My Bookkeeper

Connect or reconnect

My Bookkeeper is authorized through Intuit's standard OAuth 2.0 authorization-code flow, initiated by the authorized operator from the machine where the integration runs.

Because the integration is a local process rather than a hosted web application, authorization is started from the operator's own environment. There is no public connect button, and no third party can initiate a connection to this company file.

Authorization steps

  1. On the machine running My Bookkeeper, generate the Intuit authorization URL for the configured client.
  2. Open it, sign in to Intuit, and select the company to authorize.
  3. Grant the com.intuit.quickbooks.accounting scope. Intuit returns an authorization code to the registered redirect URI.
  4. Exchange the code for a refresh token, which is stored locally with owner-only permissions.
  5. Restart the local process. See Launch.

Reconnecting

Reauthorization follows the same steps. It is needed when the refresh token has been revoked from QuickBooks, when it has gone unused for 100 days and expired, or when the connection is moved to a different company file.

What is granted

Read-only access to accounting records and reports for the one company selected during authorization. Create, update, and delete tools are disabled in configuration, so the integration cannot alter the company file.