Salesforce DX MCP Server

Salesforce's official DX MCP server: work with orgs, metadata, data, users and Apex tests from your agent

MCP serverEditors’ pickHigh risk

salesforcecli/mcp

Install

{
  "mcpServers": {
    "Salesforce DX": {
      "command": "npx",
      "args": ["-y", "@salesforce/mcp", "--orgs", "DEFAULT_TARGET_ORG", "--toolsets", "orgs,metadata,data,users", "--tools", "run_apex_test", "--allow-non-ga-tools"]
    }
  }
}

Project .mcp.json file. Same format for Cursor and Cline.

This is third-party code. Review the repository files before installing.

What it does

The server gives the agent Salesforce DX tools for orgs already authorized locally through Salesforce CLI. Tools come in toolsets: orgs, metadata, data, users, testing, code analysis, DevOps, mobile, Aura component analysis and more. The --toolsets and --tools flags pick what is enabled, and --orgs limits which orgs the agent can reach. An experimental mode loads tools on demand to keep context small.

Who it is for. For Salesforce developers and admins who work with Salesforce CLI.

Good fit when

  • You want the agent to deploy or retrieve metadata
  • You need a SOQL query or data fix in a sandbox
  • You need to run Apex tests and analyze results

Not a fit when

  • You do not use Salesforce
  • You would grant access to every org: the vendor advises caution with ALLOW_ALL_ORGS

Example request

Deploy the project metadata changes to my sandbox and run the Apex tests

Limitations

Requires a Salesforce account and orgs authorized via Salesforce CLI. Telemetry is on by default; disable it with --no-telemetry. There are over sixty tools, and the vendor advises against enabling all at once. Some tools are not GA and need --allow-non-ga-tools.

How to disable. Remove the Salesforce DX entry from your MCP client config.

MCP

Transport
stdio
Authentication
OAuth

Security check

  • Changes metadata and data in Salesforce orgs
  • Uses local Salesforce CLI authorizations

README in short

The README shows npx configs for VS Code, Claude Code, Cline and Cursor. It details launch flags, org selection values and a table of toolsets linked to tool lists. Orgs must be authorized beforehand with Salesforce CLI. General docs live in the Salesforce DX Developer Guide. Apache 2.0 licensed.

FAQ

How do I restrict access to one org?

Pass the org username or alias to --orgs instead of DEFAULT_TARGET_ORG so changing the default org does not widen access.

How do I reduce context load?

Enable only the toolsets you need via --toolsets, or try the experimental --dynamic-tools flag.

E-Commerce Skills

E-Commerce Skills by Nexscope

A large set of text skills for Amazon, Shopify, eBay, Etsy, TikTok Shop and Walmart sellers: pricing, listings, ads and growth

SkillLow risk929

153 cross-border e-commerce skills via the LinkFox API: Amazon, Ozon, TikTok Shop, 1688, keywords, ads and patents

SkillMedium risk102

An MCP server for Bitrix24 CRM contacts and deals via an inbound webhook: search, lists and deal stage changes

MCP serverHigh riskRussian stack64

Bitrix24 MCP Server (gunnit)

Bitrix24 MCP Server

A TypeScript MCP server for Bitrix24 CRM: contacts, companies, leads, deals, tasks and sales rep performance reports

MCP serverHigh riskRussian stack33