PlugWiki
Salesforce Hosted MCP Servers logo

Salesforce MCP, Salesforce's hosted MCP servers

Official · by SalesforceRemote
Gethttps://api.salesforce.com/platform/mcp/v1/platform/sobject-readsforcedotcom/mcp-hostedDocs

Lets Claude, ChatGPT or Cursor look up and update your Salesforce records. Salesforce runs it, and you sign in with your own login.

Salesforce runs these connectors so Claude, ChatGPT or Cursor can look up and update the records you can already open in Salesforce. An admin has to switch them on first, and each person signs in with their own Salesforce login. They need Enterprise Edition or above, and Salesforce says they are meant for customers with Flex Credits, so usage may be billed. Sellers in Claude or ChatGPT can use separate beta apps built on top, and the developer-only Salesforce DX server ends on November 2, 2026, with sf-skills as its replacement.

Good for

  • Salesforce admins who want to let their team use AI on live CRM data
  • Sales and ops teams who want to ask questions about accounts, deals and reports in plain English
  • Developers building agents that read records or run existing Flows and Apex
  • Teams that want AI actions to follow existing Salesforce permissions and audit trails

Works in

5 supported · 9 should work

Tap an app to see how to set it up and any known problems.

Install Salesforce Hosted MCP Servers

Claude Code

  1. 1

    Add the Salesforce custom connector in Claude (Claude.ai or Claude Desktop) as described on those tabs.

  2. 2

    Start Claude Code. The connector is available there too, per Salesforce's guide.

Requires Salesforce org (Enterprise Edition or above), Server turned on in Setup, External Client App.

Read-only mode: Use the `platform/sobject-reads` server, which is read-only. Switch to `platform/sobject-all` only when you want it to create, update or delete records.

Before connecting, an admin turns on the server in Setup > API Catalog > MCP Servers and creates an External Client App (Connected Apps do not work) with the mcp_api and refresh_token scopes, PKCE and JWT access tokens on. Allow up to 30 minutes for the app to take effect. Replace platform/sobject-reads with another server name from the servers reference. Sandbox and scratch orgs use https://api.salesforce.com/platform/mcp/v1/sandbox/{server}; if your org blocks login.salesforce.com, use the My Domain form (https://api.salesforce.com/platform/mcp/v1/d/{mydomain}/{server}). The agent has the same permissions as the user who signs in. The mcp-remote proxy is not supported.

From the vendor's docs. Source.

Tools

  • Looks up Salesforce records that match your criteria

    (platform/sobject-reads, platform/sobject-mutations, platform/sobject-deletes, platform/sobject-all) Runs a SOQL query against one object and returns the matching records. Field-level security and sharing rules still apply to the results.

    Try: “Show the 10 biggest open opportunities by amount.”

    Read · soqlQuery

  • Searches for a name or keyword across many record types

    (platform/sobject-reads, platform/sobject-mutations, platform/sobject-deletes, platform/sobject-all) Searches for a term across multiple Salesforce objects at the same time. Use it when you do not know which object holds the record.

    Try: “Find everything related to Acme Corp.”

    Read · find

  • Lists records you recently opened or edited

    (platform/sobject-reads, platform/sobject-all) Lists the records of one type that you recently viewed or changed. It helps when you say things like 'that opportunity I was looking at'.

    Try: “Show the accounts I looked at recently.”

    Read · listRecentSobjectRecords

  • Gets the records linked to a record you already have

    (platform/sobject-reads, platform/sobject-all) Given a parent record ID and a relationship name, returns its child records, for example the contacts of an account or the line items of an opportunity.

    Try: “List the contacts on the Acme account.”

    Read · getRelatedRecords

  • Creates a new Salesforce record

    (platform/sobject-mutations, platform/sobject-all) Creates one record of the object type you name. It fails if required fields are missing or a validation rule rejects the values.

    Try: “Create a contact named Dana Lee at Acme.”

    Write · createSobjectRecord

  • Changes fields on an existing record

    (platform/sobject-mutations, platform/sobject-all) Updates the fields you specify on a record and leaves the others alone. It fails if the record does not exist or a validation rule blocks the change.

    Try: “Set the stage of the Acme renewal to Negotiation.”

    Write · updateSobjectRecord

  • Updates a parent record starting from one of its child records

    (platform/sobject-mutations, platform/sobject-all) Starts from a child record and updates a record up the child-to-parent chain, for example from a contact to its account. Only child-to-parent relationships are supported, up to five levels.

    Try: “Update the industry on the account of this contact.”

    Write · updateRelatedRecord

  • Deletes a Salesforce record

    (platform/sobject-deletes, platform/sobject-all) Deletes one record by ID. Salesforce keeps it in the Recycle Bin for up to 15 days, but this server has no undelete tool, so confirm first.

    Try: “Delete the duplicate Acme Corp lead.”

    Delete · deleteSobjectRecord

  • Deletes a parent record starting from one of its children

    (platform/sobject-deletes, platform/sobject-all) Starts from a child record and deletes the parent record it points to. Deleting the master side of a master-detail relationship also removes its detail records.

    Try: “Delete the account that this test contact belongs to.”

    Delete · deleteRelatedRecord

  • Shows the details of a CMS workspace

    (content-readonly) Gets one CMS workspace by ID, with its name, type and default language.

    Try: “Show details of the Marketing CMS workspace.”

    Read · get_cms_workspace

  • Lists your CMS workspaces

    (content-readonly) Lists the enhanced CMS workspaces the user can access.

    Try: “List my CMS workspaces.”

    Read · get_cms_workspaces

  • Lists the channels attached to a CMS workspace

    (content-readonly) Lists the channels linked to one workspace.

    Try: “Which channels does the Marketing workspace publish to?”

    Read · get_cms_channels_for_workspace

From the official docs

Pros and cons

Good

  • Nothing to install or host, because Salesforce runs the servers
  • Each person signs in with their own login, so Salesforce permissions and the audit trail still apply
  • A read-only server lets you try it before allowing any changes
  • Admins can build custom servers from Flows, Apex, Named Queries and Prompt Builder templates
  • Works in Claude, ChatGPT, Cursor and other clients that sign in over the web

Watch out

  • An admin must switch it on and create an External Client App first
  • Salesforce says it is meant for customers with Flex Credits, and usage may be billed
  • Every call counts against the org's daily API limit
  • Sign-in failures in Claude and ChatGPT are common in user reports
  • Custom servers cannot include standard tools such as soqlQuery
  • Clients that rely on mcp-remote are not supported

Permissions

medium risk · 5 things to watch

Medium risk

Your assistant can create, change and delete any record you can reach in Salesforce, and heavy use draws on your org's daily API limit. Start with the read-only server in a sandbox and add write access only for people who need it.

What it can do

Watch out for

  • sobject-all can create, edit and delete records

    The full server and sobject-deletes let the assistant change or delete any record you can. Start with sobject-reads and add write servers only for people who need them. developer.salesforce.com

  • Sign-in tokens never expire by default

    The External Client App keeps refresh tokens valid indefinitely unless you change it. Salesforce recommends 30 days or less with token rotation. developer.salesforce.com

  • Every call counts against your daily API limit

    Each tool call uses one or more API calls, so heavy use can affect other integrations. Check usage under Setup, Company Information. github.com

  • Runs with your own permissions

    Every call is made as the signed-in user, with object, field and sharing rules applied and changes logged under their name. There are no service accounts. github.com

  • Off until an admin turns it on

    All servers are disabled by default. Any org user can sign in through the app unless you require a permission set. developer.salesforce.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyActivate only the platform/sobject-reads server, which has no create, update or delete tools. You can also build a custom server with just the tools you want, or turn tools off per connector in Claude.
Talks toYour AI app talks to api.salesforce.com; records the tools return go to your AI app and its model provider, under that app's terms. No AI model runs on Salesforce's side; tool calls are processed deterministically
Sign-in and keysOAuth 2.0 with PKCE through an External Client App; your AI app stores the tokens. Refresh tokens are valid indefinitely by default.
Scopes
  • mcp_api and refresh_token on the External Client App; mcp_api grants MCP access but not the existing REST APIs

Alternatives

Use the hosted servers if your admin can set them up and you want any AI app to reach Salesforce. Sellers who want ready-made sales skills should try the Claude or ChatGPT apps, and developers should move to sf-skills before the DX server ends.

ServerOfficialRunsBest forStatusGitHub stars
For Salesforce
Salesforce Hosted MCP ServersThis pageOfficialHostedAny teamGA136
mcp-server-salesforce (community)CommunityLocalNo admin setupActive165
Other tools for the same job
Salesforce in Claude (plugin)OfficialHostedSellers in ClaudeBeta–
Agentforce Sales app in ChatGPTOfficialHostedSellers in ChatGPTBeta–
Salesforce DX MCP ServerOfficialLocalDevelopersEnds Nov 2–
Tableau MCPFor TableauOfficialLocalTableau analyticsActive363

What people say

People like that it follows existing Salesforce permissions and dislike how often sign-in fails.

What people like

  • Actions run as the signed-in user, so existing permissions and the audit trail apply with no new security model
  • A read-only server gives a safe way to try it before allowing writes or deletes
  • Custom servers can turn your own Flows and Apex into tools

Common complaints

  • Sign-in is the main pain: Salesforce finishes the login but Claude or ChatGPT still fails to connect
  • Setup takes several admin steps, and changes can take up to 30 minutes to apply
  • Users report breakage after Salesforce releases, such as custom servers returning 'Server definition not found'
  • The GitHub repo is not a support channel, so connection problems go through Salesforce Support

In their words

1 more quote

Questions

Which Salesforce AI option is right for me?

Use the hosted servers on this page if an admin can set them up and you want Claude, ChatGPT or Cursor to reach your org. Sellers on paid Claude plans can use the Salesforce in Claude beta plugin, and sales teams in ChatGPT can use the Agentforce Sales app. Developers should use sf-skills, because the Salesforce DX server ends on November 2, 2026.

Does it cost extra?

Salesforce's docs say it is meant for customers with Flex Credits and you may be billed for usage. It works on Enterprise Edition and above. Each call also counts against your org's daily API limit, so ask your account executive about Flex Credits.

What is the Salesforce MCP server URL?

For production it is https://api.salesforce.com/platform/mcp/v1/<server>, for example platform/sobject-reads. For a sandbox or scratch org, add sandbox/ before the server name. If your org blocks login.salesforce.com, use the My Domain form.

Can I keep it read-only?

Yes. Activate only platform/sobject-reads, which has no create, update or delete tools. Salesforce recommends starting there, in a sandbox.

Can the AI see records I can't?

No. Every call runs as you, with your object permissions, field-level security and sharing rules, and any change is logged under your name.

How does an admin set it up?

An admin activates the servers under Setup, API Catalog, MCP Servers, where all of them start off. Then they create an External Client App with the mcp_api and refresh_token scopes and add the callback URL for your AI app. Connected Apps do not work, and a new app can take up to 30 minutes to apply.

Why does sign-in work but the connection still fails?

Most often the server is not activated for that org, the app is still applying (up to 30 minutes), or you signed in to a different org. Some people still see failures with everything set correctly, and Salesforce asks them to open a support case.

Is this the same as the Salesforce DX MCP server?

No. The hosted servers run on Salesforce's side and give any user's AI app access to org data. The DX server was a local developer tool and reaches end of life on November 2, 2026, with sf-skills as the replacement.

Can I expose my own Flows or Apex?

Yes. Custom servers can turn Apex invocable actions, Apex REST, Flows and Named Queries into tools, and Prompt Builder templates into prompts. They cannot include standard tools such as soqlQuery yet.

Does it work with mcp-remote?

No. Salesforce does not support mcp-remote. Use an app that signs in over the web natively, such as Claude, ChatGPT, Cursor or Postman.

Examples

  • Review bookings trends without building a report

    Show me a report of daily bookings. Use the start date to group bookings.

    Source
  • Prepare for a quarterly business review from live CRM data

    Pull my open opportunities for this quarter and summarize risks by account.

  • Reconcile closed-won deals against ERP revenue with both servers connected

    List deals closed-won last month and flag any that do not match revenue in the ERP.

  • Run an existing Flow through a custom server, with a human check before writes

    Source
  • Check the connection works with the read-only server before connecting an AI app

    Source

Information

updated Nov 2, 2026

Publisher
Salesforce (official)
Endpoint
https://api.salesforce.com/platform/mcp/v1/platform/sobject-reads
Transport
Streamable HTTP
Auth
OAuth
License
Apache-2.0
Last commit
Jul 23, 2026
Open issues
24

WebsiteStandard servers referenceGitHubConnect an MCP clientGA announcement (Apr 2026)Issues

Other Salesforce MCP servers

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 26
  1. Client connection overview · developer.salesforce.com
  2. Salesforce Hosted MCP Servers · github.com
  3. Hosted MCP Servers FAQ · github.com
  4. developer.salesforce.com · developer.salesforce.com
  5. developer.salesforce.com · developer.salesforce.com
  6. Set up Salesforce in Claude for your organization · support.claude.com
  7. www.salesforce.com · salesforce.com
  8. github.com · github.com
  9. github.com · github.com
  10. developer.salesforce.com · developer.salesforce.com
  11. developer.salesforce.com · developer.salesforce.com
  12. github.com · github.com
  13. developer.salesforce.com · developer.salesforce.com
  14. developer.salesforce.com · developer.salesforce.com
  15. github.com · github.com
  16. github.com · github.com
  17. github.com · github.com
  18. github.com · github.com
  19. Claude connection issue · github.com
  20. Cursor sign-in issue with mcp-remote · github.com
  21. Client Tips and Troubleshooting · github.com
  22. github.com · github.com
  23. developer.salesforce.com · developer.salesforce.com
  24. github.com · github.com
  25. Use Salesforce in Claude · support.claude.com
  26. mcp-server-salesforce README · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.