Salesforce Hosted MCP Servers
Salesforce hosted MCP servers connect Claude, Cursor and ChatGPT to organization data with the signed-in user's permissions.
- 136 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- The `platform/sobject-all` server reads, changes and deletes CRM data with the signed-in user's permissions.
- Organization data is passed to the client's chosen AI model.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/salesforce-hosted-mcp-serversDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The `platform/sobject-all` server reads, changes and deletes CRM data with the signed-in user's permissions.
- Organization data is passed to the client's chosen AI model.
This is third-party code. Review the repository files before installing.
What it does
Salesforce runs the MCP servers on its side: an agent connects over HTTP and calls tools that work with organization data, and a custom server can be built from APIs and Flows. The repository is the entry to the documentation, a wiki of practices and an issue tracker. An administrator enables servers one by one in Setup, API Catalog, MCP Servers. Sign-in needs an External Client App with OAuth and the `mcp_api` and `refresh_token` scopes. The `platform/sobject-reads` server only reads data, while `platform/sobject-all` reads, writes and deletes and adds prompt templates for Claude and Cursor. No language model runs on the Salesforce side: tools respond deterministically.
Who it is for. Salesforce administrators and developers connecting AI assistants to their organization through enterprise authorization.
Good fit when
- An agent finds and shows organization records at a user's request.
- Safe reading is enough to start: `platform/sobject-reads` is enabled and tested with `getUserInfo`.
- A custom server exposes only selected APIs and Flows to the agent.
- The connection is debugged in Postman apart from the model to tell a server fault from a client fault.
Not a fit when
- The organization is on an edition below Enterprise.
- The client connects only through the `mcp-remote` bridge, which is unsupported.
- Local metadata development and Apex tests are needed, which is the job of the Salesforce DX server.
Example request
Find the open opportunities of the Acme account in Salesforce and list the amounts. Read only, change nothing.MCP
- Transport
- http
- Authentication
- OAuth
Limitations
A Salesforce organization on Enterprise Edition or above and administrator access to Setup are required. Servers are off by default and are enabled one by one. After an External Client App is created, settings can take up to 30 minutes to apply. The agent acts with the signed-in user's permissions, and `platform/sobject-all` allows writes and deletes. Production and sandbox use different URLs. The repository carries no SLA: faults and bugs go to Salesforce Support.
How to disable. Disable the server in Setup, API Catalog, MCP Servers and remove the connection from the client. Revoke or delete the External Client App separately.
FAQ
Which server should I start with?
`platform/sobject-reads`: it only reads, so organization data will not change.
What permissions does the agent get?
The same as the signed-in user: access to objects, fields and records. Changes appear in the audit trail under that user's name.
What should I do on a 401?
Check the `mcp_api` and `refresh_token` scopes. If the app was just created, wait: it can take up to 30 minutes to apply.
How do I connect a sandbox?
Use the address with a `sandbox` segment: `https://api.salesforce.com/platform/mcp/v1/sandbox/platform/sobject-reads`.
Can the toolset be restricted?
Yes. Pick a stricter standard server such as `platform/sobject-reads`, or build a custom server with only the tools you need. Access per app is limited with permission sets on the External Client App.
Discussion
No questions or reviews yet.
Related
MCP serversA Salesforce MCP server: an agent finds objects, queries and changes records, edits fields and writes Apex in plain language.
MCP server for Salesforce: SOQL and SOSL queries, record reads and writes, bulk operations and Apex REST calls
Salesforce's official DX MCP server: work with orgs, metadata, data, users and Apex tests from your agent
Open-source CRM for small teams with MCP: contacts, deals and tasks open to Claude and other agents, with reply drafts left to you
MCP server for ERPNext and Frappe: documents, stock and sales from chat, plus nine viewer windows in the client
InSales MCP server
insales-mcp
An MCP server for the InSales online store platform: products, orders, customers and categories via the admin API
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Salesforce Hosted MCP Servers (this card) | yes | OAuth | 136 | |
| Salesforce DX MCP Server | yes | OAuth | 489 | an official development server: orgs, metadata and Apex tests through the CLI; hosted servers work with data and respond on the Salesforce side |
| MCP-Salesforce | no | OAuth | 179 | a third-party SOQL and SOSL server you run yourself; the Salesforce hosted servers connect by URL with OAuth |
README in short
The documentation has three parts: basic administration in Help & Training, the server reference and custom servers in the Developer Guide, and practices and architecture notes in the repository wiki. Questions and ideas are accepted through GitHub Issues with no SLA.