feat(third_party): add QuickBooks Online plugin

[djiang-jq]

Adds quickbooks-online to the marketplace.

Why this one looks different

Every other connector in third_party/ ships an mcp.json — either a vendor's hosted HTTP endpoint (Greenhouse, Gmail) or a package run locally over stdio (Xero). This plugin ships none, on purpose.

QuickBooks Online is served by Cursor as a built-in MCP server, and the plugin's only job is to gate it. The backend offers that server exclusively to callers who have a plugin by this name installed from a global marketplace, so the manifest needs to carry metadata and a logo and nothing else. Adding an mcp.json here would be wrong, not merely redundant.

Two things follow from that and are worth a reviewer's attention:

• name must stay exactly quickbooks-online. It is the join key the backend matches on. Renaming it silently turns the connector off for everyone — there is no error, the server just stops being offered.
• The gate only honors global marketplaces, so this has to land in cursor-public to have any effect. A team or user marketplace cannot unlock it by reusing the name.

Contents

File
.cursor-plugin/plugin.json	Manifest. No mcpServers, no variables — auth is Cursor-managed OAuth, so there is no key for the user to paste.
assets/logo.png	Official QuickBooks mark, 192×192 RGBA (repo convention).
README.md	Explains the missing mcp.json up front, since that is the first thing anyone will look for.
CHANGELOG.md, LICENSE	Standard, matching siblings.

Plus the usual two registry edits: an entry in .cursor-plugin/marketplace.json and a row in the root README.md table.

Logo provenance

apple-touch-icon-196x196.png from quickbooks.intuit.com, Intuit's own CDN — the official app icon, not a third-party redraw. Resized 196→192 to match the convention the other 50-odd PNG logos follow. Same sourcing approach as Xero's, which took its mark from the XeroAPI GitHub org.

Two things I could not verify — please check

1. minClientVersions.cursor is set to 3.19.0, copied from the Microsoft trio (outlook, outlook-calendar, onedrive), which are the newest Cursor-credentialed connectors here. I could not determine which client release actually ships support for Cursor-hosted built-in connectors. If that is a later version, this should be raised — too low means clients that cannot render the connector will still be offered it.

2. The description is read-oriented ("Read invoices, bills, expenses, customers, accounts, and financial reports"). I wrote it conservatively rather than claim writes I could not confirm. If the connector supports creating or updating records, the description and the README capability table should both be widened.

The What agents can do table in the README reflects the standard accounting surface and ends with "The server is the source of truth for tool names and schemas," matching how the sibling READMEs hedge.

Validation

npm install --no-save ajv ajv-formats && node scripts/validate-plugins.mjs → All plugins validated successfully. (Same commands as the Validate plugins workflow.)

Opened as a draft pending the two confirmations above.

---

Note

Low Risk
Changes are marketplace manifests and docs only; no MCP server, OAuth, or QuickBooks API code in this repo. Wrong name or client version would affect availability, not in-repo runtime behavior.

Overview
Adds quickbooks-online to the global plugin marketplace so Cursor can offer the built-in QuickBooks Online MCP connector after install.

Unlike most third_party/ integrations, this package is metadata-only: manifest, logo, README, CHANGELOG, and LICENSE—no mcp.json. Installing the plugin is the opt-in that unlocks Cursor-hosted OAuth (Intuit, per company file); the backend matches on the exact plugin name quickbooks-online.

Registry updates: new entry in .cursor-plugin/marketplace.json and a row in the root README.md plugins table. The manifest sets minClientVersions.cursor to 3.19.0 and describes read access to invoices, bills, expenses, customers, accounts, and reports.

^{Reviewed by Cursor Bugbot for commit 4d4248b. Bugbot is set up for automated code reviews on this repo. Configure here.}