Authenticate to NetSuite using token-based auth (TBA) and query data via SuiteQL

In-depth guide

Steps

1. Enable Token-Based Authentication in NetSuite under Setup > Company > Enable Features > SuiteCloud > Token-Based Authentication; create an Integration record to get a Consumer Key and Consumer Secret.
2. Create a dedicated Employee with the appropriate role, then generate an Access Token and Token Secret under Setup > Users/Roles > Access Tokens — you now have four values: Consumer Key, Consumer Secret, Token ID, Token Secret.
3. Sign requests using OAuth 1.0a (HMAC-SHA256); the Authorization header must include oauth_consumer_key, oauth_token, oauth_signature_method, oauth_timestamp, oauth_nonce, oauth_version, and oauth_signature — plus 'realm' set to your account ID.
4. Your base URL is https://{accountId}.suitetalk.api.netsuite.com/services/rest/query/v1/suiteql — replace {accountId} with your NetSuite account ID (e.g., 1234567 or 1234567_SB1 for sandbox).
5. POST to the SuiteQL endpoint with header 'prefer: transient' and a JSON body of {'q': 'SELECT id, companyName, email FROM customer WHERE isInactive = \'F\' LIMIT 100'}.
6. Paginate results using the 'links' array in the response (rel=next), or use OFFSET/LIMIT in your SuiteQL query — default page size is 1000 rows maximum.