Connect Claude or ChatGPT to NetSuite QuickStart via MCP

QuickStart has its own MCP server, documented in Oracle's MCP server help page. The client connects over Streamable HTTP to:

https://my.quickstartapi.netsuite.com/mcp

Oracle's wording: "Use OAuth when the client supports QuickStart's OAuth flow; a personal access token is an alternative."

1. Turn the server on

Menu > Administration > QuickStart settings > General > "MCP Server Enabled".

2a. OAuth, when the client supports it

The client opens a QuickStart consent screen in the browser. There you check the company ID, pick an access level and allow the connection.

• Read-only access "is selected initially". Read and write appears only when the client registration permits it.
• "Access duration (days)" takes "a whole number from 1 through 90 days. The default is 30 days." It appears for clients that support refresh tokens.
• To revoke: Menu > Administration > QuickStart settings > OAuth client registrations, row menu, Revoke. Only the user who authorized a connection can revoke it.

OAuth for MCP arrived in release 2026.8, per What's new.

2b. Personal access token

Menu > Administration > QuickStart settings > Personal access tokens > Create personal access token. The default expiration is 30 days after creation, the default scope is read-only, and the token is shown only once.

Oracle gives ready configurations. For Claude Code:

claude mcp add --transport http quickstart https://my.quickstartapi.netsuite.com/mcp -H "Authorization: Bearer GENERATED_PERSONAL_ACCESS_TOKEN"

The same page has configs for Claude Desktop (via npx mcp-remote) and Codex CLI (config.toml). For ChatGPT, Oracle notes that QuickStart OAuth accepts ChatGPT's callbacks but tells you to follow ChatGPT's current requirements and verify the connection yourself.

What the AI client can do

With a read-only credential, the tools are: notifications, navigation_targets, todo_list, get_record_model, list_records, read_record, read_record_sublist, get_record_apply_candidates, list_record_attachments, discover_preferences, read_preferences, report_catalog, describe_report, report_filter_values, configure_report, run_report.

A read-write credential adds: create_record, dismiss_notification, update_record, delete_record, execute_record_action, execute_record_transform, upload_temporary_file, set_record_attachment, send_record_email, set_preferences, submit_contact_support_request.

Oracle adds that "The set of available tools and exposed records is growing", so ask the client for the current list.

Limits worth knowing

The help page says nothing about how many requests can run at once. The figure of 2 concurrent integration requests, MCP included, comes from Oracle's netsuite.com QuickStart page as reported by ERP Today and Futurum, and is covered in our QuickStart article. See also What happens when you exceed QuickStart's free plan limits.