Repository navigation
Revert "quickbooks online native mcp" - #643
Merged
djiang-jq merged 1 commit intoOct 16, 2026
Merged
Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.
Bugbot Autofix prepared a fix for the issue found in the latest run.
- ✅ Fixed: Version downgrade skips marketplace updates
- Bumped quickbooks-online from the reverted 1.0.0 to 1.1.1 and recorded the native MCP rollback in the changelog so installs that already received 1.1.0 pick up the removal of mcp.json.
Or push these changes by commenting:
@cursor push e6083cec87
Preview (e6083cec87)
diff --git a/third_party/quickbooks-online/.cursor-plugin/plugin.json b/third_party/quickbooks-online/.cursor-plugin/plugin.json
--- a/third_party/quickbooks-online/.cursor-plugin/plugin.json
+++ b/third_party/quickbooks-online/.cursor-plugin/plugin.json
@@ -1,7 +1,7 @@
{
"name": "quickbooks-online",
"displayName": "QuickBooks Online",
- "version": "1.0.0",
+ "version": "1.1.1",
"minClientVersions": {
"cursor": "3.19.0"
},
diff --git a/third_party/quickbooks-online/CHANGELOG.md b/third_party/quickbooks-online/CHANGELOG.md
--- a/third_party/quickbooks-online/CHANGELOG.md
+++ b/third_party/quickbooks-online/CHANGELOG.md
@@ -2,6 +2,15 @@
All notable changes to this plugin will be documented here.
+## 1.1.1
+
+- Removed `mcp.json` and the `mcpServers` manifest entry shipped in 1.1.0. The plugin no longer declares Intuit's hosted HTTP MCP server at `https://mcp-e2e.quickbooks.intuit.com/mcp`; the server is Cursor-side again, so installing the plugin is the whole configuration.
+
+## 1.1.0
+
+- Added `mcp.json`: the plugin now declares Intuit's hosted HTTP MCP server at `https://mcp-e2e.quickbooks.intuit.com/mcp` instead of relying on a Cursor-side server definition.
+- Auth is unchanged in shape — Cursor-managed OAuth against Intuit, authorized per company file — but it is now the native OAuth client, so existing installs have to reauthorize.
+
## 1.0.0 — initial release
- Added the `quickbooks-online` plugin, the opt-in for the QuickBooks Online MCP server that Cursor hosts and credentials.You can send follow-ups to the cloud agent here.
Reviewed by Cursor Bugbot for commit ed4397c. Configure here.
| "name": "quickbooks-online", | ||
| "displayName": "QuickBooks Online", | ||
| "version": "1.1.0", | ||
| "version": "1.0.0", |
There was a problem hiding this comment.
Version downgrade skips marketplace updates
Medium Severity · Potential Edge Case
Rewinding version from 1.1.0 to 1.0.0 can leave the marketplace on the already-published higher version. Installs that received 1.1.0 keep the native mcp.json this revert deletes, including the Intuit mcp-e2e URL, so the rollback never reaches them.
Reviewed by Cursor Bugbot for commit ed4397c. Configure here.
This was referenced Oct 16, 2026
Draft
djiang-jq
added a commit
that referenced
this pull request
Oct 16, 2026
Relands #642, which was reverted by #643. The listing is gating-only again after the revert: it carries no server definition, so an install produces no mcp_server row and native MCP has nothing to point at. Declare the hosted HTTP endpoint the way Square does, so the marketplace index exposes a type === "HTTP" server for the connector. Restores the 1.1.0 tree exactly as it was published, so the version keeps meaning the same content. Co-authored-by: Danny Jiang <[email protected]>
This was referenced Oct 16, 2026
Draft
djiang-jq
added a commit
that referenced
this pull request
Oct 17, 2026
Relands #650, which was reverted by #651, which itself relanded #642, reverted by #643. The listing is gating-only again after the revert: it carries no server definition, so an install produces no mcp_server row and native MCP has nothing to point at. Declare the hosted HTTP endpoint the way Square does, so the marketplace index exposes a type === "HTTP" server for the connector. Restores the 1.1.0 tree unchanged, including the mcp-e2e host that Bugbot flagged as non-production on #650. That host is carried over deliberately rather than silently corrected, since it is the value the paired everysphere override expects. Co-authored-by: Danny Jiang <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



Reverts #642
Note
Medium Risk
Reverts how the connector is wired (hosted Intuit MCP vs Cursor-side server), which can change connection behavior and may require users who adopted 1.1.0 to reconfigure or reauthorize.
Overview
Reverts the 1.1.0 “native MCP” integration and restores the 1.0.0 model where QuickBooks Online is a Cursor-hosted MCP opt-in with no plugin-bundled server definition.
plugin.jsondrops themcpServerspointer and rolls the version back to 1.0.0.mcp.jsonis removed (it had pointed at Intuit’s HTTP endpointhttps://mcp-e2e.quickbooks.intuit.com/mcp). README and CHANGELOG are updated to match: no localmcp.json, server only available inside Cursor, and the 1.1.0 notes about reauthorization under the native OAuth client are removed.Reviewed by Cursor Bugbot for commit ed4397c. Bugbot is set up for automated code reviews on this repo. Configure here.