— Annex · Tools of the Trade —
Mercurius
A private accounting tool. Built in-house. Operated by JM Woody van Horn on behalf of WvH Hospitality clients.
What This Is
Mercurius, a WvH Hospitality LLC AI Agent, is a fifty-tool Model Context Protocol (MCP) server that allows Claude (Anthropic's AI assistant) to read from and write to QuickBooks Online on behalf of an authorized accountant. It runs in two places, both the operator's own: on his Mac, and on one small private server he rents from Fly.io, a United States cloud hosting company.
It is not a product. It is not for sale. It is the in-house bookkeeping instrument of a single fractional-CFO practice, used daily on a small roster of clients who have signed an engagement letter authorizing such access.
Who Operates It
WvH Hospitality LLC, a California limited liability company (Est. 2017), acting through its Managing Member, JM Woody van Horn. Mailing address: 1947 Garnet St, Mentone, CA 92359. The bot serves this one operator and no one else. The hosted copy exists so he can do the same work from Claude's web and mobile apps; it is single-tenant, and opening a session on it requires credentials only he holds. There is no shared instance, no version for sale, no subscription software product.
How It Works
- Each client realm is connected via Intuit's standard OAuth 2.0 consent flow. The realm-owner (the WvH client) authorizes access explicitly in QuickBooks.
- OAuth refresh tokens are encrypted at rest in both places: in macOS Keychain on the operator's Mac, and in an encrypted file on the hosted server whose key is never stored alongside it.
- Every read and every write is logged to an audit file with timestamp, environment, realm ID, tool name, and request hash. Every write also lands in QuickBooks' own transaction history, which the bot cannot alter. The Privacy Policy says exactly where each log is kept.
- High-value writes (≥ $10,000) require an explicit confirmation flag. Duplicate invoice and bill numbers are refused before they reach QuickBooks Online.
- Where QuickBooks Online supports it, writes use Intuit's native
requestidparameter, derived from a stable hash of the request body, to make accidental retries safe.
If You Arrived Here From Intuit
If QuickBooks redirected you to this page during an OAuth consent screen and you are not a WvH Hospitality client, you can safely close this tab — there is nothing for you to do here. This bot only operates against realms it has been explicitly authorized for by their owners, under written engagement.
If you are a WvH client and you have questions about what the bot reads or writes in your books, please reach out at admin@thehighseven.com or me@wvhhospitality.com.
The Documents
- Privacy Policy — what data is touched, where it lives, who else sees it.
- End-User License Agreement — the terms of use between operator and realm-owner.
- After Disconnection — what happens when access is revoked.