Windows builds are not yet code-signed — SmartScreen will warn; choose “More info → Run anyway”.
Verify any download against SHA256SUMS.txt on the release page.
KiMagic is a small app that lives in your menu bar and serves the Model Context Protocol on localhost. When Claude asks your books a question, the request goes from Claude, to KiMagic, straight to Intuit — and nowhere else. No middleman server, no proxy, no account to create, no telemetry. If you close your laptop, KiMagic is off. That's the whole security model, and it fits in one sentence.
You create your own (free) app at developer.intuit.com and paste its Client ID and Secret into KiMagic. They're encrypted with your OS keychain and never transmitted anywhere except directly to Intuit's OAuth endpoint.
QuickBooks access tokens are encrypted at rest using macOS Keychain / Windows Credential Manager. No database, no sync, no copy on any server.
The MCP server binds to 127.0.0.1 exclusively, with DNS-rebinding protection. Nothing on your network — let alone the internet — can reach it.
Intuit requires an HTTPS redirect for sign-in, so a static page on this site bounces the OAuth response straight back to 127.0.0.1. It's ~100 lines you can read — it stores nothing, and the secret token exchange still happens on your machine.
query_books — SQL-style queries over any entityget_report — P&L, Balance Sheet, Cash Flow, agings…get_company_info · get_entity · search_customerscreate_invoice · send_invoicerecord_payment · create_journal_entrycash_flow_forecast — runway & projectionsmonth_end_checklist — close fasterfind_anomalies — duplicates, odd amounts, gapslist_connections — multi-company, one defaultPlus resources (chart of accounts, recent transactions) and guided prompts (financial review, month-end close, AR follow-up, tax prep, vendor analysis).
The wizard walks you through creating your Intuit developer app and pasting its credentials — about five minutes, once.
Sign in to QuickBooks in your browser. Bookkeeper with many clients? Connect them all and switch by name in conversation.
One-click .mcpb for Claude Desktop, a one-liner for Claude Code, or a plain localhost URL for any other MCP client.
Software that reads your books should have nothing to hide. KiMagic's
complete source is public.
Every binary above is compiled by GitHub Actions from a tagged commit — you can read
the exact pipeline,
match the checksums in SHA256SUMS.txt, or skip our binaries
entirely and build it yourself with npm install && npm run dist:mac.
macOS builds are Developer ID-signed and notarized by Apple.