Automate bookkeeping

Enter bills and reconcile transactions each weekday morning. Bills with every line under $1,000 post automatically; any line of $1,000 or more requires approval in Slack. The policy denies bills charged to the payroll account and all bill payments.

Requires Intuit's QuickBooks MCP server, built on the daemon's machine, and a Slack app.

The files

~/.config/wardrik/config.yaml

org: acme

mcp:
  quickbooks:
    command: node
    args: [/opt/quickbooks-online-mcp-server/dist/index.js]
    trusted: true
    env:
      QUICKBOOKS_CLIENT_ID: ${QUICKBOOKS_CLIENT_ID}
      QUICKBOOKS_CLIENT_SECRET: ${QUICKBOOKS_CLIENT_SECRET}
      QUICKBOOKS_REFRESH_TOKEN: ${QUICKBOOKS_REFRESH_TOKEN}
      QUICKBOOKS_REALM_ID: ${QUICKBOOKS_REALM_ID}
      QUICKBOOKS_ENVIRONMENT: production

channels:
  slack:
    type: slack
    token: ${SLACK_BOT_TOKEN}
    signing_secret: ${SLACK_SIGNING_SECRET}
    domains: {acme.com: acme}

notify:
  targets:
    accounting: {channel: slack, room: "#accounting"}

roles:
  accountant:
    rules: [{verbs: [ask, read, events, decide], kinds: [agent], names: [books]}]
bindings:
  - {org: acme, role: accountant, subjects: [user:acme/@maria, user:acme/@sam]}

• trusted: true marks the server's results as trusted, not untrusted content. Without it, every bill would need approval.
• The accountant role allows @maria and @sam to message the agent and approve its calls.

~/.config/wardrik/policies/books.yaml

allow:
  - quickbooks/search_*
  - quickbooks/get*
  - quickbooks/create-bill(params.bill.Line.Amount < 1000)
ask:
  quickbooks/create-bill(params.bill.Line.Amount >= 1000): A bill with a line of $1,000 or more.
  quickbooks/create_invoice: This creates a customer invoice.
deny:
  quickbooks/create-bill(params.bill.Line.AccountBasedExpenseLineDetail.AccountRef.value = 88): Payroll is off limits.
  quickbooks/create_bill_payment: Bill payments must be handled manually.
budget: {usd: 10.00, per: day, on_exhausted: ask}

• On a list argument, allow matches only when every item matches. deny matches when any does.
• 88 is a placeholder for your Payroll account ID in QuickBooks.

~/.config/wardrik/agents/books.md

---
description: Keeps the books for the accounting team.
tools: [quickbooks/*, files]
context: [VENDORS.md]
channels: [slack]
policy: books
notify: {to: [accounting], on: [parked, failed, finished]}
triggers:
  - name: close
    every: "0 7 * * 1-5"
    prompt: Reconcile yesterday's transactions, and enter the bills that came in.
---
You keep Acme's books in QuickBooks. Enter each bill against the right vendor and expense account.
Use VENDORS.md to map vendors to expense accounts. Update it when accountants correct a mapping. When you aren't sure, ask in one line. Each morning, post a short summary.

Try it

echo "$QUICKBOOKS_CLIENT_ID" | wardrik vault put QUICKBOOKS_CLIENT_ID --for api_key
# ...and the other QuickBooks keys, the Slack token and signing secret
systemctl --user restart wardrik
wardrik ask books 'Enter the March invoice from Northwind Freight: $640 for deliveries.'

The agent looks up the vendor and records the $640 bill. A bill with a $2,400 line instead requires approval in #accounting, where the notification shows the proposed bill’s arguments.

How it works

• Policy rules on call arguments: amounts and account IDs. See Policy.
• A deny that no prompt can bypass.
• Approvals in Slack, each recorded with the approver.
• Corrections are written to VENDORS.md and loaded into the next turn.