Documentation

What this is

This connector links each client's QuickBooks Online company to Claude AI. Every client is a separate tenant with its own API key — Claude can only reach the books belonging to the key it was given. Tokens are stored AES-256 encrypted; API keys are stored only as hashes.

Onboard a client (2 steps)

1 — Create and connect. On the Dashboard, click Create & connect under Add a client. You do not need a name first — leave the field blank and you go straight to QuickBooks. Sign in with your QBOA login and pick that client's company in Intuit's company picker. One authorization = one company, always with your own login — clients are never involved.

2 — Name it (optional). The client is named after the QuickBooks company automatically. If you want a different label, edit the name on its dashboard row and click Save name. Renaming is safe at any time — it only changes how the client is identified, never the connection.

Adding to Claude. Nothing to do per client — the connector covers all of them. Add https://tools.lewispartners.ca/mcp once in Claude (Settings → Connectors → Add custom connector, OAuth fields left blank) and sign in when asked. See The Claude connector & signing in below.

The Claude connector & signing in

There is one URL to give Claude — https://tools.lewispartners.ca/mcp — and it is safe to paste anywhere, because on its own it opens nothing. The first time Claude uses it, Claude sends you here to sign in with your LP Tools email and password and to approve the connection. Only then does Claude receive an access token, and that token belongs to you: every request it makes shows up in the audit trail under your name.

Each person adds the same URL and signs in as themselves. Access lasts 90 days per device and refreshes quietly while it is in use. Claude never sees your password — it only ever receives a token, and you can cut that token off at any moment from My profile → Devices & AI connections.

Every connector URL on the dashboard is hidden when the page loads and only shows when you press the eye beside it, so nothing sensitive is sitting on screen during a screen-share. Copy copies the real URL whether it is showing or hidden.

Once connected, Claude reaches every client with read and write access, picking the client per request and confirming the client name before any change. New clients you add later are included automatically — nothing to change in Claude.

Older key-in-URL connectors

Before sign-in was added, a connector was just a URL with a secret key in it — the master key URL for all clients, or a per-client URL. Anyone holding one reaches the books with no login, and the audit trail can only record it as "master key" rather than naming a person.

These still work so nothing breaks mid-job, and each client's URL is still on its dashboard row, hidden behind the eye like every other connector URL. Prefer the sign-in connector above; if a key URL ever leaks, use New key (per client) or Regenerate master key to kill it immediately.

Audit trail

The Audit tab records who did what, when, and from which network address — sign-ins and failed sign-in attempts, user and role changes, client changes, settings changes, AI connections being approved or revoked, and every request Claude makes to QuickBooks. Changes to a client's books are marked separately from reads, so "what did we change in this client's file, and who asked for it" is one filter away.

Super admins see the whole firm's trail and can filter by user, activity type, period, or free text. Staff see their own. Entries are not editable or deletable from the interface.

Devices & AI connections

Every browser sign-in and every authorized AI platform is listed with its device, approximate location, network address, and when it was last active — on My profile for yourself, and on a user's Edit page for anyone else. In the Users table, click the “N devices · N AI apps” line on any row to open the same detail inline.

Location comes from the network address, so treat it as a rough hint rather than an exact place. If something looks wrong, Sign out that device or Disconnect that AI platform — it stops working immediately, and the person simply signs in again next time.

Disconnecting and removing clients

Disconnect drops the QuickBooks link but keeps the client in your list: the stored tokens are deleted here and revoked at Intuit, so Claude can no longer reach those books. Use Reconnect when you want it back.

Remove deletes the client outright — its tokens, its connector key and its row. The books themselves in QuickBooks are untouched; this only removes LP Tools' access and record of the client. Both actions ask for confirmation and are written to the audit trail.

Settings & environments

Environment toggle — Sandbox uses Intuit's test company with your Development keys; Production uses live client books with your Production keys. Both key sets are stored side by side — the toggle chooses which set is active. Switching applies immediately, no redeploy.

Clients connected earlier keep working: each client remembers which environment it was connected under.

Keys — from developer.intuit.com → your app → Keys & credentials (Development and Production tabs). Secrets are encrypted before storage; leaving a secret field blank keeps the saved one.

Redirect URI — both key sets in the Intuit portal must list:
https://tools.lewispartners.ca/callback

Users

Super admin can change settings, manage users, and manage clients. Staff can onboard and view clients but cannot change settings or users.

Add someone from the Users panel with a temporary password, then use Edit on their row to change their name, email, role, or to set a new password for them (leave the password blank to keep the current one). Promoting a staff member to super admin is done the same way — Edit → Role → Super admin.

One safeguard: the last remaining super admin cannot be demoted, so the firm can never lock itself out. Promote a second super admin first if you need to change that role.

Everyone has a profile. Click your picture at the top right → My profile to change your own name, email, password (you must enter your current one), and profile picture. Pictures are cropped square and resized to 256px in your browser before saving. Sign out lives in that same menu.

Things Claude can do once connected

Reports (P&L, Balance Sheet, Trial Balance, GL, aging), querying any entity (invoices, customers, vendors, accounts…), and creating / updating / deleting records. Tip: tell Claude to always confirm before writing to the books — the connector has write access.

Troubleshooting

"Invalid API key" — the key in the Claude connector URL doesn't match any client. Re-check the URL, or use Get URL · new key on the Dashboard to issue a fresh one.

"Tenant is not connected to QuickBooks yet" — the client was added but the Connect step wasn't finished. Open the Dashboard and click Connect QuickBooks.

Token / auth errors — reconnect the client (Connect link again). Errors include an intuit_tid you can quote to Intuit support. Full error logs: Cloudflare dashboard → Workers & Pages → lp-qbo-mcp-connector → Logs.

Locked out? — the emergency admin key still works: https://tools.lewispartners.ca/admin?key=<ADMIN_KEY>.