At a Glance — NetSuite MCP Options
- Native: NetSuite’s AI Connector Service with the MCP Standard Tools SuiteApp: 25 tools in seven groups, covering records (create, update, transform), record actions, File Cabinet files, reports, saved searches, read-only SuiteQL and session info, plus MCP Apps, all limited by the user’s role
- Celigo MCP Server: a defined set of narrow queries across connected systems, scoped tokens, read-only enforcement at the MCP layer, query-level logging
- n8n MCP Server Trigger: any n8n workflow becomes a tool, so you can add validation, transformation and approvals
- Our rule of thumb: NetSuite-only and role-based, start native. Multi-system or must-be-read-only, Celigo. Custom logic, n8n.
- Applies to all three: the AI’s access is only as safe as the role or token behind it, and prompt injection through free-text fields is still yours to design around
Updated October 29, 2026, after SuiteWorld: Oracle has widened the native connector. Its documentation now lists 25 tools in seven groups, up from the four groups we described on October 15. The new tools can run record actions, transform one record into another (a sales order into an invoice, say), and attach files to records. Six MCP Apps now add in-chat screens for picking records, setting report filters and browsing or uploading File Cabinet files. Oracle’s documentation also states that Administrator roles, and roles with full permissions, cannot use MCP at all. We have rewritten the sections below from Oracle’s help pages as they read on October 29. We could not open the SuiteWorld press releases on netsuite.com, so this update covers documented features only. For what NetSuite Next itself changes for integrations, see NetSuite Next and your integrations.
Update, October 23, 2026: Celigo’s MCP Management, announced October 20, is also described as a gateway in front of vendor MCP servers, and its product page shows a NetSuite vendor MCP in the demo. If that holds in your account, it is a way to add per-person tool approval, rate limits and logging in front of NetSuite’s native connector, not only an alternative to it (details in Celigo’s announcement). Celigo’s page says the registry part is available in November, and we have not tested this setup, so check it before you rely on it.
What NetSuite’s native MCP support is
Oracle’s documentation says NetSuite has adopted the Model Context Protocol so that supported AI clients can access and interact with NetSuite data and functionality. In practice that is two pieces. The NetSuite AI Connector Service is the MCP endpoint. The MCP Standard Tools SuiteApp is the set of tools NetSuite ships for it, and you can build your own custom tools as well.
Oracle’s tool list now has seven groups and 25 tools:
- Records: create, get and update a record, get record-type metadata, list the transformations a record type supports, and transform an existing record into a new record of a supported type.
- Record actions: list the actions available for a record type or a specific record, and execute one of them.
- File Cabinet: search file names, list a folder’s contents, convert between paths and internal IDs, and attach a file to a record or detach it (detaching does not delete the file).
- Reports: list all standard and custom reports, run a report, and list the accounting books, accounting contexts, nexuses and subsidiaries used to filter report results.
- Saved searches: list saved searches and run an existing one.
- SuiteQL: run a custom SuiteQL query (Oracle says only read-only queries are supported) and get SuiteQL metadata.
- Runtime: return the account, role, enabled features, granted permissions and preferences of the current session.
The SuiteApp also ships six MCP Apps, small interactive screens shown inside the chat. They are a File Cabinet browser, Get File (which asks for confirmation before sending a file’s contents into the conversation), Upload File, a prompt library, a record selector and report filters.
Two points from Oracle’s pages matter most. First, the SuiteApp “includes tools that can create and update records in NetSuite using REST Web Services,” so a connected assistant is not read-only by default. The newer tools go further: they can run record actions, transform records and attach or upload files. Oracle’s own risk guidance warns that an agent may run “powerful MCP tool functions – such as making payments or granting approvals – without the user’s explicit intent.” Second, access follows the role: the tools use the same access controls as the NetSuite UI and don’t provide access beyond what the role allows, and a tool shows up in the AI client only if the role has all the permissions it needs.
What Oracle says about roles, setup and logging
- Permissions. Roles that already have the MCP Server Connection permission can perform actions on any records available through REST, if their permissions allow. Oracle suggests reviewing which users and roles hold that permission before installing the SuiteApp, and creating a separate role with the permission plus specific record permissions.
- Which role you sign in with. Oracle’s risk guidance says NetSuite does not allow Administrator roles or roles with full permissions to use MCP, and recommends separate roles for different MCP tools instead of reusing broad operational roles. For ChatGPT, Oracle’s instructions say to select a non-administrator role. For Claude, Oracle says you need the Pro plan or higher.
- Endpoint. Oracle gives the standard-tools address as
https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/suiteapp/com.netsuite.mcpstandardtools, and a second address for all custom tools. - Integration record. The first connection from Claude installs an integration record (Public Client, Authorization Code Grant, with the AI Connector Service scope). Its State and Concurrency Limit fields can be edited, so you can disable it or give it a share of your concurrency limit.
- Logging. An AI Connector Service (MCP) subtab in the execution log shows call date and time, duration, status, user email, HTTP status code, method and URL path, kept for 21 days in production and 7 in sandbox.
- Approval and confirmation. Oracle recommends keeping an approved list of AI agents, MCP clients, MCP servers and tools, and preferring clients that ask the user to confirm high-impact actions such as creating, modifying, approving, paying or exporting large data sets. NetSuite gets the user’s consent for each AI agent during OAuth sign-in, but its documentation does not describe a confirmation step before each tool call.
- Duplicates. Oracle’s best practices say to always set the External ID when the assistant creates a record, which prevents duplicates and makes records easier to trace. That matters even more when the same records are also created by a Celigo or n8n integration.
- Compliance. Oracle states the service has not been assessed for HIPAA compliance and must not be used for ePHI unless you have independently determined that use is consistent with your obligations.
NetSuite AI Connector vs Celigo MCP Server vs n8n
The three are not interchangeable. The difference is who decides what the AI can ask for. The first two rows below come from Oracle’s documentation, our own Celigo MCP Server article and our n8n MCP Server article.
| NetSuite AI Connector | Celigo MCP Server | n8n MCP Server Trigger | |
|---|---|---|---|
| What it reaches | NetSuite, through the MCP Standard Tools SuiteApp or your own custom tools | Systems connected in Celigo, such as NetSuite and Salesforce | Whatever your workflows touch |
| Who defines the tools | Oracle ships the standard tools; you can build custom ones | You, as a set of queries with fixed inputs and outputs | You, as workflows |
| Access control | The signed-in user’s NetSuite role, via the MCP Server Connection permission | A scoped token managed by Celigo; read-only enforced at the MCP layer | Bearer token on the trigger endpoint; OAuth for instance-level access |
| Can it write? | Yes: create, update, transform, record actions, file attach and upload; SuiteQL is read-only | Only if you define a write; read-only tokens block writes | Only if you build one; best added behind validation and approval |
| Logging | Execution log: time, duration, status, user email, HTTP status, method, URL path | Each query: timestamp, model or token identity, input parameters, response hash | n8n’s execution history for each workflow run |
| Setup effort | Install the SuiteApp, set up a role, connect the client | Define the queries and tokens in Celigo | Build and test the workflows |
Which one to use
- Start native when the work is NetSuite-only and the users already have the right roles. Finance and operations staff asking questions of their own data, with NetSuite’s permissions doing the gatekeeping, is what it is built for.
- Choose Celigo’s MCP Server when the tools must be narrow and read-only by design, or span systems. “Order status by order number” and “inventory by SKU” as fixed queries are a smaller surface than a role that can reach every record.
- Choose n8n when the tool needs logic. Validation, joining NetSuite with another system, transformation, or a human approval step before a write are workflow jobs.
- Combine them. Native for exploratory questions, Celigo or n8n for the governed tools an agent uses repeatedly. They don’t conflict, as long as each AI client has its own access and role.
What stays your problem with any of them
Whatever sits between the AI and NetSuite, the AI reads what is in NetSuite. A customer memo or item description containing hidden instructions can steer a model, and a role that can reach too much quietly undoes the scoping. Our MCP security article covers the risks, and our system of record vs system of action guide explains why we put the control in a layer you own. For the cost side, see AI agent NetSuite integration cost.
Review which roles hold the MCP Server Connection permission. Create a separate role with only the record permissions the work needs, and decide whether that role should see the record action and File Cabinet tools at all (a tool appears only when the role has all its permissions). Install the MCP Standard Tools SuiteApp. Connect the AI client with the endpoint from Oracle’s documentation and a non-administrator role. Check the integration record and its concurrency limit, run a test in a sandbox, then read the execution log. Oracle’s pages cover the required features and permissions in detail, so follow them rather than a third-party summary.
Frequently Asked Questions
What is NetSuite MCP? NetSuite MCP means connecting an AI assistant such as Claude or ChatGPT to NetSuite through the Model Context Protocol. NetSuite offers this natively through its AI Connector Service and the MCP Standard Tools SuiteApp, which expose tools for records, record actions, File Cabinet files, reports, saved searches and SuiteQL. You can also build the same access with Celigo's MCP Server or with n8n's MCP Server Trigger.
Can an AI assistant change NetSuite records through the AI Connector Service? Yes. Oracle's documentation lists tools that create, update and transform records, execute record actions, and attach files to records, all through REST Web Services. The SuiteQL tool is read-only. NetSuite does not allow Administrator roles or roles with full permissions to use MCP, and what the assistant can do depends on the role you sign in with, so Oracle recommends a separate role with only the permissions the work needs.
Which AI clients work with NetSuite's AI Connector Service? Oracle's documentation describes connecting Claude, which requires the Pro plan or higher, and ChatGPT, where you choose a non-administrator role at sign-in. For other clients, Oracle points to that provider's own documentation and to building custom tools.
How is NetSuite MCP access logged? Oracle's documentation describes an execution log with an AI Connector Service (MCP) subtab showing the call date and time, duration, status, user email, HTTP status code, method and URL path. Retention is 21 days in production and 7 days in sandbox. Celigo's MCP Server logs each query with a timestamp, the model or token identity, the input parameters and a hash of the response.
Should I use NetSuite's AI Connector, Celigo or n8n for NetSuite MCP? Entech's view: use NetSuite's native connector when the work is NetSuite-only and role-based access is enough, Celigo's MCP Server when you want a small set of narrow, read-only tools across NetSuite and other systems with query-level logging, and n8n when the tools need custom logic, validation or transformation. Many teams use more than one.
Sources
- Get Started with the NetSuite AI Connector Service (Oracle NetSuite Help)
- MCP Standard Tools SuiteApp (Oracle NetSuite Help)
- Available Tools in the MCP Standard Tools SuiteApp (Oracle NetSuite Help)
- Available MCP Apps in the MCP Standard Tools SuiteApp (Oracle NetSuite Help)
- Associated Risks, Controls, and Mitigation Strategies (Oracle NetSuite Help)
- MCP Standard Tools SuiteApp Best Practices (Oracle NetSuite Help)
- October 19, 2026 Release Notes changes (Oracle NetSuite Help)
- Connect to the NetSuite AI Connector Service (Oracle NetSuite Help)
Oracle’s documentation changes with each release. We first reviewed these pages on October 15, 2026, re-checked them on October 29, 2026 after SuiteWorld, and will re-check them as NetSuite updates the service.
Entech Solutions is a certified Celigo partner and builds n8n workflows, including governed AI access to NetSuite. See our AI Agents & MCP Server page, or talk to an integration expert about which option fits your setup.