NetSuite AI integration

NetSuite AI Integration: Claude + MCP Setup Service

We connect Claude to NetSuite through Oracle's NetSuite AI Connector Service, which uses the Model Context Protocol (MCP). The work is scoped in three packages: connector setup with role design, a finance use-case pilot, and ongoing support. Each package is quoted in writing, starts read-only, and keeps a person approving anything that posts.

Getting Claude to answer a NetSuite question takes an afternoon. Getting a connection your controller, auditor, and NetSuite administrator are all comfortable leaving switched on takes role design, testing against known numbers, and a review routine. That second part is the service.

Next step

30 minutes with a senior consultant. We will tell you honestly whether we can help, then follow up with a written scope.

Start Your AI Action Plan

Scoped packages

Each package is quoted in writing after a scoping call, based on your account, the number of workflow families, and who on your side will review outputs. Many clients start with the AI Action Plan to choose the first workflow.

Connector setup and role design

Quoted in writing after scoping

A working, governed connection between Claude and NetSuite, limited to read-only access.

  • Review of Oracle's risks, controls, and mitigation guidance with your security owner
  • Required features enabled: Server SuiteScript, OAuth 2.0, REST Web Services
  • MCP Standard Tools SuiteApp installed and verified
  • Purpose-built, non-administrator role per workflow family, view permissions only
  • Named-user assignment and an Execution Log check

Finance use-case pilot

Quoted in writing after scoping

One finance workflow running read-only, tested against a past period where the right answer is known.

  • Workflow chosen with the controller, such as A/R aging review or close open-items
  • Saved searches selected or built so Claude reads logic finance already trusts
  • Test against a closed period, with differences explained
  • Reviewer checklist and a written decision on whether to extend access

Ongoing support

Quoted in writing

Keep the connection safe as NetSuite releases, roles, and people change.

  • Scheduled access reviews of users, roles, tools, and authorized clients
  • Execution Log review and concurrency checks
  • New workflows added through the same read-first process
  • Release preview checks for connector and SuiteApp changes

What the NetSuite AI Connector Service is

The NetSuite AI Connector Service is Oracle's implementation of the Model Context Protocol for NetSuite. An external AI client, such as Claude, calls tools that work with NetSuite data. Oracle's MCP Standard Tools SuiteApp provides ready-made tools for records, reports, saved searches, and SuiteQL, and developers can build custom tools in SuiteScript (Oracle: NetSuite AI Connector Service).

Two facts shape every project. Each tool runs with the permissions of the role the user connected with, so the AI can do nothing that role cannot. And the connection requires a purpose-built role rather than the Administrator role (Oracle: required features and permissions).

Who this service is for

  • Finance teams on NetSuite who want Claude answering questions about their own data, not generic ones
  • Controllers who need the connection to pass an access review
  • NetSuite administrators who have been asked to switch it on and want a second set of eyes on role design
  • Companies that tried a broad connection, felt uneasy, and want it rebuilt narrowly

Illustrative timeline

A typical first project moves through these stages. Durations vary with access approvals and reviewer availability, so we commit to dates in the written quote rather than on this page.

StageWhat happensOutput
ScopingAccount review, workflow choice, security owner identifiedWritten scope and quote
SetupFeatures, SuiteApp, roles, named usersRead-only connection with one test question logged
PilotOne workflow against a closed periodReviewer checklist and results note
DecisionReview with the controllerExtend, adjust, or stop, in writing

Illustrative stages, not a delivery commitment.

Role design is the security model

The MCP Standard Tools SuiteApp includes tools that can create and update records, and any role with MCP Server Connection can use them on any record its permissions allow. Oracle recommends a separate role holding only the record permissions users should have through an AI client. We go further:

  • One role per workflow family rather than one role for all AI use
  • View-level record permissions first; create and edit added per workflow with an approval step
  • No posting period, costing method, bank reconciliation, or credit term permissions on AI roles
  • Named users only, so every request in the Execution Log is attributable
  • A scheduled review of users, roles, installed tools, and authorized clients

Good first workflows

The best pilots are questions your team already answers every month by hand, where the right answer is easy to check. Examples we commonly scope:

  • A/R aging review with large or unusual balances flagged for a person to follow up
  • Close open-items summary from saved searches finance already uses
  • Vendor spend questions answered with SuiteQL, with the query shown for review
  • Variance explanations drafted from approved numbers for the controller to edit

Representative workflow types, not client results.

Practical limits to plan around

Oracle notes that the SuiteQL tools are read-only, that report tools accept date and subsidiary filters rather than accounting periods, and that very large queries risk timing out. Requests share your account's concurrency limit with other integrations. We design pilots around those limits: saved searches for numbers finance already trusts, SuiteQL for narrow lookups, and no wide data pulls for the model to summarise. The full detail is in our setup guide.

How this fits with our other AI work

If you are not yet sure which workflow should come first, start with the AI Action Plan. If you also want Claude Cowork for the accounting team, see Claude consulting for finance teams. For connecting AI agents to systems beyond NetSuite, see MCP integration consulting.

Frequently Asked Questions

What is NetSuite AI integration with Claude?

It is a connection between Claude and NetSuite through Oracle's NetSuite AI Connector Service, which uses the Model Context Protocol. Claude calls tools that read or change NetSuite data, limited to the permissions of the connected role.

How much does NetSuite AI Connector Service setup cost?

Each package is quoted in writing after a scoping call, because the effort depends on your account, the number of workflow families, and your review process. The only fixed price we publish is the AI Action Plan, which many clients use to choose the first workflow.

Can we use the Administrator role to connect Claude?

No. Oracle requires a purpose-built role for the connection rather than the Administrator role. We build a narrow role per workflow family.

Does the connector let Claude change records?

It can, if the connected role has create or edit permissions, because the MCP Standard Tools SuiteApp includes record tools. We start view-only and add write access per workflow after review.

Do we need a NetSuite developer for this?

Not for the standard tools. Custom tools are written in SuiteScript, and we scope those separately when a workflow needs one.

How do we know what Claude did in NetSuite?

Requests appear on the integration record's Execution Log. Using named users means each request maps to a person, and we set up a review routine for the log.

Is TFR Solutions an Oracle NetSuite partner?

No. We are an independent NetSuite consulting firm and do not resell NetSuite or Claude.

Sources

Talk to a senior consultant

Tell us what is not working. We will scope it and put the quote in writing.

Start Your AI Action Plan

Last updated:

Claude is a trademark of Anthropic, PBC. TFR Solutions is not affiliated with Anthropic, PBC.

Start with the AI Action Plan

$5,000 fixed fee.

Start Your AI Action PlanExplore AI Services

Explore

TFR Solutions, Los Angeles, CA · info@tfr.solutions · (310) 894-6031