quickbooks-online-mcp-server
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is a purpose-built QuickBooks Online MCP server exposing the full QuickBooks API with explicit finance-specific operations (create_payment, create_bill_payment, create_bill, create_invoice, create_journal_entry, create_account, pay a bill with BankAccountRef, etc.). It includes OAuth2 credentials, sandbox/production modes and operations that record and enact payments and journal/bank account transactions against a live company. This is a specific financial integration (accounting/billing/payment recording) rather than a generic tool, so it provides direct financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata