Salesforce CLI MCP Server
Salesforce org data and metadata management via Model Context Protocol tools.
Data last scanned today · Reviewed yesterday
Overview
The Salesforce CLI MCP Server bridges the gap between LLMs and Salesforce environments. By integrating through the Model Context Protocol, it allows AI models to interact directly with Salesforce resources including orgs, metadata, user configurations, and data objects. Users configure the server by adding it to their local MCP JSON files, specifying required toolsets and target orgs.
Our verdict
This server carries a high-risk rating with a security score of 30/100, primarily due to the lack of an authentication method, meaning any user with access to the configuration can execute commands against your org. Additionally, the tool lacks read-only mode constraints, granting full write access by default. It is recommended only for isolated development or testing environments where security exposure is strictly managed.
- Zero direct dependencies reduce potential supply-chain vulnerabilities
- Active development with frequent updates and commits
- Supported by a community of 35 contributors
- Lacks authentication, allowing unauthorized command execution
- Defaults to full write access without read-only restrictions
- Maintained by the community rather than official vendor channels
Setup
Claude Desktop
{
"mcpServers": {
"salesforcecli-mcp": {
"args": [
"-y",
"monorepo-for-salesforce-mcp-server-and-providers"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| run_apex_test | Runs Apex tests in a Salesforce org. | high |
| create_aura_blueprint_draft | Creates a comprehensive Product Requirements Document (PRD) blueprint for Aura component migration. | medium |
| enhance_aura_blueprint_draft | Enhances an existing draft PRD with expert analysis and unknown resolution. | medium |
| orchestrate_aura_migration | Orchestrates the complete Aura to LWC migration workflow. | low |
| transition_prd_to_lwc | Provides migration bridge guidance for creating LWC components from Aura specifications. | medium |
| create-custom-rule | Creates a custom XPath-based PMD rule from a provided Apex code sample. | medium |
| describe_code_analyzer_rule | Gets the description of a Code Analyzer rule. | low |
| generate_xpath_prompt | Builds the prompt that guides XPath authoring from AST context. | low |
| list_code_analyzer_rules | Selects Code Analyzer rules based on a number of criteria. | low |
| query_code_analyzer_results | Queries a Code Analyzer results JSON file and returns filtered violations. | low |
| run_code_analyzer | Performs a static analysis against code. | low |
| get_username | Determines the appropriate username or alias for Salesforce operations, handling both default orgs and Dev Hubs. | low |
| resume_tool_operation | Resumes a long-running operation that wasn't completed by another tool. | medium |
| run_soql_query | Runs a SOQL query against a Salesforce org. | low |
| check_devops_center_commit_status | Check the current status of a work item committed to DevOps Center. | low |
| checkout_devops_center_work_item | Checks out the branch associated with a selected work item by name. | medium |
| commit_devops_center_work_item | Commit SFDX project changes and register the commit SHA in DevOps Center. | medium |
| create_devops_center_pull_request | Commit local changes to a DevOps Center work item’s feature branch. | medium |
| detect_devops_center_merge_conflict | Detects merge conflicts for a selected work item or in a given source branch. | low |
| list_devops_center_projects | List all DevOps Center projects in a specific org. | low |
| list_devops_center_work_items | List all the work items for a specific DevOps Center project. | low |
| create_devops_center_work_item | Creates a new DevOps Center work item in the selected project. | medium |
| update_devops_center_work_item_status | Sets a work item’s status to In Progress or Ready to Promote. | medium |
| promote_devops_center_work_item | Promote an approved work item to the next stage in the DevOps Center pipeline. | medium |
| resolve_devops_center_deployment_failure | Diagnose and resolve deployment failures. | medium |
| resolve_devops_center_merge_conflict | Apply a selected resolution method to a merge conflict. | medium |
| enrich_metadata | Enrich metadata from your org in your DX project. | medium |
| create_lwc_component_from_prd | Creates complete LWC components from PRD specifications with proper structure. and best practices | medium |
| create_lwc_jest_tests | Generates Jest test suites for LWC components with coverage and mocking. | medium |
| review_lwc_jest_tests | Reviews and validates Jest test implementations for LWC components. | low |
| create_lightning_type | Provides guidance for creating Custom Lightning Types (CLT) for Salesforce applications, agent actions, Lightning web components, and Lightning Platform integrations. | medium |
| explore_slds_blueprints | Retrieves SLDS blueprint specifications by name, category, Lightning component, CSS class, or styling hook. | low |
| guide_design_general | Provides SLDS guidelines and best practices for Lightning Web Components with accessibility, responsive design, and component usage patterns. | low |
| guide_component_accessibility | Provides accessibility guidelines and testing instructions for LWC components. | low |
| guide_lwc_best_practices | Offers LWC development best practices and coding standards guidance. | low |
| guide_lwc_development | Provides LWC development workflow and implementation guidelines. | low |
| guide_lwc_rtl_support | Provides Right-to-Left (RTL) internationalization support and RTL development guidance. | low |
| guide_lws_security | Provides security analysis in accordance with product security guidelines and Lightning Web Security guidelines. | low |
| guide_slds_blueprints | Provides comprehensive SLDS blueprints guidelines, reference documentation, and a complete index of all available blueprints by category. | low |
| guide_utam_generation | Provides UI Test Automation Model (UTAM) Page Object generation guidelines and best practices. | low |
| lwc-doc-error | Retrieves information about LWC error messages, including static guidance for resolving the issue based on the error code. | low |
| reference_lwc_compilation_error | References LWC compilation errors by looking up error codes against a knowledge base of documented error patterns, causes, and fixes. | low |
| guide_slds_styling | Retrieves SLDS styling hooks guidance and reference documentation. | low |
| explore_slds_styling | Search and explore SLDS styling hooks with support for exact lookup, fuzzy matching, prefix search, and wildcard patterns. | low |
| guide_lbc_usage | Provides an index of available Lightning Base Components with short descriptions, helping developers identify which components suit their use case. | low |
| explore_lbc_components | Given a list of Lightning Base Component names, returns full API documentation from markdown knowledge files. | low |
| create_lds_graphql_mutation_query | Provides guidance for creating GraphQL mutation queries. | medium |
| create_lds_graphql_read_query | Create GraphQL read queries for LDS. | medium |
| explore_lds_uiapi | Explores and documents Lightning Design System UI API capabilities. | low |
| fetch_lds_graphql_schema | Fetch GraphQL schema structure for LDS. | low |
| guide_lds_data_consistency | Provides data consistency patterns and best practices for LDS components. | low |
| guide_lds_development | Provides LDS development guidelines and component integration. | low |
| guide_lds_graphql | Provides LDS GraphQL usage patterns and guidelines. | low |
| guide_lds_referential_integrity | Provides referential integrity patterns for LDS data management. | low |
| orchestrate_lds_data_requirements | Provides step-by-step guidance for analyzing and clarifying LDS data requirements to produce PRD-ready specifications. | low |
| test_lds_graphql_query | Tests a GraphQL query against a connected Salesforce org and returns the result. | medium |
| guide_figma_to_lwc_conversion | Converts Figma designs to LWC component specifications. | medium |
| guide_lo_migration | Provides guidance to convert a Lightning Out (beta) app into a Lightning Out 2.0 app. | medium |
| run_lwc_accessibility_jest_tests | Provides accessibility testing utilities and Jest integration for LWC components. | low |
| verify_aura_migration_completeness | Provides Aura to LWC migration completeness checklist and validation. | low |
| orchestrate_lwc_component_creation | Provides guidance for the entire Aura-to-LWC migration process. | low |
| orchestrate_lwc_component_optimization | Provides performance optimization and best practices for LWC components. | low |
| orchestrate_lwc_component_testing | Provides comprehensive testing workflow and test generation guidance. | low |
| orchestrate_lwc_slds2_uplift | Provides migration guidance for upgrading to SLDS 2. | medium |
| validate_and_optimize | Returns a validation runbook that instructs the agent to run a suite of validators (accessibility, security, best practices, etc.), produce SARIF issues, and score results | low |
| score_issues | Computes a readiness score (0-100) and quality grade (draft, prototype, review-for-production) from SARIF issues | low |
| deploy_metadata | Deploys metadata from your DX project to an org. | medium |
| retrieve_metadata | Retrieves metadata from your org to your DX project. | medium |
| create_mobile_lwc_app_review | Provides TypeScript API documentation for Salesforce LWC App Review Service, offering expert guidance for implementing app review features in LWC components. | low |
| create_mobile_lwc_ar_space_capture | Provides TypeScript API documentation for Salesforce LWC AR Space Capture, offering expert guidance for implementing AR space capture features in LWC components. | low |
| create_mobile_lwc_barcode_scanner | Provides TypeScript API documentation for Salesforce LWC Barcode Scanner, offering expert guidance for implementing barcode scanning features in LWC components. | low |
| create_mobile_lwc_biometrics | Provides TypeScript API documentation for Salesforce LWC Biometrics Service, offering expert guidance for implementing biometric authentication features in LWC components. | low |
| create_mobile_lwc_calendar | Provides TypeScript API documentation for Salesforce LWC Calendar Service, offering expert guidance for implementing calendar integration features in LWC components. | low |
| create_mobile_lwc_contacts | Provides TypeScript API documentation for Salesforce LWC Contacts Service, offering expert guidance for implementing contacts management features in LWC components. | low |
| create_mobile_lwc_document_scanner | Provides TypeScript API documentation for Salesforce LWC Document Scanner, offering expert guidance for implementing document scanning features in LWC components. | low |
| create_mobile_lwc_geofencing | Provides TypeScript API documentation for Salesforce LWC Geofencing Service, offering expert guidance for implementing geofencing features in LWC components. | low |
| create_mobile_lwc_location | Provides TypeScript API documentation for Salesforce LWC Location Service, offering expert guidance for implementing location services in LWC components. | low |
| create_mobile_lwc_nfc | Provides TypeScript API documentation for Salesforce LWC NFC Service, offering expert guidance for implementing NFC features in LWC components. | low |
| create_mobile_lwc_payments | Provides TypeScript API documentation for Salesforce LWC Payments Service, offering expert guidance for implementing payment processing features in LWC components. | low |
| get_mobile_lwc_offline_analysis | Analyzes LWC components for mobile-specific issues and provides detailed recommendations for mobile offline compatibility and performance improvements. | low |
| get_mobile_lwc_offline_guidance | Provides structured review instructions to detect and remediate mobile offline code violations in LWC components for Salesforce mobile apps. | low |
| create_org_snapshot | Create a scratch org snapshot. | medium |
| create_scratch_org | Create a scratch org. | medium |
| delete_org | Delete a locally-authorized Salesforce scratch org or sandbox. | high |
| list_all_orgs | List all configured Salesforce orgs, with optional connection status checking. | low |
| open_org | Open an org in a browser. | low |
| scan_apex_class_for_antipatterns | Analyzes Apex class files for performance antipatterns and provides recommendations for fixing them. | low |
| run_agent_test | Executes agent tests in your org. | high |
| assign_permission_set | Assigns a permission set to the user or on behalf of another user. | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›How do I install the Salesforce DX MCP Server?
The server is installed automatically via npx using the @salesforce/mcp package; ensure that you include the -y flag in your configuration to allow automatic installation.
›Can I use tools that are not yet generally available?
Yes, you can enable tools that are not yet generally available by including the --allow-non-ga-tools flag in your server configuration arguments.
›How do I restrict the server to specific toolsets?
You can use the --toolsets flag to specify only the categories you need, such as orgs, metadata, data, or users.
›Where can I find detailed configuration guides for different MCP clients?
The official Salesforce DX Developer Guide includes a section dedicated to server configuration, including quick start guides and examples for various MCP clients.
Alternatives
Changelog
- Fix0.30.15
2026-07-09
- Improved0.30.14
2026-06-23
- Improved0.30.13
2026-05-27
- Fixmcp-provider-metadata-enrichment@0.1.8
2026-05-27
- Improved0.30.12
2026-05-21
- Improved0.30.11
2026-05-21
- Improved0.30.10
2026-05-21
- Newmcp-provider-dx-core@0.10.0
2026-05-21
- Newmcp-provider-code-analyzer@0.9.0
2026-05-21
- Improved0.30.9
2026-05-07
Badge
Maintain this server? Add the live badge to your README.