Salesforce MCP Server

Salesforce data access via SOQL, metadata retrieval, and record management tools.

Data last scanned today · Reviewed today

Overview

This MCP server provides an interface to interact with your Salesforce instance using the REST API and jsforce. It enables AI assistants to execute SOQL queries, retrieve object metadata, and perform create, update, or delete operations directly on your records. Setup involves cloning the repository, configuring your credentials in an environment file, and executing the build process. The server exposes specific tools for each operation, allowing your assistant to perform data-driven tasks within your Salesforce environment.

Our verdict

This server receives a high-risk security score of 6/100. The primary concerns include the lack of an authentication method for the server itself, meaning anyone with the configuration can access your Salesforce instance, and the absence of a read-only mode, which grants full write permissions by default. It is a community-maintained project that has not been editorially reviewed and was last updated nearly a year ago. It is not recommended for production environments or systems containing sensitive data.

Supports direct SOQL query execution via MCP tools
Allows management of records including creation and deletion
Provides metadata retrieval for Salesforce objects
Maintains a small footprint with only four direct dependencies

High security risk due to no internal authentication
Lacks a read-only mode for restricted data access
No license detected, creating legal ambiguity
Inactive development with no commits for 355 days

Setup

Claude Desktop

{
  "mcpServers": {
    "salesforce-mcp-server": {
      "args": [
        "-y",
        "salesforce-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.

Tools

Tool	Description	Risk
query	Execute SOQL queries against your Salesforce instance	low
describe-object	Get metadata about a Salesforce object	low
create	Create a new record	medium
update	Update an existing record	medium
delete	Delete a record	high

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›What prerequisites are needed to run this server?

You must have a Salesforce account and populate a .env file with your Salesforce credentials as shown in the .env.example file.

›How can I install the server for Claude Desktop?

You can use the Smithery CLI by running 'npx -y @smithery/cli install salesforce-mcp-server --client claude' for an automated installation.

›What security measures should I take when using this server?

You should never commit your .env file to version control, use IP restrictions within Salesforce when possible, and regularly rotate your security token.

›Can I perform write operations on my Salesforce data?

Yes, the server provides tools for creating, updating, and deleting Salesforce records in addition to querying and retrieving metadata.

Badge

Maintain this server? Add the live badge to your README.