SkillFoxx

MCP-Salesforce

MCP server for Salesforce: SOQL and SOSL queries, record reads and writes, bulk operations and Apex REST calls

  • 179 ★ on the repository
  • Last commit
  • MIT
MCP server

Broad access

Why this level

  • The agent creates, updates and deletes records, including in bulk, and there is no read-only switch
  • The `restful`, `apex_execute` and `tooling_execute` tools open direct calls to the org API
  • A token or password login exposes customer CRM data, and without SALESFORCE_DOMAIN the server works with the production org
All reasons and checks

smn2gnt/mcp-salesforceAuthor:smn2gnt

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/mcp-salesforce

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The agent creates, updates and deletes records, including in bulk, and there is no read-only switch
  • The `restful`, `apex_execute` and `tooling_execute` tools open direct calls to the org API
  • A token or password login exposes customer CRM data, and without SALESFORCE_DOMAIN the server works with the production org

This is third-party code. Review the repository files before installing.

What it does

MCP-Salesforce gives an agent 14 tools for working with Salesforce. `run_soql_query` and `run_sosl_search` cover reads, while `list_sobjects` and `get_object_fields` show standard and custom objects and their fields. Records are read, created, updated and deleted one at a time or in bulk with `bulk_create_records`, `bulk_update_records` and `bulk_delete_records`. For advanced scenarios there are `tooling_execute` for the Tooling API, `apex_execute` for Apex REST calls and `restful` for arbitrary REST requests to the org. You can sign in with an OAuth access token (the recommended path), Client Credentials, the active Salesforce CLI org or a username and password. Setting SALESFORCE_DOMAIN to `test` switches the server to a sandbox. It runs through uvx from the mcp-salesforce-connector PyPI package.

Who it is for. Salesforce administrators and developers who want to query and edit org data from Claude Desktop or another MCP client.

Good fit when

  • You need to export contacts and deals by a SOQL condition and assemble them into a table
  • An agent should find a record by text with SOSL across several objects at once
  • The fields of a custom object are unknown and must come from org metadata
  • Hundreds of records need a bulk field update from a list of ids
  • Apex REST or Tooling API checks run on a sandbox connected through SALESFORCE_DOMAIN=test

Not a fit when

  • The agent only needs to read data: the server has no read-only mode and deletion is always available
  • You need official Salesforce support: there is the Salesforce DX server for that
  • The production org does not allow broad-scope tokens for third-party tools
  • You need background data exchange of thousands of records: the bulk tools are meant for agent requests

Example request

Show the fields of the Opportunity object and list the ten latest deals over one million with a SOQL query.

MCP

Transport
stdio
Authentication
OAuth

Environment variables

SALESFORCE_ACCESS_TOKEN secret
OAuth access token, the recommended sign-in method
SALESFORCE_INSTANCE_URL
Salesforce instance URL for OAuth
SALESFORCE_DOMAIN
The value `test` connects a sandbox, an empty value connects production
SALESFORCE_CLIENT_ID
Client ID for OAuth Client Credentials
SALESFORCE_CLIENT_SECRET secret
Client secret for OAuth Client Credentials
SALESFORCE_USERNAME
Username for the legacy password sign-in
SALESFORCE_PASSWORD secret
Password for the legacy sign-in
SALESFORCE_SECURITY_TOKEN secret
Security token for the password sign-in
SALESFORCE_CLI_TARGET_ORG
Salesforce CLI org alias or username when not using the default org

Limitations

  • There is no read-only mode: `delete_record`, `bulk_delete_records` and `restful` come with reads. Limit permissions on the Salesforce user side.
  • Each authentication method needs its own variables: a token and instance URL, a Client ID and Secret pair, the active CLI org or a login, password and security token.
  • Without SALESFORCE_DOMAIN the server connects to the production org, not a sandbox.
  • The last repository commit is from July 2026 and the README describes each tool briefly with no sample requests.

How to disable. Remove the salesforce block from `claude_desktop_config.json` and restart the client. Revoke the access token in Salesforce if it is no longer needed.

FAQ

Which sign-in methods does MCP-Salesforce support?

Four: OAuth with a token and instance URL, Client Credentials, the active Salesforce CLI org and a login with password and security token. The README recommends the first as the main one.

How do I connect to a sandbox instead of production?

Set the SALESFORCE_DOMAIN variable to `test`. If it is unset or empty, the server connects to the production org.

Can the agent delete records?

Yes. The 14 tools include `delete_record` and `bulk_delete_records`, and there is no read-only switch. Protection comes from the Salesforce user's permissions and your confirmation of each write.

How do I install MCP-Salesforce in Claude Desktop?

Add a server to `claude_desktop_config.json` with command uvx and arguments `--from mcp-salesforce-connector salesforce`, and put the token and instance URL in env. After a client restart the tools appear in the list.

Which package runs the server?

The mcp-salesforce-connector PyPI package, which uvx launches with `uvx --from mcp-salesforce-connector salesforce`. The README has no separate package install step.

Discussion

No questions or reviews yet.

MCP servers

A Salesforce MCP server: an agent finds objects, queries and changes records, edits fields and writes Apex in plain language.

MCP serverBroad access165
Official

Salesforce's official DX MCP server: work with orgs, metadata, data, users and Apex tests from your agent

MCP serverBroad access489
Official

Salesforce hosted MCP servers connect Claude, Cursor and ChatGPT to organization data with the signed-in user's permissions.

MCP serverBroad access136
Russian stack

An MCP server for the InSales online store platform: products, orders, customers and categories via the admin API

MCP serverBroad access1

amoCRM sales manager MCP server

amoCRM ROP MCP Server

Russian stack

An MCP server with business tools on top of amoCRM for a sales manager: department overview, stale deals, manager comparison

MCP serverExtended access
Russian stack

A minimal MCP server for amoCRM API v4: read and create leads, contacts and notes, with OAuth2 and long-term tokens

MCP serverBroad access12

README in short

The README lists features briefly and gives a `claude_desktop_config.json` snippet that launches through uvx. It follows with a grouped tool list, the sign-in methods and a description of the environment variables, including SALESFORCE_DOMAIN and SALESFORCE_CLI_TARGET_ORG.

README badge

Report a problem