Disconnect and delete

1. Preview the selected connection

.\.venv\Scripts\python.exe -m financial_ops qbo-disconnect --environment production

The preview identifies the environment and company using a one-way realm fingerprint, reports how many historical snapshots will remain, and provides a confirmation ID. It makes no Intuit request and changes no state.

2. Confirm revocation and credential removal

.\.venv\Scripts\python.exe -m financial_ops qbo-disconnect --environment production --confirm-revocation-id <preview-confirmation-id>

The control first records revocation as pending and blocks retrieval. It then asks Intuit to revoke the refresh token. Only an Intuit success response permits transactional removal of that connection's encrypted local credentials. If revocation fails or is uncertain, credentials remain encrypted, retrieval remains blocked, and success is not reported.

Disconnect does not delete historical reports or the shared encryption key.

3. Optionally delete selected historical evidence

Preview exact encrypted snapshot files:

.\.venv\Scripts\python.exe -m financial_ops qbo-delete-local-data --environment production --snapshot <exact-encrypted-snapshot-path>

Then repeat the same selection with --confirm-deletion-id <preview-deletion-id>. The plan fails if a selected file changed, is outside the configured snapshot directory, or belongs to the other environment. This is ordinary filesystem deletion, not secure erasure of backups, disk remnants, or external copies.

Reconnect later

Use the local reconnect instructions. Reconnect opens a new Intuit browser authorization and repeats company verification.

Contact

Thomas FinOps is operated by Thomas Barcier. Questions may be sent to thomas@thomasbarcier.com.