OpenSuiteMCP

Docs/Connect

OIDC login

This Integration record is for signing in with a NetSuite user. It is not MCP chat connect. Tools use a second record — MCP connect.

1. Prerequisites

In the NetSuite account: Setup → Company → Enable Features, open the SuiteCloud tab, check NetSuite as OIDC Provider, and Save.

2. Create the OIDC Integration record

A NetSuite administrator creates this once.

The redirect URI is your app origin plus /api/auth/netsuite/callback. On self-hosted or org/VPC installs that origin is yours — not opensuitemcp.com. Match whatever people type in the browser (same host as AUTH_URL).

  • Hosted

    https://app.opensuitemcp.com/api/auth/netsuite/callback

  • Self-hosted / org VPC

    http://localhost:3000/api/auth/netsuite/callbackhttps://opensuitemcp.mycompanydomain.com/api/auth/netsuite/callback

  1. Open New Integration in NetSuite

    As a NetSuite administrator, go to Setup → Integration → Manage Integrations → New.

  2. Set these field values

    • Name

      OpenSuiteMCP Login OIDC

    • State

      Enabled
    • Token-based authentication types (leave all unchecked)
    • Authorization Code Grant
    • Public Client

    • Redirect URI

      https://app.opensuitemcp.com/api/auth/netsuite/callback
    • Scopes (leave all unchecked)

  3. Save and copy Client ID

    Press Save. Copy the Client ID shown after save. Do not reuse the MCP connect integration.

3. Restrict who can sign in

Go to Setup → Integration → NetSuite as OIDC Provider Setup. Find the integration you just created. Set access options for allowed entities and roles, then Save.

4. Sign in on OpenSuiteMCP

On Sign in choose Sign in with NetSuite. Enter the account ID from the NetSuite URL and the Client ID from the integration. The app requests OIDC openid and email. Do not reuse the MCP connect integration (scope mcp).