MCP server for QuickBooks Online — accounts, customers, invoices, bills, and reports.
QBO_CLIENT_SECRETOAuth apprequiredQuickBooks Online OAuth2 client secret
QBO_REFRESH_TOKENOAuth apprequiredOAuth2 refresh token for the connected QuickBooks company
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
qbo_expenses_list_purchasesNo description publishedThis tool published no description. Forge does not invent one.
qbo_expenses_list_billsNo description publishedThis tool published no description. Forge does not invent one.
qbo_expenses_get_purchaseNo description publishedThis tool published no description. Forge does not invent one.
qbo_expenses_get_billNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_profit_and_lossNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_balance_sheetNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_aged_receivablesNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_aged_payablesNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_customer_salesNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_cash_flowNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_trial_balanceNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_general_ledgerNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_customer_balanceNo description publishedThis tool published no description. Forge does not invent one.
qbo_reports_vendor_expensesNo description publishedThis tool published no description. Forge does not invent one.
qbo_attachables_uploadNo description publishedThis tool published no description. Forge does not invent one.
qbo_invoices_listNo description publishedThis tool published no description. Forge does not invent one.
qbo_invoices_sendNo description publishedThis tool published no description. Forge does not invent one.
qbo_navigateNo description publishedThis tool published no description. Forge does not invent one.
qbo_statusNo description publishedThis tool published no description. Forge does not invent one.
0 of 19 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for QuickBooks Online — accounts, customers, invoices, bills, and reports.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.