GatorStep QBWC read-only spike is up.
WSDL:    GET  /qbwc?wsdl
SOAP:    POST /qbwc
OAuth:   GET  /qbo/authorize?token=…   (kicks off Intuit sign-in)
         GET  /qbo/reconnect?token=…   (Intuit "Reconnect" endpoint — alias of authorize)
         POST /qbo/disconnect          (Intuit disconnect webhook — clears tokens)
Reports: GET  /reports/{summary,invoice-recon,deposit-liability,payment-recon,drift}   (Bearer)
Pull:    POST /pull/payments?commit=false                                       (Bearer)