Tutorial 2025.2

Connecting NetSuite to ChatGPT and Claude via MCP

Learn how to connect your NetSuite account to AI assistants like ChatGPT and Claude using the Model Context Protocol (MCP). This guide covers NetSuite configuration, OAuth 2.0 setup, and step-by-step connection instructions.

Prerequisites

Before connecting NetSuite to an AI assistant, ensure you have the following:

  • NetSuite account: Administrator-level access to configure features, integrations, and roles.
  • Paid AI accounts: ChatGPT Plus/Enterprise or Claude Pro/Enterprise (free tiers don't support MCP connectors).
  • Integration record: You'll create and configure a NetSuite AI Connector Service-specific integration record.
  • Enabled features in NetSuite:
    • Server SuiteScript
    • OAuth 2.0
    • REST Web Services
What is MCP?

The Model Context Protocol (MCP) is a standard that allows AI assistants to securely connect to external data sources and services. NetSuite's MCP implementation enables AI assistants to query records, run saved searches, and even create/update data in your NetSuite account.

NetSuite Configuration

Enable Features

Navigate to enable the required SuiteCloud features:

Setup → Company → Enable Features → SuiteCloud subtab

  • Server SuiteScript - Required for MCP server functionality
  • OAuth 2.0 - Required for secure authentication
  • REST Web Services - Required for API communication

Install SuiteApp

Install the official MCP SuiteApp from the SuiteApp Marketplace:

  1. Go to the SuiteApp section in your NetSuite account
  2. Search for "MCP"
  3. Install "MCP Standard Tools SuiteApp"

Configure Roles

Create a dedicated role for AI connections with least-privilege access:

Setup → Users/Roles → Manage Roles

Clone or create a new role

Clone an existing role (e.g., AP Clerk) or create a new role from scratch. Name it something like "AI Connector Role".

Add required permissions
  • MCP server connection - Set to Full
  • Login using OAuth 2.0 access token - Enable this permission
Limit data access

Only grant view/edit permissions for the specific record types the AI should access. Follow least-privilege principles.

Assign the role

Assign this role to the user(s) who will authenticate the AI connection.

Role Restriction

The Administrator role cannot be used for AI connections. You must create a dedicated role with specific permissions.

Integration & Authentication

This is a critical step before connecting ChatGPT or Claude. You'll create an integration record that enables OAuth 2.0 authentication.

Create Integration Record

Setup → Integrations → Manage Integrations → New

Field Value
Name e.g., "AI Connector - ChatGPT"
State Enabled
Authentication OAuth 2.0
Redirect URI Callback URL from your AI client

After saving, NetSuite generates a Client ID and Client Secret. Store these securely - the Client Secret is only shown once.

OAuth 2.0 Authorization Code Grant Flow

The authentication flow works as follows:

Authorization request

The AI client redirects you to NetSuite login for consent.

Authorization code

NetSuite returns a code to the Redirect URI after you approve.

Token exchange

The AI client sends the code, Client ID, and Client Secret to the token endpoint.

Tokens issued

Access Token (used in API calls) and Refresh Token (renews Access Token) are issued.

Endpoints

Replace <ACCOUNT_ID> with your NetSuite account ID:

Authorization: https://<ACCOUNT_ID>.suitetalk.api.netsuite.com/services/rest/auth/oauth2/v1/authorize Token: https://<ACCOUNT_ID>.suitetalk.api.netsuite.com/services/rest/auth/oauth2/v1/token Revoke: https://<ACCOUNT_ID>.suitetalk.api.netsuite.com/services/rest/auth/oauth2/v1/revoke
Security Best Practices
  • Least privilege: Only grant access to required data and actions
  • Subsidiary scope: Role restrictions limit visible data to assigned subsidiaries
  • Token lifecycle: Implement refresh logic; access tokens expire
  • Audit regularly: Review AI connector activity in the audit logs

ChatGPT Connection

Configure Connector

Open ChatGPT Settings

Settings → Apps and Connectors

Enable Developer Mode (if required)

Under Advanced Settings, enable Developer Mode to access custom connectors.

Create Connector

Click "Create Connector" and name it (e.g., "NetSuite Connector").

Enter Details

  • Account ID: Find at Setup → Company → Company Information
  • MCP server URL: Use the format provided in NetSuite AI Connector documentation, inserting your Account ID

Authenticate

  • Method: OAuth 2.0
  • Role: Select the custom role you configured earlier

Test

Try a simple prompt to verify the connection:

"Show me the most recently created vendor."

Verify the results match what you see in NetSuite.

Claude Connection

Configure Connector

Open Claude Settings

Settings → Connectors

Choose Connection Method
  • Web: Select "NetSuite AI Connector" from available connectors
  • Custom connector: Create a custom connector (recommended for more control)
Enter MCP Server URL

Use the same URL format as ChatGPT, inserting your Account ID.

Authenticate

Complete OAuth 2.0 authentication and select your custom role.

Pro Tip

Create separate integration records for ChatGPT and Claude. This makes it easier to revoke access independently and track usage in audit logs.

Testing & Troubleshooting

Issue Solution
Role not visible during authentication Verify permissions are set correctly, role is assigned to user, and try logging out/in to NetSuite
Permissions errors when creating/updating Role may be view-only; add edit permissions for the specific record types
Data not appearing Role may be restricted to specific subsidiaries; check subsidiary access settings
Token expired errors Refresh tokens should auto-renew; if persistent, re-authenticate
Data Controls

Review AI app settings to opt out of training data usage if desired. Both ChatGPT and Claude offer enterprise plans with stricter data handling policies.

Community Tools

In addition to the official SuiteApp and connectors, the following open-source project can help developers experiment and extend capabilities:

Open Source Disclaimer

Review and vet open-source code before production use. Community tools are not officially supported by Oracle/NetSuite.

References