QuickBooks Desktop Connector

Install the unsigned portable Windows executable, complete loopback enrollment, then optionally install the Windows service.

The Hedy CLI is a separate Windows and Linux tool for shell-capable Hedy workflows. It does not replace this Windows-only QuickBooks Desktop connector.

Download

Enable the company-private quickbooks-desktop service in your Hedy project and read the returned localAgentDistribution metadata from hedy_app_services get or enable. Prefer the Windows x64 Portable artifact; use the archive ZIP only as an offline fallback.

Current release metadata: /downloads/quickbooks-desktop/release.json

Verify checksum

Every artifact includes a required SHA-256 and signatureStatus: Unsigned. Verify the checksum against the downloaded bytes before running anything.

Local setup dashboard certificate

The interactive setup dashboard runs only on https://127.0.0.1:5188 (or the port configured in Connector:LocalUiPort). On first use, the connector generates a self-signed TLS certificate locally, stores it in protected local state, and never sends that certificate to Hedy. Your browser may show a one-time trust warning for 127.0.0.1; accept it to continue enrollment. This certificate is not publicly trusted and applies only to the local loopback dashboard on your machine.

Interactive setup

  1. Double-click hedy-quickbooks-desktop-<version>-win-x64.exe. No console window opens; your default browser opens the loopback setup dashboard at https://127.0.0.1:5188 automatically.
  2. If the browser does not open, browse to https://127.0.0.1:5188 manually. Accept the one-time certificate warning and complete browser-based Hedy enrollment in the dashboard.
  3. Configure ConnectorId when directed by your administrator. The connector supplies Hedy's dedicated local-machine OAuth client automatically; you do not need an OAuth Client ID.

During sign-in, Hedy returns through the fixed native loopback callback http://127.0.0.1:49321/oauth/callback, which immediately redirects back to the HTTPS dashboard for PKCE token exchange. The callback accepts no dashboard or management routes.

The dashboard shows a live status indicator and offers copy-URL, reopen, refresh, and a confirmed stop action. Diagnostic logs are written to logs\connector-YYYYMMDD.log in the connector state directory (%ProgramData%\Hedy\QuickBooksDesktop); run the executable with --console from a terminal to see live output instead.

Optional Windows service

Service installation is optional and requires elevation. After enrollment succeeds, run install-service.ps1 from an elevated PowerShell session. The portable executable does not install a service automatically.

Archive fallback

The ZIP archive contains the same unsigned portable executable plus helper scripts (install-service.ps1, upgrade.ps1, uninstall.ps1) and the README. Extract the archive, verify the SHA-256, then follow the same interactive setup flow.