quickbooks
Integrates with QuickBooks API for managing customers, invoices, and financial reports using OAuth authentication.
Install this skill
Security score
The quickbooks skill was audited on Feb 11, 2026 and we found 21 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 308 | 'Authorization': `Bearer ${process.env.MATON_API_KEY}` |
Fetch to external URL
| 304 | const response = await fetch( |
Access to .env file
| 308 | 'Authorization': `Bearer ${process.env.MATON_API_KEY}` |
External URL reference
| 4 | QuickBooks API integration with managed OAuth. Manage customers, invoices, payments, bills, and run financial reports. Use this skill when users want to interact with QuickBooks accounting data. For o |
External URL reference
| 26 | req = urllib.request.Request('https://gateway.maton.ai/quickbooks/v3/company/:realmId/query?query=SELECT%20*%20FROM%20Customer%20MAXRESULTS%20100') |
External URL reference
| 35 | https://gateway.maton.ai/quickbooks/{native-api-path} |
External URL reference
| 56 | 1. Sign in or create an account at [maton.ai](https://maton.ai) |
External URL reference
| 57 | 2. Go to [maton.ai/settings](https://maton.ai/settings) |
External URL reference
| 62 | Manage your QuickBooks OAuth connections at `https://ctrl.maton.ai`. |
External URL reference
| 69 | req = urllib.request.Request('https://ctrl.maton.ai/connections?app=quickbooks&status=ACTIVE') |
External URL reference
| 81 | req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST') |
External URL reference
| 93 | req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}') |
External URL reference
| 107 | "url": "https://connect.maton.ai/?session_token=...", |
External URL reference
| 121 | req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE') |
External URL reference
| 134 | req = urllib.request.Request('https://gateway.maton.ai/quickbooks/v3/company/:realmId/companyinfo/:realmId') |
External URL reference
| 305 | 'https://gateway.maton.ai/quickbooks/v3/company/:realmId/query?query=SELECT%20*%20FROM%20Customer', |
External URL reference
| 321 | 'https://gateway.maton.ai/quickbooks/v3/company/:realmId/query', |
External URL reference
| 359 | req = urllib.request.Request('https://ctrl.maton.ai/connections') |
External URL reference
| 369 | - Correct: `https://gateway.maton.ai/quickbooks/v3/company/:realmId/query` |
External URL reference
| 370 | - Incorrect: `https://gateway.maton.ai/v3/company/:realmId/query` |
External URL reference
| 379 | - [Maton Community](https://discord.com/invite/dBfFAcefs2) |