Intuit QuickBooks
Intuit's own hosted QuickBooks connector for Claude. Anthropic lists 11 tools, all reports and imports — but Intuit's documentation describes creating, sending, deleting and duplicating invoices and estimates, and emailing payment links to customers. The listing is stale by fourteen documented capabilities.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Intuit QuickBooks via MCP
https://ai-inc.quickbooks.intuit.com/v1/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Intuit QuickBooks Tools & Capabilities (11)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- The tool listing is stale by fourteen documented capabilities, all of them writes, sends or deletes. Intuit's help article documents invoice and estimate creation, sending, deletion and duplication, payment links, and customer and item creation. None has a name in the 11.
- We could not verify the auth posture, and nothing about it is reachable. Every request to
ai-inc.quickbooks.intuit.com— the MCP endpoint, the host root, and four.well-knownpaths — returned an Akamai HTTP 403 "Access Denied" page. Bodies differed only where the path is echoed back. This is an edge rule blocking non-browser clients, not an authentication challenge, so we recordedauthVerified: false. No RFC 9728 descriptor, no authorization-server metadata and no scope list could be read. - We cannot say what OAuth scopes apply, or whether any boundary separates reads from writes. The only boundary Intuit documents is a confirmation prompt before deleting an invoice or estimate.
- Anthropic's own metadata for this entry is internally inconsistent. The snapshot records
is_authless: truealongside permissions of "Read and write", and an open issue on Anthropic's connector tracker attributes a broken OAuth flow to exactly that flag. - US customers only, per Intuit's help article. Intuit publishes no timeline for other regions.
- Intuit publishes no tool enumeration. Its documentation is capability prose and example prompts. There is no second list of names to diff against the directory's — only a second list of capabilities, which is what the reverse-honeycomb table above uses.
- No parameter schemas or safety annotations are available. The blocked endpoint means no
tools/listresponse, so nothing here reportsreadOnlyHintordestructiveHint. - Intuit disclaims the output where it matters most. Its help article states that results in the no-subscription mode are "based entirely on the information you provide" and advises consulting a qualified accountant or financial advisor for decisions with financial or legal implications.
- Emailed documents cannot be recalled. Sending an invoice, estimate or payment link reaches a third party immediately, and Intuit documents no confirmation gate on sends — only on deletes.
Frequently asked questions
Yes. Intuit's help article documents a prompt naming an invoice number and a customer email address, and states QuickBooks delivers the invoice to the customer by email. It documents the same for estimates, and a one-time payment link sent to a customer address. No tool name in Anthropic's 11-name listing carries a send verb, so the listing does not reveal this.
Yes, directly. Intuit's help article states that the import-transactions use case categorizes and imports transactions into your General Ledger. That is a posted accounting record with audit consequences, not a report. It is one of the few consequential writes the tool listing does surface, as quickbooks-transaction-import.
More than the 11 Anthropic lists. Intuit's own help article documents fourteen further capabilities the listing does not name, including creating, updating, sending, deleting and duplicating invoices and estimates, payment links, and adding customers and products. Eleven is a stale floor, not a total, and the gap skews toward writes.
Yes, with a confirmation step. Intuit's help article documents both deleting an invoice and deleting an estimate, and states that destructive actions such as deleting an invoice or estimate require your confirmation before QuickBooks makes any changes. No delete verb appears anywhere in Anthropic's 11-name tool listing.
No, they are two separate projects. This page covers Intuit's hosted remote connector at ai-inc.quickbooks.intuit.com. Intuit also publishes quickbooks-online-mcp-server on GitHub, an Apache-2.0 local stdio server advertising 145 tools across 29 entity types. The two share no tool names at all, and only the local one books journal entries.
Because the connector is registered as authless. Anthropic's directory snapshot records is_authless true for this entry while also recording permissions as Read and write. An open issue on Anthropic's connector tracker reports that Claude's start-auth endpoint short-circuits, reaching no Intuit domain, after which every tool call fails authentication.
No, but without one it reads nothing. Intuit documents a no-subscription mode where you upload CSVs, PDFs or images, or paste transactions into the chat, and Claude produces a profit and loss statement, cash flow summary or benchmark from that alone. Intuit recommends at least ten transactions covering a one-month period.
Not yet. Intuit's help article opens with a note stating the QuickBooks connector for Claude is currently available to US customers only, and that Intuit is working to bring it to other regions. Intuit gives no date. The article was last updated 2026-08-05 according to its own byline.
Sources
- Intuit help article, "Use Claude to enter transactions and get insights in QuickBooks" (retrieved 2026-08-22). Article byline states last updated 2026-08-05.
quickbooks.intuit.com/robots.txtpermits this path and carries noContent-Signaldirective. · retrieved 2026-08-22 - Intuit open-source QuickBooks MCP server, a separate project (retrieved 2026-08-22). Apache-2.0, created 2025-10-06, README advertises 145 tools across 29 entity types. · retrieved 2026-08-22
- Anthropic connector issue tracker, "Intuit QuickBooks connector start-auth skips OAuth" (retrieved 2026-08-22). Open at time of retrieval. · retrieved 2026-08-22
- Meridian QuickBooks Connector FAQ, for the third-party comparison (retrieved 2026-08-22) · retrieved 2026-08-22
- Live endpoint probe:
initializePOST and four.well-knownpaths againsthttps://ai-inc.quickbooks.intuit.com, all HTTP 403 Akamai "Access Denied" (2026-08-22) · retrieved 2026-08-22 - QuickBooks machine-readable index,
llms.txt(retrieved 2026-08-22). Contains no MCP or connector content;llms-full.txtis not served. · retrieved 2026-08-22 - Anthropic Connectors Directory entry — , read from our directory snapshot dated 2026-08-16 · retrieved 2026-08-16
- Intuit privacy statement — · QuickBooks support
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- Intuit QuickBooks
- Tools
- 11
- Domain
- ai-inc.quickbooks.intuit.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.