PlugWiki

Salesforce MCP servers: which one to use

Use Salesforce's own hosted servers if an admin can switch them on. For a quick local setup, pick a community server and watch what it can change.

Servers
43
active
Official
3
by Salesforce
Hosted
7
nothing to install
Local
26
runs on your machine
OAuth
2
sign in, no key

Salesforce runs its own hosted MCP servers, and they are the safest place to start because every call runs under the signed-in person's permissions. An admin must activate them first, and Salesforce suggests beginning with the read-only server in a sandbox. Community servers need no admin setup, but most can create, update and delete records, so use a sandbox or a user with narrow access. The older Salesforce DX server for developers reached end of life on November 2, 2026 and is archived, and Salesforce points developers to its sf-skills repo instead.

Good for

  • Salesforce admins who want Claude, ChatGPT or Cursor to reach the org with each user's own permissions
  • Sellers and analysts who want to look up accounts, contacts and opportunities by asking
  • Developers who want to explore objects and Apex from a local setup
  • Teams who want an assistant that can read their org but never change it

Which Salesforce MCP server to use

Use the official hosted servers if an admin can activate them, and start with the read-only one. Pick tsmztech or the Advanced Communities server (it uses the Salesforce CLI) for local developer work, and sf-intelligence if you only want read-only answers about your org setup.

ServerOfficialRunsSign-inCan change dataRead-only optionGitHub stars
Salesforce HostedThis pageOfficialHostedAccountYesRead-only server136
Salesforce B2C CommerceOfficialLocalAccount–––
tsmztechCommunityLocalLogin or CLIYes–165
MCP Salesforce ConnectorCommunityLocalToken or CLIYes–180
Advanced CommunitiesCommunityLocalSalesforce CLIYes–37
aiondadotcomCommunityLocalBrowser sign-inYes–17
sf-intelligenceCommunityLocalSalesforce CLINoAlways3

All Salesforce MCP servers

43 active · 3 official · official first, then by GitHub stars

Show all 43

Questions

Is there an official Salesforce MCP server?

Yes. Salesforce runs hosted MCP servers that Claude, ChatGPT, Cursor and other apps connect to over the web. An admin switches them on in Setup, and each person signs in with their own Salesforce account.

Which Salesforce MCP server is read-only?

The hosted platform/sobject-reads server is read-only, and Salesforce recommends starting there in a sandbox. Of the community servers, sf-intelligence says it never writes to your org. The Advanced Communities server has a READ_ONLY setting, but its README says that only blocks Apex execution.

Do I need an admin to use it?

For the official hosted servers, yes. An admin activates them under Setup and creates an External Client App with the mcp_api and refresh_token scopes. Community servers skip that, but you need your own credentials or the Salesforce CLI.

Can the AI see records I can't?

Not through the hosted servers. Calls run as the signed-in user, so object permissions, field-level security and sharing rules still apply. Community servers use whatever login you give them, so use a user with narrow access.

Is the Salesforce MCP server free?

The hosted servers need an org on Enterprise Edition or above, per the Salesforce quick start. We found no separate MCP price in the sources we could read, so ask your Salesforce account team about usage billing. The community servers are open source and free, but your org API limits still apply.

What happened to the Salesforce DX MCP server?

It reached end of life on November 2, 2026. The salesforcecli/mcp repository is archived, and Salesforce says the npm package will be marked deprecated, though pinned installs keep working. Salesforce points developers to the sf-skills repo instead.

Which one should a developer use for Apex and metadata?

Salesforce now points developers to sf-skills. If you want an MCP server, tsmztech reads and writes Apex classes and triggers, and the Advanced Communities server runs through the Salesforce CLI you already have signed in.

How do the community servers sign in?

tsmztech supports username, password and security token, OAuth client credentials, or the Salesforce CLI. smn2gnt takes an access token and instance URL, or client credentials, or falls back to the Salesforce CLI default org. aiondadotcom opens a browser sign-in with OAuth and needs a Connected App.

Which one works for Salesforce B2C Commerce?

Salesforce's own B2C Commerce developer tooling ships an MCP server for B2C Commerce developers. It is separate from the CRM servers, so skip it unless you build on Commerce Cloud.

Server facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Archived servers are not listed.