Implementation Guide

How to Set Up the NetSuite AI Connector Service (MCP)

A practical, step-by-step guide that turns the playbook into a working setup — enable the features, install the MCP Standard Tools SuiteApp, build a least-privilege role, configure OAuth, connect Claude or ChatGPT, then lock it down — with links to the official NetSuite documentation so you can verify everything for yourself.

Practical developer guide · Backed by the official NetSuite Help Center

Chief Technology Officer · 3x NetSuite Certified
Updated 9 min read
Back to the main article

This is the practical companion to our NetSuite AI Connector Service guide. The main article explains what the connector is and how it’s governed; this page is the plain checklist for standing it up. Work through the steps in order — least-privilege role, sandbox-first — and use the official NetSuite documentation link under every step to confirm the exact feature, permission, and URL as you go.

Before you start — prerequisites

  • A sandbox: stand the connector up in a Sandbox or Release Preview account first, and validate before touching Production.
  • An AI client plan: Claude Pro (or higher) or ChatGPT Plus (or higher); other MCP-capable clients depend on their own support.
  • Admin access & a security sign-off: you’ll enable features and create a role — agree the data scope with whoever owns security first.

What you'll set up

  1. Enable the required NetSuite features
  2. Install the MCP Standard Tools SuiteApp
  3. Create a dedicated least-privilege role
  4. Configure OAuth 2.0 and the integration record
  5. Get the server URL and connect your AI client
  6. Lock down security and governance
  7. Test with natural-language queries and roll out
1

Enable the required NetSuite features

The connector won’t work until the underlying platform features are on. Missing REST Web Services is the single most common reason calls fail.

Go to:  Setup > Company > Enable Features
  1. Under SuiteCloud, enable Server SuiteScript, REST Web Services, and OAuth 2.0.
  2. Enable SuiteQL/SuiteAnalytics features if you intend to use the query tools.
  3. Save and confirm the features are active before moving on.
NetSuite docs Required Features & Permissions Get Started with AI Connector
2

Install the MCP Standard Tools SuiteApp

This SuiteApp registers the pre-built tools an AI client will discover — records, reports, saved searches, and SuiteQL. Without tools, the connection has nothing to call.

Go to:  SuiteApps (Marketplace) → install MCP Standard Tools
  1. Install the MCP Standard Tools SuiteApp from the SuiteApp Marketplace.
  2. Confirm the tools appear under Customization > Scripting > Custom Tools.
  3. Note the SuiteApp’s application ID — you’ll need it for the server URL in Step 5.
NetSuite docs MCP Standard Tools SuiteApp AI Connector Service
3

Create a dedicated least-privilege role

The AI runs as a NetSuite role, so this role is your security boundary. Build a fresh one — never Administrator — with only what the use case needs.

Go to:  Setup > Users/Roles > Manage Roles > New
  1. Under Permissions > Setup, add MCP Server Connection and Log in using OAuth 2.0 Access Tokens (not “Log in using Access Tokens”).
  2. Add only the record permissions the use case needs, plus Perform Search, which many standard tools require.
  3. Assign the role to the user(s) who will connect — remember the connector blocks Administrator and full-permission roles.
NetSuite docs Required Features & Permissions Associated Risks & Controls
4

Configure OAuth 2.0 and the integration record

Authentication is OAuth 2.0 (Authorization Code Grant with PKCE). When you connect Claude or ChatGPT, NetSuite usually auto-creates the integration record — but you must confirm it’s enabled and correctly scoped.

Go to:  Setup > Integration > Manage Integrations
  1. Connect once from the AI client to trigger the integration record, then open it under Manage Integrations.
  2. Confirm it’s enabled (not pending) with the AI Connector Service scope, Public Client, and Authorization Code Grant set.
  3. If the scope is missing or the record won’t enable, delete and recreate it following the OAuth 2.0 guidance.
NetSuite docs Connect to the AI Connector AI Connector Service FAQ
5

Get the server URL and connect your AI client

Each connection uses a server URL unique to your account. Paste it into the AI client and complete the OAuth sign-in.

URL:  https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/...
  1. Use .../services/mcp/v1/suiteapp/com.netsuite.mcpstandardtools for the standard tools, or .../services/mcp/v1/all for all custom tools.
  2. Claude: Settings → Connectors → add a custom connector with the URL, then complete the NetSuite OAuth prompt.
  3. ChatGPT: Plus or higher; enable Developer Mode where required. Since March 4, 2026, dynamic callback URLs mean a new integration record per new connection.
NetSuite docs Connect to the AI Connector Get Started with AI Connector
6

Lock down security and governance

Pointing AI at your ERP needs guardrails. Apply least privilege, confirm logging, and budget concurrency before anyone leans on it.

Review:  integration record → Execution Log → AI Connector Service (MCP)
  1. Keep the role least-privilege; create separate roles for different toolsets so each AI agent’s scope is narrow.
  2. Confirm calls appear in the execution log (retention is around 21 days in production, 7 in sandbox) and review them.
  3. Allocate a share of your concurrency limit per integration record, and treat prompt injection and hallucination as real risks.
NetSuite docs Associated Risks & Controls AI Connector Service FAQ
7

Test with natural-language queries and roll out

Prove it with a simple question, confirm the data and the log entry match, then widen scope deliberately rather than all at once.

Test:  “How many customers do we have in NetSuite?”
  1. Ask a simple read query in the AI client and confirm the number matches live NetSuite data.
  2. Check the execution log shows the call (method, URL path, user, status) for traceability.
  3. Widen scope slowly — add tools and permissions only as each use case is validated. For bespoke needs, build a custom tool in SuiteScript 2.1 and deploy it via SDF.
NetSuite docs MCP Standard Tools SuiteApp Creating Custom Tools

A note on accuracy: the AI Connector Service is evolving quickly — client requirements, supported plans, and even callback behavior change between releases (for example, ChatGPT’s move to dynamic callback URLs on March 4, 2026). Always confirm each feature, permission, and URL against its official reference, and validate in Sandbox before enabling anyone in Production.

Official NetSuite documentation

Every step links to the source. Full help center: NetSuite Applications Suite — Online Help.

Where a quick connect ends and engineering begins

Everything above gets a governed AI client reading live NetSuite data safely. What sits beyond the standard tools — custom tools in SuiteScript 2.1 with JSON-schema definitions, interactive MCP Apps that render a bundled UI inside the AI client, role designs that pass segregation-of-duties testing, and change-control on the integration record and toolsets — is real engineering work. It usually means SDF-deployed custom tools and a governance policy, not just a URL pasted into a chat client.

This feature points an external LLM at your ERP, so build it in a Sandbox, keep the role least-privilege, watch the execution log, and widen scope only as each use case proves out. For the full reasoning — the architecture, licensing, security model, and failure modes — read the companion guide.

Back to the main article
Connecting AI to NetSuite? Our NetSuite engineers design the least-privilege role, configure OAuth and the MCP tools, connect Claude or ChatGPT, and set the governance your security team needs — Sandbox-first, so nothing leaks.
Talk to a NetSuite AI engineer

Documentation links point to the official Oracle NetSuite Help Center (docs.oracle.com). The AI Connector Service evolves rapidly — exact menu paths, supported AI-client plans, protocol requirements, and connection behavior vary by NetSuite version and by client; confirm each step against the linked Help Center page and validate in Sandbox first. Claude is a product of Anthropic; ChatGPT of OpenAI — check each provider’s own documentation for current plan requirements.