Help Center / NetSuite / Admin & Setup
Three of NetXcel's four connection methods run on OAuth 2.0, each with a different grant type and API scope.
TBA is the odd one out. The other three methods, Machine to Machine, User Authorization (REST APIs), and User Authorization (AI Connector), all run on OAuth 2.0, with different grant types and scopes. Picks up after you've created the Integration Record.
Machine to Machine: enable the Client Credentials grant. No redirect URI needed, no interactive sign-in. You do need a certificate on the record (see Creating a NetSuite Integration Record). Default scope: REST Web Services.
User Authorization (REST APIs): enable the Authorization Code grant. Add the redirect URI: https://netxcel.maayins.com/taskpane.html#/oauth-callback. Must be https, http isn't supported. Scopes: REST Web Services and RESTlets.
User Authorization (AI Connector): same grant, same redirect URI. Different scope: MCP, not REST Web Services, built for AI/MCP access.
Save. NetSuite shows the Client ID and Secret once. Copy them before navigating away.