netsuite
6 Dtwo policies tagged "netsuite", including Fence NetSuite HR & Payroll SuiteQL Queries, NetSuite Cap SuiteQL Bulk Export. Browse by what the control does rather than which app it targets.
Fence NetSuite HR & Payroll SuiteQL QueriesFences the single biggest exfiltration surface on the NetSuite MCP server — ns runCustomSuiteQL, which runs arbitrary read-only SuiteQL across the entire ERP.NetSuite Cap SuiteQL Bulk ExportInstantiates the PF-08 cap-bulk-export family as a transform-only ingress policy on ns runCustomSuiteQL — the NetSuite MCP tool that runs arbitrary read-only…NetSuite Default-Deny Unknown MCP ToolsPins an allowlist of the audited NetSuite MCP Standard Tools and denies every other tool call before it reaches the NetSuite AI Connector.NetSuite Guard Vendor Banking Edits (Anti-BEC)Instantiates policy family PF-10 (guard-vendor-banking) — the anti-BEC / payment-fraud control — for the Oracle NetSuite MCP Standard Tools SuiteApp.NetSuite: Redact Financial PII in ResponsesInstantiates PF-02 (redact-pii-egress) on the NetSuite read path.Protect Financial Postings by RoleDenies the NetSuite record-write tools ns createRecord and ns updateRecord when they target a financial-transaction record type — journalentry (including the…