Skip to content

quickbooks online native mcp - #642

Merged
djiang-jq merged 2 commits into
cursor:mainfrom
djiang-jq:cursor/quickbooks-online-native-mcp-json-fbc4
Oct 16, 2026
Merged

djiang-jq merged 2 commits into
cursor:mainfrom
djiang-jq:cursor/quickbooks-online-native-mcp-json-fbc4

Conversation

@djiang-jq

@djiang-jq djiang-jq commented Oct 16, 2026 •

Copy link
Copy Markdown
Collaborator

Note

Medium Risk
Changes integration wiring and OAuth client behavior for a finance connector, requiring reauthorization for existing users; the configured URL uses an -e2e host that may be non-production.

Overview
QuickBooks Online moves from a Cursor-only MCP server to Intuit’s hosted HTTP endpoint, matching how other integration plugins ship mcp.json.

The plugin is bumped to 1.1.0 and wires mcpServers to a new mcp.json that points at https://mcp-e2e.quickbooks.intuit.com/mcp. README and CHANGELOG now describe Intuit as the server host instead of a server with no local definition.

OAuth is still Cursor-managed and per company file, but the client is now the native OAuth client, so existing installs must reauthorize after upgrading.

Reviewed by Cursor Bugbot for commit f506741. Bugbot is set up for automated code reviews on this repo. Configure here.

cursoragent and others added 2 commits October 15, 2026 20:37
The listing was gating-only: it carried no server definition, so an
install produced no mcp_server row and native MCP had nothing to point
at. Declare the hosted HTTP endpoint the way Square does, so the
marketplace index exposes a type === "HTTP" server for the connector.

Bumps the plugin to 1.1.0 and updates the README and CHANGELOG, which
both documented the absent mcp.json as deliberate.

Co-authored-by: Danny Jiang <[email protected]>
@djiang-jq
djiang-jq merged commit f13e501 into cursor:main Oct 16, 2026
2 checks passed

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is ON, but it could not run because the branch was deleted or merged before autofix could start.

Reviewed by Cursor Bugbot for commit f506741. Configure here.

"mcpServers": {
"quickbooks-online": {
"type": "http",
"url": "https://mcp-e2e.quickbooks.intuit.com/mcp"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Staging MCP URL used in production

High Severity · Logic Bug

mcp.json points at mcp-e2e.quickbooks.intuit.com, Intuit's end-to-end test host, not the documented production MCP at mcp.quickbooks.intuit.com. Marketplace installs would hit a non-production environment instead of live QuickBooks Online.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit f506741. Configure here.

djiang-jq added a commit that referenced this pull request Oct 16, 2026
Relands #642, which was reverted by #643.

The listing is gating-only again after the revert: it carries no server
definition, so an install produces no mcp_server row and native MCP has
nothing to point at. Declare the hosted HTTP endpoint the way Square
does, so the marketplace index exposes a type === "HTTP" server for the
connector.

Restores the 1.1.0 tree exactly as it was published, so the version
keeps meaning the same content.

Co-authored-by: Danny Jiang <[email protected]>
djiang-jq added a commit that referenced this pull request Oct 17, 2026
Relands #650, which was reverted by #651, which itself relanded #642,
reverted by #643.

The listing is gating-only again after the revert: it carries no server
definition, so an install produces no mcp_server row and native MCP has
nothing to point at. Declare the hosted HTTP endpoint the way Square
does, so the marketplace index exposes a type === "HTTP" server for the
connector.

Restores the 1.1.0 tree unchanged, including the mcp-e2e host that
Bugbot flagged as non-production on #650. That host is carried over
deliberately rather than silently corrected, since it is the value the
paired everysphere override expects.

Co-authored-by: Danny Jiang <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants