NetSuite AI Connector Service FAQ

Here you can find the answers to the most common questions about the NetSuite AI Connector Service.

Getting Started And Setup

How do I set up NetSuite AI Connector Service?

To set up the NetSuite AI Connector, make sure your environment meets the technical and permission requirements.

The AI client you want to use must support:

  • Remote MCP

  • Protocol version 2025-06-18

  • Streamable HTTP

  • OAuth 2.0 Authorization Code Grant with PKCE

Note:

Claude Pro and ChatGPT (Plus/Pro) are currently supported, but some AI clients or their versions require extra setup. For example, some ChatGPT plans require Developer Mode to use MCP connectors.

Enable the following features in NetSuite:

  • Server SuiteScript

  • OAuth 2.0

  • REST Web Services (required for MCP Standard Tools SuiteApp)

Use a non Administrator role to login to NetSuite and assign these permissions to the role:

  • MCP Server Connection

  • OAuth 2.0 Access Tokens

  • REST Web Services (required for MCP Standard Tools SuiteApp)

For more details, see:

Which URL should the AI client call?

The AI client should call https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/all to retrieve all available MCP tools. Without /all at the end, the connection will appear disconnected.

You can also call https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/suiteapp/<applicationid> to retrieve only specific custom tools exposed by a specific SuiteApp. For more details, see Server URL and SuiteApp Namespacing.

Note:

The <accountid> and <applicationid> in the URLs are placeholders for the IDs of your account and the SuiteApp you are retrieving the tools from.

Why doesn't the Administrator role work?

For better access control and security, the NetSuite AI Connector service does not support Administrator roles.

To connect:

  • Create a custom role or use an existing non-administrator role

  • Assign the permissions:

    • MCP Server Connection

    • OAuth 2.0 Access Tokens

If you are using the MCP Standard Tools SuiteApp, additional permissions, like REST Web Services, are required for some of its tools. For more information, see Available Tools in the MCP Standard Tools SuiteApp.

How do I set up an Integration Record for the NetSuite AI Connector Service?

An integration record is often created automatically after the first connection (for example with Claude), and you can see it under: Setup > Integration > Manage Integrations. There you can also manually create a new integration record.

To set up an integration record for the NetSuite AI Connector Service follow the OAuth 2.0 documentation. For more information, see NetSuite AI Connector Service-specific Integration Record and Create Integration Records for Applications to Use OAuth 2.0.

Key properties:

  • Public Client enabled

  • Redirect URI populated

  • OAuth Authorization Code Grant enabled

  • AI Connector Service scope enabled

An integration record can be enabled or disabled, but sometimes an automatically created integration record might be in a pending state until you manually enable it. Afterwards it can't return to the pending state, but can only be disabled.

Note:

You may need to manually create an integration record. For example, if with some AI clients it isn't created automatically, or if some of the required fields are missing and it must be recreated.

For ChatGPT, new integration may be required for each connection (due to dynamic callback URLs). For more details, see How to Connect ChatGPT to NetSuite Using the NetSuite AI Connector.

What AI clients are supported?

NetSuite enables any client that supports the MCP protocol.

The MCP Standard Tools SuiteApp works with most AI clients, like Claude Pro or higher, and Chat GPT Plus or higher, that:

  • Support remote MCP.

  • Follow the Protocol version 2025-06-18.

  • Support streamable HTTP.

  • Support OAuth 2.0 Authorization Code Grant flow with Proof Key for Code Exchange (PKCE).

Some AI clients, like Chat GPT Business, require the activation of developer mode, before you can set up the connector. Any additional limitations are usually on the client side, so it is best to go through the AI client's relevant documentation.

Is there a cost to use the NetSuite AI Connector Service or the MCP Standard Tool SuiteApp?

The NetSuite AI Connector Service is not a paid feature and the MCP Standard Tools is a free SuiteApp. However, you may need a paid subscription for your AI client.

Tools And Use Cases

What can I do with the NetSuite AI Connector Service

With the NetSuite AI Connector Service you can use your AI client to query data using natural language. You can:

  • Create, read, update records

  • Run reports.

  • Run saved searches.

  • Execute SuiteQL queries (SuiteQL tools support read-only queries only).

By default, the MCP Standard Tools SuiteApp comes with tools for working with records, reports, saved searches, and SuiteQL queries. The MCP Standard Tools SuiteApp is compatible with AI clients that:

  • Support remote MCP.

  • Follow the Protocol version 2025-06-18.

  • Support streamable HTTP.

  • Support OAuth 2.0 Authorization Code Grant flow with Proof Key for Code Exchange (PKCE).

For more information and details, see MCP Standard Tools SuiteApp

If you want, you can build your own tools. For more information, see Creating Custom Tools for the NetSuite AI Connector Service. MCP also allows orchestration with other business applications within your AI client's environment.

Do I need custom tools?

Not always. You should use the MCP Standard Tools SuiteApp, when the task is common or general.

Custom tools are better suited if you need:

  • Specialized workflows

  • Faster or single-step operations

  • Custom automation

How do I create custom tools?

To create custom tools you need:

  • SuiteScript 2.1 custom tool script

  • JSON schema definition

  • toolset SDF object

The key requirements for the custom script are:

  • The script header must include @NScriptType CustomTool

  • Asynchronous entry points

  • Supported modules only

For more information, see Creating Custom Tools for the NetSuite AI Connector Service.

How do I manage custom tools?

To manage custom tools, go to Customization> Scripting > Custom Tools. There you have the options to:

  • View tools

  • Delete toolsets from account customization projects (ACPs) directly from the page

  • Remove toolsets from SuiteApps by uninstalling the SuiteApp

For more information, see Managing Custom Tools in NetSuite.

How accurate are the results?

The MCP Standard Tools SuiteApp improves accuracy, because it retrieves data directly from NetSuite reports and saved searches. However, AI clients may still produce incorrect or "hallucinated" results, so it is best practice to always verify the results against NetSuite data.

How should I write prompts for better results?

Use clear and structured prompts:

  • Define the objective

  • Provide context

  • Include:

    • Date ranges

    • Filters

    • Subsidiaries

A prompt with a structure like below usually returns more accurate responses:

  • Instruction

  • Role

  • Context

  • Input data

  • Output format

For more information, see Prompting Guidelines.

Authentication And Security

How does authentication and access work?

OAuth 2.0 authentication leverages NetSuite roles and permissions. Your NetSuite account administrator authorizes specific roles to have access to the MCP server and MCP tools to be installed. Your administrator can review this access and make changes to it at any time.

Does AI have access to all my data?

Queries executed through the connector respect your NetSuite role's permissions, so tools can only access data you're allowed to see when logged in with this role.

Additionally, the AI client can perform only tasks defined in the tools. The MCP Standard Tools SuiteApp offers restricted tool capabilities.

Tools can't run as administrators, can't call external APIs and can't run elevated scripts. They run with user role permissions only.

How do I keep it secure?

You should review your organization's security guidance and the AI client's policies before using the NetSuite AI Connector Service. For detailed information about risks, controls, and mitigation strategies, see Associated Risks, Controls, and Mitigation Strategies.

When authorized, data sent to the third-party LLM is governed by the third-party LLM's privacy policy on data handling. You can choose the tools and the data that will be processed by the third-party LLM. Data in the NetSuite Service will be handled as per Oracle Terms of Service.

Generally, it is best practice to:

  • Use trusted AI clients.

  • Limit the permissions to only those really needed.

  • Avoid using any high-privilege roles.

  • Restrict the tool access.

  • Train the users.

  • Monitor the usage regularly.

How transparent is the data sharing process?

Data sharing requires your explicit acknowledgment before you connect NetSuite with a third-party LLM. You are responsible for maintaining control over what data is shared and how the integration is used within your organization.

Monitoring and Governance

What are the performance or data limits?

From NetSuite, concurrency limits apply, which are shared with other integrations.

The AI client may generate multiple requests per action and if too many requests are sent, and the limits are exceeded, the requests will fail with "Too Many Requests" error. You can retry, but it is best to review your account's concurrency limit. The administrator can also allocate limits per integration record, and the remaining capacity is shared. For more information, see NetSuite AI Connector Service And Concurrency Governance.

Regarding reports, only date filters and subsidiary filters are supported. Accounting periods are not supported and subsidiaries affect the report results. For more information see Report Tools.

AI clients have their own limitations. They usually support up to ~5,000 rows per call. Also, token limits may apply, and large queries may cause timeout.

How can I monitor and audit usage?

To monitor and audit usage, you can go to the Execution Log of the integration record. The Execution Log entries are filtered by integration record and include details such as HTTP method and URL path, which help with deeper troubleshooting and auditability. It shows:

  • Request time

  • Duration

  • Status

  • User

  • HTTP response

  • Request details

Note:

The retention policy is:

  • 21 days for production

  • 7 days for Sandbox

For more information, see NetSuite AI Connector Service (MCP) Execution Log

Troubleshooting And Verification

I added permissions but cannot connect. What should I check?

Check the following:

  • Permissions are assigned to the role.

  • The correct permission is used (OAuth 2.0 Access Tokens and not Access Tokens).

  • The role is not administrator and does not have administrator rights.

  • Required features are enabled.

  • The SuiteApp is installed.

I don't see any tools. What should I check?

Make sure:

  • The NetSuite AI Connector is properly connected.

  • You are logged in with the correct role.

  • The SuiteApp (for example, MCP Standard Tools) is installed.

  • Your role has the required permissions.

  • The access to the SuiteApp folder is not restricted.

Why does the AI client (for example Claude) say I'm connected but the connector is disconnected?

Some possible causes for this issue are:

  • You are using incorrect endpoint and your URL is missing the /all.

  • The SuiteApp is not installed.

  • The role you used to log in is not properly configured.

How do I verify everything is working?

For the NetSuite AI Connector Service to work properly, check that:

  • All required features are enabled.

  • All correct permissions are assigned.

  • The AI client is calling the correct URL.

  • An integration record has been created.

  • The tools appear in the AI client.

  • The Execution log shows activity.

General Notices