NetSuite AI Connector Service and MCP Standard Tools: what it can read and change, and how to connect

NetSuite hosts a remote MCP server per account; the free MCP Standard Tools SuiteApp reads and writes records. OAuth with PKCE, non-admin roles. Verified 21 Oct 2026.

Official MCP server · read & write (hosted by NetSuite)
Claude connector · read & write (Oracle NetSuite, Anthropic verified)
ChatGPT app · read & write (per NetSuite docs)

Hosting: Remote HTTP, hosted by NetSuite per account: https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/all, or /suiteapp/<applicationid> for one SuiteApp. No local server.
Auth: OAuth 2.0 with PKCE via a public-client integration record (NetSuite AI Connector Service scope). Sign in with a non-administrator role.
Read / write: Read and write. 25 standard tools: reports, saved searches, read-only SuiteQL, plus record create, update, transform and action tools that write directly.
Works with: Claude.ai, Claude Desktop, Claude Code, ChatGPT, Codex and any MCP client supporting remote MCP, protocol 2025-06-18, streamable HTTP and PKCE
Plan requirement: NetSuite says the service is not a paid feature and the SuiteApp is free, but you may need a paid plan for your AI client. For Claude, NetSuite lists Pro or higher.
Last changed: 2026-04-01 (Companion capabilities, MCP Apps and an Analytics Warehouse connector announced)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with NetSuite through MCP?

Run reports, saved searches and read-only SuiteQL, and create or update any record the signed-in role can reach through REST; NetSuite lists 25 standard tools.

The AI Connector Service is the server. The MCP Standard Tools SuiteApp supplies the tools. Admins can add custom SuiteScript 2.1 tools.

What happens when it writes

Oracle documents no draft step.

Tool	What happens
`ns_createRecord`, `ns_updateRecord`, `ns_transformRecord`	Change records directly.
`ns_executeRecordAction`	Runs whatever action a record offers.

Money

There is no dedicated payment tool.
Even so, Oracle says MCP roles can create and update any REST-accessible record their permissions allow.
Oracle's risk page names payments and approvals as possible unintended actions.

Can

List and run standard and custom reports, filtered by date and subsidiary
List and run saved searches; run read-only SuiteQL queries and read SuiteQL metadata
Read records and record-type metadata; list subsidiaries, books, contexts and nexuses
Create, update and transform records (direct writes)
Execute record actions (effect depends on the action; Oracle doesn't list them)
Attach or detach File Cabinet files on records; search and browse folders

Cannot

Run under an Administrator role or any role with full access (per NetSuite)
Write through SuiteQL; NetSuite supports read-only queries only
Filter reports by accounting period; only date and subsidiary filters work (per NetSuite)
Call external APIs or run scripts with raised permissions (per NetSuite)

What access does it get?

Exactly what the signed-in NetSuite role allows. The OAuth token carries one scope, NetSuite AI Connector Service, and the role's permissions set every read and write it can make.

Where	Scopes and permissions (as documented)	Admin requirement
AI Connector Service with MCP Standard Tools (any client)	OAuth scope: NetSuite AI Connector Service (public client, Authorization Code Grant). Role permissions: MCP Server Connection, Log in using OAuth 2.0 Access Tokens, and REST Web Services for record tools. Tools show only if the role holds their permission.	An admin enables the features, grants the permissions to a non-admin role and installs the SuiteApp. For non-Claude clients an admin may need to enable the integration record.
Claude connector (Oracle NetSuite)	Same scope and role model. NetSuite says the integration record is created on first Claude connection and enabled automatically regardless of account settings.	Claude Team/Enterprise: an Owner adds the connector. NetSuite admins can disable the record or cap its concurrency (Setup › Integration › Manage Integrations).
ChatGPT app (NetSuite)	Same scope and role model; you pick a non-administrator role at sign-in.	ChatGPT Business/Enterprise: an admin must allow the app. With custom tools, each connection needs a new integration record (per NetSuite).

How do I connect it?

A NetSuite admin enables three features, sets up a non-admin role and installs the SuiteApp; each user then adds NetSuite in their client and signs in with that role.

NetSuite admin: Setup › Company › Enable Features › SuiteCloud, check Server SuiteScript and OAuth 2.0, plus REST Web Services (needed to install the SuiteApp), then Save.
NetSuite admin: Setup › Users/Roles › Manage Roles, edit a non-admin role, and under Permissions › Setup add MCP Server Connection and Log in using OAuth 2.0 Access Tokens. Add REST Web Services if users should create, retrieve or update records. NetSuite ties this permission only to those record actions.
NetSuite admin: SuiteApps tab, search MCP Standard Tools, Install.
Claude Team/Enterprise: an Owner adds the NetSuite connector for the organisation.
Each user: open https://claude.com/marketplace/connectors/oracle-netsuite and add it, or in Claude open Search and tools › Add connectors, select NetSuite under the Web tab, then Connect.
Paste the server URL https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/suiteapp/com.netsuite.mcpstandardtools and click Continue.
Open Search and tools › Manage connectors, find NetSuite under Your connectors, click Connect and sign in with the non-admin role.

Claude Pro or higher, per NetSuite. Claude's listing shows 17 tools and leaves out the transform, record-action and File Cabinet tools in NetSuite's list of 25. Custom tools use a separate flow: Settings › Connectors › Add custom connector, with /services/mcp/v1/suiteapp/<applicationid> or /services/mcp/v1/all.

What should a finance team watch for?

Writes go straight into NetSuite, so the role you connect with is what limits them. Give it only the record permissions the task needs.

No draft step is documented: record, transform and action tools change NetSuite at once, limited only by the role. Oracle lists payments and approvals among possible unintended actions.
Least privilege: NetSuite suggests a separate role with MCP Server Connection and only the record permissions and actions users need. ns_createRecord needs REST Web Services (Full). Oracle advises starting with read-only or low-impact tools. The per-SuiteApp URL limits which tools load.
Memos, descriptions and attached files are free text. An injected instruction in one could push the agent to update records, approve or pay. NetSuite doesn't ask before each change, so the AI client's tool-permission pop-up is the only per-call check: keep it on for every write and don't let NetSuite tools run without asking.
Concurrency limits are shared with other integrations (Too Many Requests); admins can cap the record's share. NetSuite notes that AI clients usually handle about 5,000 rows per call, and large queries may hit token limits or time out.
For financial statements, NetSuite advises standard reports over SuiteQL, because standard reports apply business rules SuiteQL can't. Reports through MCP filter by date and subsidiary only; accounting periods aren't supported.
Execution logs are kept 21 days in production, 7 in sandbox.
NetSuite says you must acknowledge data sharing before you connect, data in NetSuite is handled under Oracle's terms, and data sent to an AI client falls under that provider's privacy policy. The service is not HIPAA-assessed.

How could finance teams and accounting firms use it?

Reports, saved searches and SuiteQL work for questions and close checks; use standard reports for financial statements, filtered by date range because accounting periods aren't supported. The write tools fit drafting changes that a person confirms before the agent saves them.

Inside a company

Ask for a subsidiary's income statement or AR aging for a date range without building a report.
Run a saved search for unapproved bills or open purchase orders before close.
Use SuiteQL to find duplicate vendors or transactions missing a department or class.
Prepare vendor or customer record updates and confirm each write.

At an accounting firm

Pull trial balance and report data by subsidiary and date range for a client's month-end review (reports can't filter by accounting period).
Check a client's records for missing fields or odd postings before a review meeting.
Draft record changes from review notes for the client's approver to confirm.
Answer client questions on balances and open items, checked by a person.

Keep a person approving every write, and keep payments and approvals in NetSuite's own workflow.

Want NetSuite connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Docs re-checked: 25 standard tools including record transform and record actions; per-SuiteApp URL for Claude	docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/articl
2026-04-01	Companion capabilities, MCP Apps and an Analytics Warehouse connector announced (English first)	www.cio.com/article/4153244/netsuite-expands-toolkit-to-ease
2025-11	Oracle NetSuite connector added to the Claude directory (Anthropic verified)	claude.com/marketplace/connectors/oracle-netsuite
2025-10-07	NetSuite AI Connector Service announced at SuiteWorld 2025	www.oracle.com/sg/news/announcement/sw25-netsuite-expands-su

FAQ

Is this official?

Yes. Oracle NetSuite runs the service, publishes the SuiteApp and documents both. The Claude listing is made by Oracle NetSuite and marked Anthropic verified.

Is it free?

NetSuite says the service is not a paid feature and the SuiteApp is free. You still need a NetSuite subscription and an AI client plan that allows connectors (Claude Pro or higher).

Does it write to my books?

Yes. Record, transform and action tools create and change NetSuite records directly, within the role's permissions. NetSuite doesn't document a draft step.

Is my data used to train models?

NetSuite's docs don't say. They state that data sent to an AI client is governed by that provider's privacy policy, so check Oracle's terms and your AI provider's terms.

Can my accountant use it on my behalf?

NetSuite doesn't document this. The connection acts as whoever signs in, so an accountant needs their own NetSuite login with an MCP-enabled non-admin role, which sets what the agent can do.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.