Tally Browser Bridge
Browser automation for systems that don't have an API.
A Chrome extension that lets Tally drive a browser tab — for bank-feed classification, portal logins, and legacy systems with no API. Per-client allowed-domains list restricts where the extension can act.
What Tally does with Browser Extension
Tally connects to Browser Extension to automate the data flow into your accounting stack — with explicit safety rules at every step.
Bank-feed classification
Tally classifies and matches uncoded bank-feed transactions in QuickBooks. The browser extension drives the QBO bank-feed UI directly — clicking categorize, match, and exclude.
Portal login automation
For client portals (banking, payroll, vendor) that have no API, Tally can log in (using credentials from the credential bank) and pull statements or run reports.
Legacy system support
Older accounting and ERP systems that predate API access can still be automated through the browser. Tally drives the UI the same way a human would.
Dedicated tab isolation
Tally creates its own tab for every workflow — it does not interact with your existing tabs. A visible banner is displayed on every Tally-controlled tab so it's obvious which tabs are automated.
Per-client domain allowlist
Each client config has an allowed_domains list. The browser extension can only navigate to and interact with domains on the list. Other domains are rejected.
Auditable actions
Every browser action (navigation, click, type) is logged with timestamp and target URL. Full audit trail for client review.
How it works
Setup is straightforward and auditable. No copy-pasted CSVs, no shared logins.
Install the extension
Download the Tally Browser Bridge from the Tally settings page and install it in Chrome. Authenticate once with your client's JWT token.
Configure allowed domains
A Ballast accountant adds the domains the extension is allowed to interact with (your bank's portal, your QBO instance, etc.).
Tally requests browser access
When a workflow needs browser access (e.g., bank-feed coding), Tally creates a new dedicated tab and starts driving it. A banner indicates Tally is in control.
Workflow completes & tab closes
When the workflow is done, Tally closes the dedicated tab and reports the result back. Your existing tabs are untouched throughout.
Availability
This integration is provided to Ballast Consulting Group's accounting clients at no additional charge as part of their engagement. There is no per-seat fee, per-API-call fee, or per-integration fee billed to the client. The cost is included in your accounting fee.
Tally isn't sold separately. Access requires an active engagement with Ballast Consulting Group as your finance and accounting department. If you're interested in becoming a Ballast client, please reach out.
Security & compliance
Every Tally integration follows the same safety pattern. Here is how the Browser Extension integration specifically is locked down.
Tally-only tab control
The extension can only interact with tabs it created. Existing tabs in your browser are never read or modified, even if they're on an allowlisted domain.
Per-client domain allowlist
Each client's extension is configured with a strict allowed_domains list. Navigation outside the list is rejected — the extension cannot wander to non-approved sites.
Visible banner on every controlled tab
Every tab the extension drives shows a visible banner indicating Tally is in control. There's no covert browsing — the user always sees what's happening.
JWT-based authentication
The extension authenticates with a client-scoped JWT (containing client_id and expiration only — no personal data). The token is stored locally in Chrome storage and rotated periodically.
No background data collection
The extension does not collect browsing history, passwords, page content from non-Tally tabs, or analytics. It only relays content from Tally-driven tabs back to the Tally agent server.
Credential bank integration
Login credentials for portals are stored in 1Password (the credential bank), not in the extension itself. The extension reads them at login time and never persists them.
Frequently asked questions
Can Tally read my personal browsing?
No. The extension can only interact with tabs it created. It cannot read your existing tabs, browsing history, passwords, or any other browser data.
How do I know when Tally is using my browser?
Every Tally-controlled tab displays a visible banner at the top indicating Tally is in control. There's no covert use.
What domains can the extension interact with?
Only domains on your client's allowed_domains list. Typical entries include your bank's portal, your QBO instance, and specific vendor portals. Anything else is rejected.
Where do portal login credentials come from?
From 1Password, the credential bank. The extension reads credentials at login time, types them, and never persists them in extension storage. Your bank password is never stored in Tally.
Can I uninstall the extension?
Yes — uninstall via Chrome's extension settings page. Without the extension, Tally workflows that require browser access will fail until it's reinstalled. Other Tally workflows are unaffected.
Talk to Ballast about your books
Tally's Browser Extension integration comes at no additional charge when Ballast runs finance and accounting for you. If you need a team that actually understands the systems your business runs on, get in touch.