NetSuite MCP connector

NetSuite is Oracle's cloud-based ERP solution for managing financial, customer, and operational data across businesses. The NetSuite MCP connector allows AI agents to query and retrieve business records using SuiteQL, manage customer data, and perform operations on records through the REST Record API. It also supports listing, updating, and deleting records across your NetSuite instance.

Authentication type

OAuth 2.0 Authorization Code - Requires a one-time user login to authorize the agent to access the service on their behalf.

Configuring your NetSuite integration record for the MCP connector

Boomi Connect uses OAuth 2.0 authentication to securely access your NetSuite account's REST web services. This lets Boomi Connect retrieve customer records and query data from your NetSuite account.

To create a NetSuite connector in Boomi Connect, first set up an integration record with OAuth 2.0 enabled in your NetSuite account. Next, gather the resulting client ID, client secret, and account ID from that integration record. Then, use these credentials to configure the connector in Boomi Connect.

Prerequisites

Make sure that you fulfill the following requirements before you start setting up OAuth 2.0 authentication for the NetSuite connector in Boomi Connect.

A NetSuite production account with administrator access. This can also be a sandbox account for testing. You need this account to create an integration record. Refer to Integration Management for more information.
A dedicated NetSuite user for this integration. You must not use an administrator's personal account.
Boomi Connect's callback URL, which you will provide in the NetSuite integration record's Redirect URI field. This callback must follow the pattern https://{environment-domain}/connector/netsuite/oauth/callback. For example, the URL for a US production environment is https://us.bc.boomi.com/connector/netsuite/oauth/callback.
Access to Boomi Connect's connector configuration interface.

Step 1: Creating an integration record with OAuth 2.0 in NetSuite

Log in to a NetSuite production account as an administrator and create a new integration record. Refer to Create Integration Records for Applications to Use OAuth 2.0 for more information.
In this record’s Authentication section, select Authorization Code Grant to use a redirection-based authorization code grant flow with OAuth 2.0.
For Scope, select REST Web Services only. Do not select RESTlets, SuiteAnalytics Connect, or NetSuite AI Connector Service.

Step 2: Configuring the redirect URI

In the integration record’s Authentication section, for Redirect URI, enter the Boomi Connect callback URL, https://us.bc.boomi.com/connector/netsuite/oauth/callback.
Save the record.

Step 3: Saving the integration record

Copy the Consumer Key and Consumer Secret that NetSuite generates after you save the integration record. You will need to provide these in Boomi Connect.
Examples of Consumer Key and Consumer Secret are 1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef and abcdef1234567890abcdef1234567890 respectively.
Keep these credentials confidential because NetSuite does not display them again.
Copy your NetSuite account ID, which is visible on the top-right corner of any NetSuite page. Its format is 1234567 for a production account, or 1234567-sb1 for a sandbox account.

Step 4: Creating a user and verifying required permissions

Open NetSuite's Manage Roles page (Setup > Users/Roles > Manage Roles). Make sure that the access level for your role is FULL for the Log in using OAuth 2.0 Access Tokens and REST Web Services permissions.
Refer to Setting Permissions for information about adding permissions to a role. If your role is missing these permissions, add them.

If you do not already have a dedicated NetSuite user, create one in NetSuite’s Manage Users page (Setup > Users/Roles > Manage Users).

Provide First Name, Last Name, and Email for this user.
For Role, assign a role that has the Log in using OAuth 2.0 Access Tokens and REST Web Services permissions. If you have an existing user, verify that it has a role with both these permissions.
Refer to NetSuite Users Overview for information about creating a NetSuite user.

Step 5: Configuring a NetSuite connector in Boomi Connect

Log in to Boomi Connect and on the left sidebar, click Configs.
On the Configs page, click Create Config.
On the Create Config form, do the following:
1. Type NetSuite in the Search connectors box.
2. For Config Name, enter a name for your NetSuite connector.
3. For Select Identity Provider, select a provider.
4. For OAuth Client ID and OAuth Client Secret, enter the consumer key and consumer secret you copied earlier after saving the integration record.
5. For Account ID, enter your NetSuite account ID.
6. In Manage Tools, select the tools based on the type of operations you want to perform.
7. Click Save.

The NetSuite connector appears as a tile under Recent Configs and is ready to use.

Troubleshooting

The following table describes common NetSuite OAuth2.0 errors, their causes, and how to resolve them.

Error	Reason	Solution
Invalid Client ID or Unauthorized Client	The client ID or client secret does not match the integration record, or the integration record is disabled.	In your NetSuite account, go to Setup > Integrations > Manage Integrations. For your integration record, verify that its State is Enabled. Copy the Consumer Key and Consumer Secret again and provide these credentials again in Boomi Connect. Make sure that you do not include any extra spaces.
Redirect URI Mismatch	The Redirect URI in NetSuite does not match what Boomi Connect is using.	In your integration record, check that the Redirect URI field’s value matches Boomi Connect's callback URL. Check for a missing path segment, `http://` instead of `https://`, or an inconsistent trailing slash, then update it to match exactly and re-authorize.
Insufficient Permissions or Access Denied	The authorizing user's account is missing Log in using OAuth 2.0 Access Tokens or REST Web Services permission.	In NetSuite's Manage Roles page, verify that the user has the correct role assigned with FULL access for both the permissions.

Security best practices

Use a dedicated user for this integration instead of an administrator's personal account.
Restrict the user role to only the Log in using OAuth 2.0 Access Tokens and REST Web Services permissions, instead of granting broader access.
Rotate the client secret every 90 days.
Use https:// only for the redirect URI. Never use an http:// address.
Keep the client ID and client secret confidential. Do not share them in Slack, email, or logs.
Monitor token usage periodically by checking Setup > Integrations > Manage Integrations in NetSuite.

Uses

Use the NetSuite MCP connector to perform the following actions:

Retrieve customer records and account details from NetSuite by internal ID
Query customers, transactions, and inventory using SuiteQL for advanced filtering
List all records of a specific type to find and review business data
Update customer information, sales orders, and financial records in NetSuite
Delete outdated or duplicate records to maintain data accuracy
Execute complex SuiteQL queries to generate custom business reports and insights
Automate multi-step workflows that read, modify, and remove NetSuite records

Example prompts

Use the following example prompts to invoke NetSuite MCP connector tools from your AI assistant or Boomi Connect workflow:

Show me the customer details for ID 12847 in NetSuite.
Find all invoices with a status of open that were created in the last 30 days.
List every vendor in our NetSuite instance.
Query all sales orders from customer ABC Corp that are pending fulfillment.
Update the billing address for customer John Smith in NetSuite.
Delete the duplicate employee record with ID 5634.
Run a SuiteQL query to get all transactions over 50000 from the last quarter.
Retrieve all purchase orders that have not been approved.
Show me customers in the technology industry with annual revenue over 1 million.
Find and list all items in our inventory with zero stock.

NetSuite MCP connector tools

The NetSuite MCP connector provides the following tools. Each tool maps to a specific action you can invoke from your AI agent or automation.

Tool	Description
netsuite_netsuitegetcustomer_invoke	Retrieves detailed information for a specific customer record.
netsuite_netsuitequeryrecords_invoke	Searches and retrieves records using structured query language.
listRecords	Displays a list of records of a specified type.
getRecord	Retrieves complete details for a single record by identifier.
updateRecord	Modifies and saves changes to an existing record.
deleteRecord	Removes a record from the system permanently.
runSuiteQL	Executes a custom query to retrieve filtered record data.