Permissions & commands — QuickBooks Online
This page is the technical reference for the QuickBooks connector: what access you grant when you connect, and the full list of MCP commands the connector exposes to your AI assistant. You don't configure any of this yourself — it's fixed by the connector — but it tells you exactly what to expect on the Intuit consent screen and what your assistant can (and cannot) do.
OAuth scope
When you connect, Intuit asks you to approve a single scope:
| Scope | What it covers |
|---|---|
com.intuit.quickbooks.accounting | Read access to the accounting data of the company you select — reports, sales, purchases, banking, and list data. |
QuickBooks doesn't offer granular read-only scopes, so the scope itself technically permits writes. The connector enforces read-only separately: write, update, and delete commands are never registered on the server, so they simply don't exist for your assistant to call. See Read-only access for how this fail-closed approach works.
Each connection is tied to the single QuickBooks company you pick during consent. To work with another company, add the connector again and select it there.
Available commands
These are the MCP commands (tools) your AI assistant can call. You never type these — you ask in plain English and the assistant picks the right command (see What you can ask).
Financial reports
get_profit_and_loss · get_balance_sheet · get_cash_flow · get_trial_balance ·
get_general_ledger · get_aged_receivables · get_aged_payables ·
get_customer_balance · get_customer_sales · get_vendor_balance · get_vendor_expenses
Sales & customers
search_customers · get_customer · search_invoices · read_invoice · get_invoice_pdf ·
search_estimates · get_estimate · search_credit_memos · get_credit_memo ·
search_sales_receipts · get_sales_receipt · search_refund_receipts · get_refund_receipt ·
search_payments · get_payment
Purchases & suppliers
search_vendors · get-vendor · search_bills · get-bill · search_bill_payments ·
get_bill_payment · search_purchases · get_purchase · search_purchase_orders ·
get_purchase_order · search_vendor_credits · get_vendor_credit
Banking & journals
search_deposits · get_deposit · search_transfers · get_transfer ·
search_journal_entries · get_journal_entry
Items, lists & settings
search_items · read_item · search_accounts · get_account · search_classes ·
get_class · search_departments · get_department · search_employees · get_employee ·
search_time_activities · get_time_activity · search_payment_methods · get_payment_method ·
search_terms · get_term · search_budgets · get_company_info ·
search_tax_agencies · get_tax_agency · search_tax_codes · get_tax_code ·
search_tax_rates · get_tax_rate · search_attachables · get_attachable
That's 70 read-only commands in total. The upstream Intuit server also defines create, update, and delete commands, but read-only deployments never register them — your assistant cannot see or call them.
Two commands (get-bill, get-vendor) use hyphens rather than underscores — that's how
they're named in Intuit's official server, reproduced here exactly.