Overview
QuickBooks stays the authoritative record. Kroy connects to QuickBooks Online once, so that authorised AI — Claude, ChatGPT and others — can use QuickBooks data and actions without each AI tool holding its own access to the books.
A finance manager can ask “Which customers are more than sixty days overdue, and what do they owe?” The AI calls Kroy. Kroy checks who is asking, which agent is asking for them and what they may see, reads the aged receivables report, and returns only the rows that person is entitled to.
Permissions
Each QuickBooks action is a Kroy capability. Kroy decides every request against the person, the agent, the delegation between them, the organisation’s policies and any approval requirement.
By default, AI may read and prepare. It may create estimates. Creating invoices, sending anything to a customer and recording bills all require a person to approve first. An organisation can tighten these defaults further, for example by allowing a particular Skill to read reports but nothing else.
Drafts before books
Changes to financial records are hard to reverse cleanly. The safe pattern is that AI prepares the work — a reconciliation note, a proposed invoice, a list of miscoded transactions — and a person decides what goes into QuickBooks. Kroy records both the proposal and the decision.
Industries
Accountancy practices that look after several QuickBooks companies can map each member of staff to the clients they work on. An AI acting for a manager then sees that manager’s clients only, and nothing from the rest of the practice.
Small and medium-sized businesses using QuickBooks for their own books can let the finance team use AI for month-end questions while keeping payroll and banking out of reach.
Security
Kroy holds the QuickBooks connection. AI clients receive the results of authorised requests, never the tokens. Revoking an AI’s access to Kroy removes its access to QuickBooks at the same moment, and every request — permitted or refused — is recorded in the audit trail.