Log inSubmit server
Salesforce logo

Salesforce

Salesforce CRM access over MCP for querying, searching, aggregating, and modifying standard and custom records.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Salesforce

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "salesforce": {
      "command": "npx",
      "args": [
        "-y",
        "salesforce-mcp"
      ],
      "env": {
        "CONDUIT_S2S_SECRET": "YOUR_VALUE_HERE",
        "SALESFORCE_CLIENT_ID": "YOUR_VALUE_HERE",
        "SALESFORCE_CLIENT_SECRET": "YOUR_VALUE_HERE",
        "SALESFORCE_INSTANCE_URL": "YOUR_VALUE_HERE",
        "SALESFORCE_USERNAME": "YOUR_VALUE_HERE",
        "SALESFORCE_PASSWORD": "YOUR_VALUE_HERE",
        "SALESFORCE_TOKEN": "YOUR_VALUE_HERE",
        "MCP_TRANSPORT": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Automated check passed— started and listed 4 tools correctly (Today).

Overview

The Salesforce MCP server exposes Salesforce CRM data through six MCP tools for object discovery, schema inspection, SOQL, SOSL, aggregation, and record changes. It supports HTTP for gateway deployments and stdio for clients such as Claude Desktop and Cursor. HTTP mode authenticates each request with gateway and Salesforce headers, while stdio reads credentials from environment variables. Reach for it when agents need focused access to CRM records rather than Apex, metadata administration, or custom-object creation.

Use cases

  • Query Salesforce Accounts and Opportunities with SOQL
  • Inspect object fields, picklists, and relationships
  • Search records across Salesforce objects with SOSL
  • Aggregate CRM records with grouped SOQL queries
  • Insert, update, delete, or upsert CRM records

Key features

  • Standard and custom object discovery
  • Object schema and relationship inspection
  • SOQL queries with relationship traversal
  • SOQL aggregation functions
  • Record insert, update, delete, and upsert
  • Cross-object SOSL search

Tools4

What Salesforce lets your agent do. Expand a tool for its parameters.

Verified live~306 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

7/7 checks healthy over the last 42d

What it can do

From the 4 tools this server returned when we ran it.

Read-only tools · 4
Network at startup3 connections
Files written at startupNone
Install scriptsprepare
npm provenanceNot published
Package age441 days
Maintainers1

Observed 2026-10-24 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 5d ago via OSV.dev · salesforce-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads70Package downloads in the last 30 days.
Last commit4d agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed4Callable tools this server registers over MCP.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Salesforce works

What the Salesforce MCP server does

The Salesforce MCP server gives MCP clients access to a focused set of Salesforce CRM operations. Its scope covers standard CRM records such as Accounts, Contacts, Opportunities, Leads, and Cases, while also allowing discovery and use of custom objects through the available query tools.

The tool surface is intentionally limited to CRM data access. It does not provide Apex code management, custom-object creation, or anonymous Apex execution. Teams needing Salesforce DX or broader administration capabilities should evaluate a different Salesforce MCP implementation.

How it works

The Salesforce MCP server can run over HTTP or stdio. HTTP is the default mode and exposes /mcp for JSON-RPC requests plus an unauthenticated /health endpoint. In gateway mode, Salesforce credentials arrive in request headers, allowing one running instance to serve multiple customers without restarting. Each tool call creates a Salesforce connection using the credentials supplied for that request.

HTTP requests also require a valid X-Gateway-S2S header when a usable service-to-service secret is configured. The header contains a timestamp and HMAC-SHA256 signature, and the timestamp must be within 300 seconds of the server clock. Stdio is intended for traditional local MCP client connections and reads credentials once from the environment.

Setup and configuration

Build the project with npm install followed by npm run build. Set MCP_TRANSPORT=stdio for local client use, or leave the transport at its HTTP default. Client-credentials authentication uses a Salesforce Connected App with client credentials enabled, a configured Run As user, the Consumer Key and Secret, and the organization’s My Domain URL.

For HTTP deployments, set CONDUIT_S2S_SECRET to a real secret. The process exits when this value is missing or remains a known placeholder. MCP_ALLOW_INSECURE_DEV=1 permits local HTTP development without that secret, but binds only to 127.0.0.1 and disables gateway-header checks. PORT defaults to 8080; bind behavior can be adjusted with MCP_HTTP_HOST and HOST.

Gateway mode expects Salesforce authentication headers on every MCP request and does not fall back to process environment variables. AUTH_MODE=env uses the SALESFORCE_* variables after service-to-service authentication succeeds.

Tools and capabilities

The Salesforce MCP server provides six tools:

  • salesforce_search_objects finds standard and custom objects using a partial name.
  • salesforce_describe_object returns fields, picklists, and relationships for an object.
  • salesforce_query_records runs SOQL queries, including relationship traversal.
  • salesforce_aggregate_query supports SOQL grouping and COUNT, SUM, AVG, MIN, and MAX operations.
  • salesforce_dml_records inserts, updates, deletes, or upserts records.
  • salesforce_search_all performs cross-object searches with SOSL.

Limitations and notes

The Salesforce MCP server is designed for a narrow CRM data surface, not general Salesforce administration. The /health endpoint does not authenticate or read Salesforce credentials. In container deployments, the image listens on 0.0.0.0; Compose publishes the service on loopback by default. The project is licensed under Apache-2.0.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Salesforce

Salesforce is an MCP server that connects MCP clients to a Salesforce org’s CRM data. Its main tools discover and describe objects, run SOQL and SOSL searches, perform aggregate queries, and insert, update, delete, or upsert records across supported CRM objects.

Install dependencies with `npm install` and build it with `npm run build`. Run it with `MCP_TRANSPORT=stdio` for a local MCP client or use the default HTTP mode with the required service-to-service secret and authentication configuration.

Yes, Salesforce works with Cursor through its stdio transport. Configure the client to launch the built entry point and provide the required Salesforce environment variables, such as the client credentials and instance URL.

Use a Connected App and client-credentials flow, or configure username-password authentication. Client credentials require the Salesforce client ID, client secret, and instance URL; username-password authentication uses the Salesforce username, password, and optional security token.

No, it does not expose Apex management, anonymous Apex execution, or custom-object creation. Its supported surface focuses on CRM data tools, including object discovery, schema inspection, queries, searches, aggregation, and record DML.

Related MCP servers

All in Customer Data Platforms All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewSalesforce AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/salesforce?style=directory)](https://allmcps.com/mcp/salesforce)
HTML Embed
<a href="https://allmcps.com/mcp/salesforce"><img src="https://allmcps.com/api/badge/salesforce?style=directory" alt="Salesforce on AllMCPs" /></a>