Skip to content

feat(quickbooks-online): declare Intuit's HTTP MCP server - #650

Merged
djiang-jq merged 1 commit into
cursor:mainfrom
djiang-jq:cursor/quickbooks-online-native-mcp-reland-fbc4
Oct 16, 2026
Merged

djiang-jq merged 1 commit into
cursor:mainfrom
djiang-jq:cursor/quickbooks-online-native-mcp-reland-fbc4

Conversation

@djiang-jq

@djiang-jq djiang-jq commented Oct 16, 2026 •

Copy link
Copy Markdown
Collaborator

Relands #642, which was reverted by #643.

The listing is gating-only again after the revert: it carries no server definition, so an install produces no mcp_server row and native MCP has nothing to point at. Declare the hosted HTTP endpoint the way Square does, so the marketplace index exposes a type === "HTTP" server for the connector.

Restores the 1.1.0 tree exactly as it was published, so the version keeps meaning the same content.


Note

Medium Risk
Touches OAuth integration and forces reauthorization for existing installs; otherwise limited to plugin metadata and MCP wiring.

Overview
Restores QuickBooks Online plugin 1.1.0 by declaring Intuit’s hosted HTTP MCP endpoint in-repo instead of a Cursor-only server definition, so marketplace installs get a native type: "http" MCP server (same pattern as other third-party connectors).

Adds mcp.json pointing at https://mcp-e2e.quickbooks.intuit.com/mcp, wires it via plugin.json (mcpServers), bumps version to 1.1.0, and updates README / CHANGELOG to describe Intuit-hosted MCP and OAuth handled by Cursor.

Existing users must reauthorize after upgrade because OAuth moves to the native client; auth shape (per–company-file Intuit OAuth) is unchanged.

Reviewed by Cursor Bugbot for commit 4d5a919. Bugbot is set up for automated code reviews on this repo. Configure here.

Relands cursor#642, which was reverted by cursor#643.

The listing is gating-only again after the revert: it carries no server
definition, so an install produces no mcp_server row and native MCP has
nothing to point at. Declare the hosted HTTP endpoint the way Square
does, so the marketplace index exposes a type === "HTTP" server for the
connector.

Restores the 1.1.0 tree exactly as it was published, so the version
keeps meaning the same content.

Co-authored-by: Danny Jiang <djiang-jq@users.noreply.github.com>
@djiang-jq
djiang-jq merged commit 871b276 into cursor:main Oct 16, 2026
2 checks passed

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is ON, but it could not run because the branch was deleted or merged before autofix could start.

Reviewed by Cursor Bugbot for commit 4d5a919. Configure here.

"mcpServers": {
"quickbooks-online": {
"type": "http",
"url": "https://mcp-e2e.quickbooks.intuit.com/mcp"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

MCP URL uses e2e host

High Severity · Logic Bug

The new mcp.json declares https://mcp-e2e.quickbooks.intuit.com/mcp. Intuit documents the hosted production MCP as https://mcp.quickbooks.intuit.com/mcp, and -e2e is Intuit's end-to-end test hostname suffix. Marketplace installs would send OAuth and company data to a non-production stack, or fail against production companies.

Additional Locations (2)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 4d5a919. Configure here.

djiang-jq added a commit that referenced this pull request Oct 17, 2026
Relands #650, which was reverted by #651, which itself relanded #642,
reverted by #643.

The listing is gating-only again after the revert: it carries no server
definition, so an install produces no mcp_server row and native MCP has
nothing to point at. Declare the hosted HTTP endpoint the way Square
does, so the marketplace index exposes a type === "HTTP" server for the
connector.

Restores the 1.1.0 tree unchanged, including the mcp-e2e host that
Bugbot flagged as non-production on #650. That host is carried over
deliberately rather than silently corrected, since it is the value the
paired everysphere override expects.

Co-authored-by: Danny Jiang <djiang-jq@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants