How is this different from connecting NetSuite MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the NetSuite MCP API changes?

We track the NetSuite MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different NetSuite tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in NetSuite?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the NetSuite MCP server myself?

No. TrustGate connects to the NetSuite MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to NetSuite directly.

Connect NetSuite MCP to your AI agents, securely.

Q: Is NetSuite MCP secure?

The server itself exposes 25 tools, and some of them can write to your NetSuite account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches NetSuite.

One secured endpoint for every NetSuite call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try NetSuite MCP now

What your agents can ask once NetSuite MCP is connected.

Select the tools your AI agents can call

25 tools from the NetSuite MCP schema.

Showing 25 tools

ns_getRecordreadRetrieves a record in NetSuite.
ns_createRecordwriteCreates a new record in NetSuite.
ns_updateRecordhigh riskUpdates an existing record in NetSuite through REST Web Services.
ns_attachFilewriteAttaches an existing File Cabinet file to a NetSuite record.
ns_detachFilewriteRemoves a file's attachment to a record without deleting the file.
ns_getFolderByPathreadLists the files and folders directly in a specified folder.
ns_getIdFromPathreadResolves a file or folder path to its internal ID.
ns_getPathFromIdreadResolves a file or folder internal ID to its complete path.
ns_searchFilesreadSearches file names across accessible File Cabinet folders.
ns_getRecordTransformMetadatareadLists supported transformations from one NetSuite record type to another.
ns_getRecordTypeMetadatareadRetrieves metadata for all NetSuite record types or for a specific record type, including available fields and their data types.
ns_transformRecordwriteTransforms an existing NetSuite record into a new record of a supported target type.
ns_getRecordActionMetadatareadReturns actions available for a record type or a specific record.
ns_executeRecordActionhigh riskExecutes an available action for a specific record.
ns_getSessionInforeadReturns account and role information, enabled features, granted permissions, and preference values for the current NetSuite session.
ns_runCustomSuiteQLreadRuns a custom SuiteQL query in NetSuite and returns the rows.
ns_getSuiteQLMetadatareadRetrieves metadata for the records accessible with SuiteQL, including available fields, data types and joinable fields.
ns_listSavedSearchesreadReturns a list of all saved searches in the NetSuite account.
ns_runSavedSearchreadRuns an existing saved search from the NetSuite account.
ns_listAllReportsreadReturns a list of all standard and custom reports in the NetSuite account.
ns_runReportreadRuns a report in the NetSuite account and returns the results.
ns_getAccountingBooksreadReturns a list of accounting books in your NetSuite account that can be used to filter report results.
ns_getAccountingContextsreadReturns a list of accounting contexts in your NetSuite account that can be used to filter report results.
ns_getNexusIdsreadReturns a list of nexuses in your NetSuite account that can be used to filter report results.
ns_getSubsidiariesreadReturns a list of subsidiaries in your NetSuite account that can be used to filter report results.

What NetSuite MCP exposes

NetSuite MCP groups its 25 tools into 4 categories, each with a suggested starting policy.

All 25 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Records	Creating, retrieving and updating NetSuite records through REST Web Services	Read / Write	Build a dedicated read-only MCP role; approve any record write
SuiteQL	Running custom SuiteQL queries and retrieving queryable metadata	Read	SuiteQL is read-only; watch query cost on large datasets
Saved Searches	Listing and running existing saved searches	Read	Limit to the saved searches the workflow needs
Reports	Listing standard and custom reports and running them	Read	Treat financial report output as confidential

Connect NetSuite MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect NetSuite
Find NetSuite in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow NetSuite MCP or block it. You allow the exact tools each agent can call, one by one.

NetSuite MCP	25 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 25 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is NetSuite MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	NetSuite MCP25 documented tools.
Coding assistants	Connection & credentialsper user	Records15 tools
Internal copilots	Tool access policiesdeny by default	Reports6 tools
Workflow automations	Request & response inspectioninline	SuiteQL2 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools2 tools