NetSuite MCP

Connect Oracle NetSuite to BotDojo through the NetSuite AI Connector Service. BotDojo treats NetSuite as a remote Model Context Protocol (MCP) Connection, discovers the tools available to the authorized NetSuite role, and applies BotDojo Connection access and approval controls to those tools.

The recommended setup uses Oracle's MCP Standard Tools SuiteApp and BotDojo's built-in NetSuite Connection.

Use a dedicated NetSuite role. The MCP Standard Tools SuiteApp can create and update records as well as read reports, saved searches, records, and SuiteQL results. Use a non-Administrator role with only the permissions the agent needs. NetSuite's Administrator role cannot authorize the AI Connector Service.

Review compliance before connecting. Oracle states that the NetSuite AI Connector Service has not been assessed for HIPAA safeguards. Do not use it to store, process, or transmit electronic protected health information (ePHI) unless your organization has independently determined that the use complies with its obligations. Review Oracle's requirements and associated risks, controls, and mitigation strategies.

Before You Start

You need:

• permission to enable NetSuite features and install SuiteApps;
• permission to create or review NetSuite integration records;
• a dedicated non-Administrator NetSuite role for the BotDojo connection;
• permission to add a Connection in the intended BotDojo project or personal workspace; and
• the NetSuite account ID used in your account-specific SuiteTalk domain.

If NetSuite does not appear under Connections → Add Connection, ask a BotDojo administrator to allow Remote MCP Connections for the project or personal workspace.

Prepare NetSuite

Enable the required features

1. In NetSuite, go to Setup → Company → Enable Features.
2. Open the SuiteCloud subtab.
3. Enable Server SuiteScript.
4. Enable OAuth 2.0.
5. Under SuiteTalk (Web Services), enable REST Web Services.
6. Save the changes.

Install MCP Standard Tools

1. Open the SuiteApps tab.
2. Search for MCP Standard Tools.
3. Open the SuiteApp and select Install.
4. Wait until the installation completes.

MCP Standard Tools is a managed SuiteApp. Oracle can update its tool surface over time, so refresh and review the discovered tools in BotDojo after a SuiteApp update.

Create a least-privilege role

Create a role for the NetSuite user who will authorize the Connection. BotDojo users and agents receive access separately through BotDojo Connection permissions. Under the role's Permissions → Setup subtab, add:

• MCP Server Connection;
• Log in using OAuth 2.0 Access Tokens — not the similarly named Log in using Access Tokens permission; and
• REST Web Services when the role needs the Standard Tools record operations.

Add only the record, report, saved-search, and SuiteAnalytics permissions required for the intended use case. A tool is visible only when the selected role has its required permissions, and every operation remains limited by that role.

Verify the OAuth integration record

Go to Setup → Integration → Manage Integrations and look for an integration record installed for the NetSuite AI Connector Service. If the record is Pending, an administrator must open and enable it. If no suitable record exists, create one for BotDojo with:

Use the BotDojo URL for your environment if you are connecting from a custom or non-production deployment. The redirect URI must match exactly.

For an AI Connector integration record, leave Token-based Authentication, Client Credentials, and the other OAuth 2.0 scopes such as REST Web Services, RESTlets, and SuiteAnalytics Connect cleared. This is separate from assigning REST Web Services permission to the NetSuite role.

Connect NetSuite In BotDojo

1. Choose where the Connection should be owned:

   • For a project Connection, open the project and select Context → Connections → Add Connection.
   • For a personal Connection, open Personalization → Connections and select Add beside My Connections.

2. Search for and select NetSuite.

3. Enter the account-specific NetSuite MCP endpoint:

   https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/suiteapp/com.netsuite.mcpstandardtools
   

4. Keep OAuth - Dynamic Client Registration selected.

5. Select Connect and complete the NetSuite sign-in and consent window.

6. Choose the dedicated non-Administrator role when NetSuite asks which role to authorize.

7. Wait for BotDojo to save the Connection and discover its tools.

The SuiteApp-specific endpoint exposes only tools from MCP Standard Tools. To expose all MCP tools installed in the account, including custom tools, use:

https://<accountid>.suitetalk.api.netsuite.com/services/mcp/v1/all

Use /all only when the broader tool surface is intentional.

Review Tool Access

After authorization, open the saved NetSuite Connection and review Tools before assigning it to an agent:

1. Select Refresh if tool discovery has not completed.
2. Disable every tool the agent does not need.
3. Set each enabled tool to Deny, Ask, or Allow.
4. Prefer Ask for tools that create or update records.
5. Set Default Approval to Deny for tools Oracle may add later. Use Ask only when your organization has deliberately accepted that broader default.
6. Save the Connection.
7. Grant the intended users and agents access, or enable the Connection in the intended workspace.

BotDojo approvals add a control around tool calls, but the NetSuite role remains the primary data-access boundary. Use a read-only NetSuite role when the agent should never write records.

Verify the Connection

1. Confirm that the NetSuite Connection shows discovered tools in BotDojo.
2. From an authorized workspace, run a low-risk read request such as listing saved searches or executing a bounded, read-only SuiteQL query.
3. Confirm that tools marked Ask require approval.
4. In NetSuite, open Setup → Integration → Manage Integrations and select the BotDojo integration record.
5. Open Execution Log → AI Connector Service (MCP) and confirm the request status, user, response code, and URL path.

Troubleshooting

If the NetSuite account cannot use Dynamic Client Registration, choose OAuth - Pre-registered Client in BotDojo instead. Register the exact BotDojo redirect URI in NetSuite, then enter the integration record's client ID and any client secret required by its token authentication method.

References

• NetSuite AI Connector Service requirements
• Install the MCP Standard Tools SuiteApp
• Connect to the NetSuite AI Connector Service
• Create an OAuth 2.0 integration record
• Available MCP Standard Tools
• Configure BotDojo Remote MCP Connections