustomerMemoobject–Memo visible to customer, e.g. {"value": "Thank you"}
CustomerRefobjectyesCustomer reference, e.g. {"value": "123"}
DepositToAccountRefobject–Account where the payment is deposited, e.g. {"value": "35"}. Required unless using Undeposited Funds default.
DocNumberstring–Receipt number
LinearrayyesSale lines: {Amount, DetailType: "SalesItemLineDetail", SalesItemLineDetail: {ItemRef}}.
PaymentMethodRefobject–Payment method, e.g. {"value": "1"}
PrivateNotestring–Private internal note
TxnDatestring–Sale date (YYYY-MM-DD)

No output schema declared.

No examples provided.

qbo_sales_receipts_get ~36

Get a specific SalesReceipt record by its ID.

NameTypeReqDescription
salesReceiptIdstringyesThe unique SalesReceipt ID

No output schema declared.

No examples provided.

qbo_sales_receipts_list ~118

List SalesReceipt records in QuickBooks Online with pagination and optional TxnDate range.

NameTypeReqDescription
endDatestring–Filter to records on or before this TxnDate (YYYY-MM-DD)
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startDatestring–Filter to records on or after this TxnDate (YYYY-MM-DD)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_sales_receipts_update ~263

Sparse-update an existing SalesReceipt record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
BillEmailobject–Customer email, e.g. {"Address": "customer@example.com"}
CustomerMemoobject–Memo visible to customer, e.g. {"value": "Thank you"}
CustomerRefobjectyesCustomer reference, e.g. {"value": "123"}
DepositToAccountRefobject–Account where the payment is deposited, e.g. {"value": "35"}. Required unless using Undeposited Funds default.
DocNumberstring–Receipt number
LinearrayyesSale lines: {Amount, DetailType: "SalesItemLineDetail", SalesItemLineDetail: {ItemRef}}.
PaymentMethodRefobject–Payment method, e.g. {"value": "1"}
PrivateNotestring–Private internal note
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
TxnDatestring–Sale date (YYYY-MM-DD)
salesReceiptIdstringyesThe SalesReceipt ID to update

No output schema declared.

No examples provided.

qbo_status ~16

Show credentials status and available domains

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

qbo_tax_codes_get ~35

Get a specific TaxCode record by its ID.

NameTypeReqDescription
taxCodeIdstringyesThe unique TaxCode ID

No output schema declared.

No examples provided.

qbo_tax_codes_list ~67

List TaxCode records in QuickBooks Online with pagination.

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_tax_codes_search ~82

Search TaxCode records by Name (LIKE match).

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)
termstringyesSearch term matched against Name with LIKE '%term%'

No output schema declared.

No examples provided.

qbo_tax_rates_get ~35

Get a specific TaxRate record by its ID.

NameTypeReqDescription
taxRateIdstringyesThe unique TaxRate ID

No output schema declared.

No examples provided.

qbo_tax_rates_list ~67

List TaxRate records in QuickBooks Online with pagination.

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_tax_rates_search ~82

Search TaxRate records by Name (LIKE match).

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)
termstringyesSearch term matched against Name with LIKE '%term%'

No output schema declared.

No examples provided.

qbo_terms_create ~103

Create a new Term record in QuickBooks Online.

NameTypeReqDescription
Activeboolean–Whether the term is active
DiscountDaysnumber–Days within which the discount applies
DiscountPercentnumber–Early-payment discount percent (for 2/10 Net 30 style terms)
DueDaysnumber–Number of days from invoice date to due date
NamestringyesTerm name, e.g. "Net 30"

No output schema declared.

No examples provided.

qbo_terms_get ~31

Get a specific Term record by its ID.

NameTypeReqDescription
termIdstringyesThe unique Term ID

No output schema declared.

No examples provided.

qbo_terms_list ~65

List Term records in QuickBooks Online with pagination.

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_terms_search ~80

Search Term records by Name (LIKE match).

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)
termstringyesSearch term matched against Name with LIKE '%term%'

No output schema declared.

No examples provided.

qbo_terms_update ~156

Sparse-update an existing Term record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
Activeboolean–Whether the term is active
DiscountDaysnumber–Days within which the discount applies
DiscountPercentnumber–Early-payment discount percent (for 2/10 Net 30 style terms)
DueDaysnumber–Number of days from invoice date to due date
NamestringyesTerm name, e.g. "Net 30"
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
termIdstringyesThe Term ID to update

No output schema declared.

No examples provided.

qbo_time_activities_create ~275

Create a new TimeActivity record in QuickBooks Online.

NameTypeReqDescription
BillableStatusstring–Billable status: "Billable", "NotBillable", or "HasBeenBilled"
CustomerRefobject–Customer the time is billed to (optional)
Descriptionstring–Activity description
EmployeeRefobject–Employee reference when NameOf is "Employee", e.g. {"value": "42"}
EndTimestring–End time (ISO 8601), alternative to Hours+Minutes
HourlyRatenumber–Hourly billing rate
Hoursnumber–Duration hours portion
ItemRefobject–Service item the time is logged against, e.g. {"value": "7"}
Minutesnumber–Duration minutes portion
NameOfstringyesWhose time this is: "Employee" or "Vendor"
StartTimestring–Start time (ISO 8601), alternative to Hours+Minutes
Taxableboolean–Whether the time is taxable when billed
TxnDatestringyesActivity date (YYYY-MM-DD)
VendorRefobject–Vendor reference when NameOf is "Vendor", e.g. {"value": "56"}

No output schema declared.

No examples provided.

qbo_time_activities_get ~36

Get a specific TimeActivity record by its ID.

NameTypeReqDescription
timeActivityIdstringyesThe unique TimeActivity ID

No output schema declared.

No examples provided.

qbo_time_activities_list ~118

List TimeActivity records in QuickBooks Online with pagination and optional TxnDate range.

NameTypeReqDescription
endDatestring–Filter to records on or before this TxnDate (YYYY-MM-DD)
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startDatestring–Filter to records on or after this TxnDate (YYYY-MM-DD)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_time_activities_update ~330

Sparse-update an existing TimeActivity record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
BillableStatusstring–Billable status: "Billable", "NotBillable", or "HasBeenBilled"
CustomerRefobject–Customer the time is billed to (optional)
Descriptionstring–Activity description
EmployeeRefobject–Employee reference when NameOf is "Employee", e.g. {"value": "42"}
EndTimestring–End time (ISO 8601), alternative to Hours+Minutes
HourlyRatenumber–Hourly billing rate
Hoursnumber–Duration hours portion
ItemRefobject–Service item the time is logged against, e.g. {"value": "7"}
Minutesnumber–Duration minutes portion
NameOfstringyesWhose time this is: "Employee" or "Vendor"
StartTimestring–Start time (ISO 8601), alternative to Hours+Minutes
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
Taxableboolean–Whether the time is taxable when billed
TxnDatestringyesActivity date (YYYY-MM-DD)
VendorRefobject–Vendor reference when NameOf is "Vendor", e.g. {"value": "56"}
timeActivityIdstringyesThe TimeActivity ID to update

No output schema declared.

No examples provided.

qbo_transfers_create ~94

Create a new Transfer record in QuickBooks Online.

NameTypeReqDescription
AmountnumberyesAmount transferred
FromAccountRefobjectyesSource account, e.g. {"value": "35"}
PrivateNotestring–Memo
ToAccountRefobjectyesDestination account, e.g. {"value": "37"}
TxnDatestring–Transfer date (YYYY-MM-DD)

No output schema declared.

No examples provided.

qbo_transfers_get ~32

Get a specific Transfer record by its ID.

NameTypeReqDescription
transferIdstringyesThe unique Transfer ID

No output schema declared.

No examples provided.

qbo_transfers_list ~116

List Transfer records in QuickBooks Online with pagination and optional TxnDate range.

NameTypeReqDescription
endDatestring–Filter to records on or before this TxnDate (YYYY-MM-DD)
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startDatestring–Filter to records on or after this TxnDate (YYYY-MM-DD)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_transfers_update ~147

Sparse-update an existing Transfer record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
AmountnumberyesAmount transferred
FromAccountRefobjectyesSource account, e.g. {"value": "35"}
PrivateNotestring–Memo
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
ToAccountRefobjectyesDestination account, e.g. {"value": "37"}
TxnDatestring–Transfer date (YYYY-MM-DD)
transferIdstringyesThe Transfer ID to update

No output schema declared.

No examples provided.

qbo_vendor_credits_create ~152

Create a new VendorCredit record in QuickBooks Online.

NameTypeReqDescription
APAccountRefobject–Accounts Payable account reference, e.g. {"value": "33"}
DocNumberstring–Reference number from the vendor
LinearrayyesArray of credit lines, same shape as Bill.Line: {Amount, DetailType: "AccountBasedExpenseLineDetail" | "ItemBasedExpenseLineDetail", ...}.
PrivateNotestring–Private note
TxnDatestring–Credit date (YYYY-MM-DD); defaults to today if omitted
VendorRefobjectyesVendor reference, e.g. {"value": "56"} (required)

No output schema declared.

No examples provided.

qbo_vendor_credits_get ~36

Get a specific VendorCredit record by its ID.

NameTypeReqDescription
vendorCreditIdstringyesThe unique VendorCredit ID

No output schema declared.

No examples provided.

qbo_vendor_credits_list ~118

List VendorCredit records in QuickBooks Online with pagination and optional TxnDate range.

NameTypeReqDescription
endDatestring–Filter to records on or before this TxnDate (YYYY-MM-DD)
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startDatestring–Filter to records on or after this TxnDate (YYYY-MM-DD)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_vendor_credits_update ~207

Sparse-update an existing VendorCredit record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
APAccountRefobject–Accounts Payable account reference, e.g. {"value": "33"}
DocNumberstring–Reference number from the vendor
LinearrayyesArray of credit lines, same shape as Bill.Line: {Amount, DetailType: "AccountBasedExpenseLineDetail" | "ItemBasedExpenseLineDetail", ...}.
PrivateNotestring–Private note
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
TxnDatestring–Credit date (YYYY-MM-DD); defaults to today if omitted
VendorRefobjectyesVendor reference, e.g. {"value": "56"} (required)
vendorCreditIdstringyesThe VendorCredit ID to update

No output schema declared.

No examples provided.

qbo_vendors_create ~188

Create a new Vendor record in QuickBooks Online.

NameTypeReqDescription
BillAddrobject–Billing address object with Line1, City, CountrySubDivisionCode, PostalCode
CompanyNamestring–Company name
DisplayNamestringyesDisplay name for the vendor (required, must be unique)
FamilyNamestring–Last name
GivenNamestring–First name
PrimaryEmailAddrobject–Primary email address object, e.g. {"Address": "vendor@example.com"}
PrimaryPhoneobject–Primary phone object, e.g. {"FreeFormNumber": "555-1234"}
TaxIdentifierstring–Tax ID (e.g. EIN or SSN) used for 1099 reporting
Vendor1099boolean–Whether this vendor receives a 1099 at year end

No output schema declared.

No examples provided.

qbo_vendors_get ~32

Get a specific Vendor record by its ID.

NameTypeReqDescription
vendorIdstringyesThe unique Vendor ID

No output schema declared.

No examples provided.

qbo_vendors_list ~66

List Vendor records in QuickBooks Online with pagination.

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)

No output schema declared.

No examples provided.

qbo_vendors_search ~83

Search Vendor records by DisplayName (LIKE match).

NameTypeReqDescription
maxResultsnumber–Maximum number of results to return (default: 100, max: 1000)
startPositionnumber–Starting position for pagination (1-based, default: 1)
termstringyesSearch term matched against DisplayName with LIKE '%term%'

No output schema declared.

No examples provided.

qbo_vendors_update ~241

Sparse-update an existing Vendor record. Only provided fields are changed; Id and SyncToken are required.

NameTypeReqDescription
BillAddrobject–Billing address object with Line1, City, CountrySubDivisionCode, PostalCode
CompanyNamestring–Company name
DisplayNamestringyesDisplay name for the vendor (required, must be unique)
FamilyNamestring–Last name
GivenNamestring–First name
PrimaryEmailAddrobject–Primary email address object, e.g. {"Address": "vendor@example.com"}
PrimaryPhoneobject–Primary phone object, e.g. {"FreeFormNumber": "555-1234"}
SyncTokenstringyesCurrent SyncToken of the record (required by QBO for sparse updates; fetch the record first to obtain it)
TaxIdentifierstring–Tax ID (e.g. EIN or SSN) used for 1099 reporting
Vendor1099boolean–Whether this vendor receives a 1099 at year end
vendorIdstringyesThe Vendor ID to update

No output schema declared.

No examples provided.

Install

How do I install the QuickBooks Online MCP server?

QuickBooks Online runs locally as a container image, launched with docker run --rm -i -e QBO_CLIENT_ID -e QBO_CLIENT_SECRET -e QBO_REFRESH_TOKEN -e QBO_REALM_ID -e QBO_ENVIRONMENT -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/qbo-mcp:v1.6.4. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/wyre-technology/qbo-mcp:v1.6.4

# add to Claude Code
claude mcp add wyre-technology-qbo-mcp -- docker run --rm -i -e QBO_CLIENT_ID -e QBO_CLIENT_SECRET -e QBO_REFRESH_TOKEN -e QBO_REALM_ID -e QBO_ENVIRONMENT -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/qbo-mcp:v1.6.4

This image reads QBO_CLIENT_ID, QBO_CLIENT_SECRET, QBO_REFRESH_TOKEN, QBO_REALM_ID, QBO_ENVIRONMENT, MCP_TRANSPORT, AUTH_MODE and LOG_LEVEL. Set them in your client's env block for this server; docker run -e passes each one through to the container.

Common questions

What is the QuickBooks Online MCP server?

QuickBooks Online is an MCP server listed in the public MCP registry as io.github.wyre-technology/qbo-mcp. MCP server for QuickBooks Online, accounts, customers, invoices, bills, and reports. This page covers its container image (ghcr.io/wyre-technology/qbo-mcp:v1.6.4).

Is the QuickBooks Online MCP server safe to use?

QuickBooks Online scores 49 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the QuickBooks Online MCP server expose?

QuickBooks Online exposes 133 tools: qbo_navigate, qbo_status, qbo_customers_list, qbo_customers_get, qbo_customers_create, and 128 more. Their descriptions and schemas cost roughly 15,557 tokens of context every time the server is loaded.

Is the QuickBooks Online MCP server still maintained?

QuickBooks Online is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the QuickBooks Online MCP server under?

QuickBooks Online declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.