Qbo Multicompany MCP Server

What the code does

We read the source, 1 d ago · rules 995398eba69f

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

    return subprocess.run(  # noqa: S603 - fixed argv, no shell

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    return subprocess.run(  # noqa: S603 - fixed argv, no shell

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add qbo-multicompany-mcp -- uvx qbo-multicompany-mcp

{
  "mcpServers": {
    "qbo-multicompany-mcp": {
      "command": "uvx",
      "args": [
        "qbo-multicompany-mcp"
      ]
    }
  }
}

[mcp_servers.qbo-multicompany-mcp]
command = "uvx"
args = ["qbo-multicompany-mcp"]

{
  "mcpServers": {
    "qbo-multicompany-mcp": {
      "command": "uvx",
      "args": [
        "qbo-multicompany-mcp"
      ]
    }
  }
}

{
  "servers": {
    "qbo-multicompany-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "qbo-multicompany-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: QBO_CLIENT_ID (Client ID of your own Intuit app, here or in the --env-file file. A value set here, even a blank one, overrides --env-file), QBO_CLIENT_SECRET (Client Secret of your own Intuit app, here or in the --env-file file. A value set here, even a blank one, overrides --env-file), QBO_ENV (sandbox or production; sandbox when unset. A value set here, even a blank one, overrides --env-file), QBO_TOKEN_KEY_SOURCE (Where the token store key lives: keychain (the default, macOS only) or env (QBO_TOKEN_KEY). A value set here, even a blank one, overrides --env-file), QBO_TOKEN_KEY (The store key when QBO_TOKEN_KEY_SOURCE=env: 32 bytes as 44 characters of base64 or 64 of hex. A value set here, even a blank one, overrides --env-file), QBO_TOKEN_STORE (Token store directory. Defaults to $XDG_STATE_HOME/qbo-multicompany-mcp, else ~/.local/state/qbo-multicompany-mcp. A git working copy or a cloud-sync folder is refused. A value set here, even a blank one, overrides --env-file), QBO_ALLOW_DOCUMENTS (Set to 1 to register get_attachment, which fetches nothing until QBO_ATTACHMENT_HOSTS pins a host. Off by default. A value set here, even a blank one, overrides --env-file), QBO_ATTACHMENT_HOSTS (Comma-separated storage hosts attachment downloads may contact. Empty refuses every download. A value set here, even a blank one, overrides --env-file).