Salesforce MCP Server
Salesforce data management via SOQL queries, SOSL searches, and REST API execution.
Data last scanned today · Reviewed today
Overview
This Salesforce MCP server enables AI assistants to directly interact with Salesforce data, standard objects, and custom records. It provides a comprehensive suite of tools for querying data via SOQL, searching across the platform using SOSL, and performing complex operations like Tooling API requests or Apex REST executions. Beyond simple queries, it supports full CRUD capabilities for individual records and bulk data management operations. The server architecture relies on environment-based configuration, supporting OAuth and Salesforce CLI integration for flexible authentication. By exposing metadata discovery tools, it allows LLMs to understand the schema of objects within your Salesforce environment before attempting data retrieval or modifications.
Our verdict
With a security score of 55/100, this server is currently classified as high-risk. A primary concern is that it lacks a read-only mode, meaning every installation provides full write, update, and delete access to your Salesforce records by default. It is also community-maintained rather than official. Due to these factors, this tool should only be used in non-production environments or scenarios where the connected Salesforce account has strictly scoped, minimal permissions.
- Supports complex operations like Apex REST and Tooling API.
- Zero direct dependencies minimizes the supply-chain attack surface.
- Active development with a commit as recent as three days ago.
- Comprehensive support for bulk create, update, and delete actions.
- Lacks a dedicated read-only mode for safety-conscious operations.
- Community-maintained project with no official Salesforce vendor support.
- Authentication method security has not undergone a formal review.
Tools
| Tool | Description | Risk |
|---|---|---|
| run_soql_query | Execute SOQL queries against Salesforce | low |
| run_sosl_search | Perform SOSL searches across objects | low |
| get_object_fields | Retrieve field metadata for specific objects | low |
| list_sobjects | List all available SObjects (standard and custom) | low |
| get_record | Retrieve a specific record by ID | low |
| create_record | Create a new record | medium |
| update_record | Update an existing record | medium |
| delete_record | Delete a record | high |
| bulk_create_records | Create multiple records in a single operation | medium |
| bulk_update_records | Update multiple records (must include Id field) | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What authentication methods are supported by this server?
The server supports OAuth, Client Credentials, Salesforce CLI default org, and legacy username/password/security token authentication.
›How do I configure the server to connect to a Salesforce sandbox?
Set the SALESFORCE_DOMAIN environment variable to 'test' to connect to a sandbox environment instead of production.
›Can I perform bulk operations on Salesforce records?
Yes, the server provides dedicated tools for bulk creating, updating, and deleting records.
›Does the server support custom Salesforce objects?
Yes, the list_sobjects tool allows you to discover and list both standard and custom objects.
›Is it possible to execute custom Apex code via this server?
Yes, you can use the apex_execute tool to run Apex REST requests.
›How can I specify a target org when using the Salesforce CLI method?
You can optionally set the SALESFORCE_CLI_TARGET_ORG environment variable to target a specific org alias or username.
Badge
Maintain this server? Add the live badge to your README.