EULA

End User License Agreement

QBO MCP Server Last Updated: March 11, 2026

This End User License Agreement (“Agreement”) is between Nicholas Croghan (“Developer”) and the individual or entity accessing or using the QBO MCP Server application (“App”).

By installing, configuring, or using the App, you agree to this Agreement. If you do not agree, do not use the App.

1. License Grant

Developer grants you a limited, non-exclusive, non-transferable, revocable license to use the App solely for the purpose of connecting to QuickBooks Online (“QBO”) via Intuit’s API to manage your own financial data.

This App is not available for general distribution. Access is restricted to businesses owned or operated by the Developer and authorized personnel of those businesses.

2. Authorized Use

The App is authorized for use with the following entities and their associated QBO company files:

Kindling Group LLC
Pivotal Engineering LLC
Kindling Printing
Penny Estate
Solace Food & Family

Developer may add or remove authorized entities at any time.

3. Restrictions

You may not:

Redistribute, sublicense, sell, or make the App available to third parties
Use the App to access QBO data belonging to any entity not listed in Section 2
Reverse engineer, decompile, or modify the App except as permitted by applicable law
Use the App to perform unauthorized transactions or access data beyond your authorization level
Store Intuit OAuth credentials outside of the macOS Keychain or other encrypted credential store approved by Developer

4. Intuit API and QuickBooks Online

The App connects to QuickBooks Online through Intuit’s API. Your use of QBO is governed by Intuit’s own Terms of Service and Privacy Policy. Developer is not responsible for changes to Intuit’s API, service availability, or data handling practices.

The App requires valid OAuth 2.0 credentials issued by Intuit. You are responsible for maintaining the security of these credentials.

5. Data Handling

The App accesses financial data (accounts, transactions, invoices, reports, etc.) from your QBO company files. This data is:

Processed locally on your machine
Never transmitted to third-party servers beyond Intuit’s API
Never stored in plaintext on disk
Protected by OAuth 2.0 token rotation with encrypted credential storage

The App does not collect analytics, telemetry, or usage data.

6. Financial Transactions

The App includes tools capable of creating, modifying, and deleting financial records in QBO, including but not limited to invoices, payments, journal entries, and bills. You are solely responsible for reviewing and approving any financial transactions initiated through the App.

Developer is not liable for errors, losses, or discrepancies resulting from automated or agent-initiated transactions.

7. Disclaimer of Warranties

THE APP IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

8. Limitation of Liability

IN NO EVENT SHALL DEVELOPER BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE APP, REGARDLESS OF THE CAUSE OF ACTION OR THEORY OF LIABILITY.

DEVELOPER’S TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID FOR THE APP (WHICH IS $0 FOR INTERNAL USE).

9. Termination

Developer may revoke access to the App at any time, for any reason, by disabling OAuth credentials or removing the App configuration. Upon termination, you must cease all use of the App.

10. Governing Law

This Agreement is governed by the laws of the State of Washington, without regard to conflict of law principles.

11. Changes to This Agreement

Developer may update this Agreement at any time. Continued use of the App after changes constitutes acceptance of the revised terms.

Contact

For questions about this Agreement, contact: nick@kindling-co.com

Privacy

Privacy Policy

QBO MCP Server Last Updated: March 11, 2026

Nicholas Croghan (“Developer”) operates the QBO MCP Server application (“App”). This policy describes how the App handles your data.

Data the App Accesses

The App connects to QuickBooks Online (“QBO”) via Intuit’s API and accesses financial data associated with your QBO company files, including but not limited to:

Chart of accounts
Customers, vendors, and employees
Invoices, bills, payments, and credit memos
Journal entries and general ledger data
Financial reports (profit & loss, balance sheet, cash flow, etc.)
Tax codes and tax rates
Time entries and attachments

How Data Is Processed

All data processing occurs locally on the machine where the App is installed. The App does not operate a server, cloud service, or hosted backend.

No data is stored on disk. Financial data retrieved from QBO is held in memory during the active session only.
No data is transmitted to third parties. The App communicates only with Intuit’s QBO API. No other external services receive your data.
No analytics or telemetry. The App does not collect usage data, crash reports, or behavioral metrics.

Authentication Credentials

The App uses OAuth 2.0 to authenticate with Intuit’s API. Credentials are handled as follows:

Access tokens and refresh tokens are stored exclusively in the macOS Keychain (encrypted at rest)
Tokens are never written to plaintext files, environment variables, or logs
Refresh tokens rotate on every use and are immediately persisted to the Keychain
Client ID and client secret are stored in the macOS Keychain, not in application code

Data Sharing

The App does not share, sell, rent, or disclose your financial data to any third party. Period.

Data Retention

The App retains no financial data between sessions. When the App process terminates, all in-memory data is released. OAuth credentials persist in the macOS Keychain until manually revoked.

Children’s Privacy

The App is not intended for use by individuals under 13. No data is knowingly collected from children.

Your Rights

You may revoke the App’s access to your QBO data at any time by:

Disconnecting the App from your Intuit account at appcenter.intuit.com
Deleting the stored credentials from your macOS Keychain

Changes to This Policy

Developer may update this policy at any time. Changes take effect when the updated policy is published.

Contact

For questions about this policy, contact: nick@kindling-co.com