Our company is looking into using the MCP tool to connect to Claude. As and admin, when connecting Claude to NetSuite, are you using a single Claude license and then when individual users are using Claude they need their own login and subscription?

Each individual will use their own Claude license to connect to NetSuite MCP.

Gotcha. So no main connection at all. Just setup SuiteApp for MCP and then each person will do their own connection.

That's correct. Yes they will authenticate via Oauth2. Just set up Suiteapp for MCP and then you'll need to need to update the associated user roles to give MCP access. What I did to start was create a new role with very limited access (e.g. SuiteQL only) just for testing purposes until I was comfortable.

That was my plan too. Where are you now with permissions? Are users editing and creating records?

Not yet, but I've expanded to other things, mainly with just read-only access. I think before we add write access we're going to explore building Custom Tools to handle writes rather than just letting Claude decide how to create records.

So what is the difference between SuiteQL permission and read-only access? Or are they hand in hand?

Yeah, SuiteQL is one of the read-only services that the MCP provides. But also SavedSearch and Reports.

Ah. So with SavedSearch and Reports permission, is that mainly just used to run already created ones? And then for SuiteQL, that is so Claude can run SQL statements from what the user is prompting it?

That's correct.