What can an AI agent do with
Take and refund payments?
This lets the app use QuickBooks Payments to charge your customers' cards and bank accounts, and to refund those charges. This is real money moving, not just a note in your books. It is separate from the accounting permission. Card charges through this permission work only for US-based QuickBooks companies.
How to spot it
On a QuickBooks Online connection or settings screen, this is com.intuit.quickbooks.payment.
With it, an agent can
- Charge a customer's credit or debit card.
- Hold a card charge now and collect it later, for example when an order ships.
- Take payments from a customer's bank account by electronic check.
- Refund a charge back to the customer.
- Save a customer's card or bank account for future payments.
It cannot, on its own
- Create invoices or other records through the accounting side of QuickBooks. That needs the accounting permission.
What a bad day looks like
A tricked or buggy agent could charge a customer's saved card when it should not, or issue refunds you never approved.
Set it up safer
- Require your approval before any charge or refund.
- Only grant this if the tool really needs to take payments. A tool that only records payments in your books does not need it.
- Disconnect the app in QuickBooks when you stop using it.
Ask the company selling the agent
- Will your agent ever charge or refund a customer without me approving it first?
- Is there a limit on how much it can charge or refund in a day?
- Does it save my customers' cards, and when would it use them?
Source
Checked against QuickBooks Online documentation on 2026-09-28. All QuickBooks Online permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.