Salesforce MCP Server (Advanced Communities)
Salesforce CRM objects, data, and Apex execution for AI assistants via CLI.
Data last scanned today · Reviewed today
Overview
This MCP server provides a bridge between AI assistants and Salesforce organizations by leveraging the Salesforce CLI. It enables models to query object data, describe schema metadata, and execute custom Apex code within your Salesforce environment.
Our verdict
With a security score of 45/100, this server is classified as high-risk. Because it is community-maintained rather than official vendor software, and authentication methods have not been fully reviewed, users should exercise caution in production Salesforce environments. It is recommended for developers and testers in non-sensitive sandbox organizations.
- Supports read-only configuration options
- Minimal supply-chain risk with only 3 direct dependencies
- Distributed via NPM for automated version management
- Provides a one-click MCP bundle installation method
- Not maintained by the official Salesforce organization
- Lack of clear authentication method documentation
- Bus-factor risk due to single-contributor development
- Has not yet undergone formal editorial security review
Setup
{
"mcpServers": {
"advancedcommunities-salesforce-mcp-server": {
"args": [
"-y",
"@advanced-communities/salesforce-mcp-server"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| List Connected Salesforce Orgs | View all Salesforce orgs currently authenticated with the Salesforce CLI. | low |
| List Objects in an Org | Retrieve all standard and custom objects available in a specific Salesforce org. | low |
| Describe an Object | Get detailed metadata about a specific Salesforce object, including fields, relationships, and properties. | low |
| Execute Apex Code | Run anonymous Apex code directly in a Salesforce org and see the debug output. | high |
| Query Records | Execute SOQL queries and retrieve results in JSON format. | low |
| Query Records to File | Execute SOQL queries and save results to CSV or JSON files. | medium |
| Run Apex Tests | Execute Apex test classes with various options including test level and code coverage. | high |
| Get Apex Test Results | Retrieve results from a previous asynchronous Apex test run. | low |
| Get Apex Code Coverage | Get code coverage information for a Salesforce org. | low |
| Generate Apex Class | Generate metadata source files for a new Apex class. | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What software must be installed on my machine before using this server?
You must have Node.js (version 18 or higher) and the Salesforce CLI (sf) installed and configured with at least one authenticated Salesforce org.
›How can I restrict the server to read-only mode?
You can enable read-only mode by setting the READ_ONLY environment variable to true in your MCP configuration.
›Is it possible to limit which Salesforce organizations the server can access?
Yes, you can restrict access to specific orgs by defining the ALLOWED_ORGS environment variable with a comma-separated list of your preferred orgs.
›What is the simplest way to install the server without manual building?
The recommended approach is to use the npx command, which downloads the latest version from NPM and handles all dependencies automatically.
›What does the MCP Bundle (MCPB) installation offer?
The MCPB file provides a one-click installation experience where the extension is automatically configured in your AI client and all dependencies are managed for you.
Badge
Maintain this server? Add the live badge to your README.