Back to Home
SalesforceDiariesBySanket icon

mcp-router

Verified Safe

by SalesforceDiariesBySanket

Overview

This server acts as an MCP (Model Context Protocol) Host, bridging Salesforce (Apex/Flow) with remote MCP servers via a REST API, translating requests and managing connections.

Installation

Run Command
npm start

Environment Variables

  • API_KEY
  • MCP_SERVERS
  • MCP_TIMEOUT
  • LOG_LEVEL
  • CORS_ORIGINS

Security Notes

The server employs API key authentication, `helmet` for security headers, and configurable CORS. Sensitive configurations like MCP server URLs and OAuth credentials are managed via environment variables or dynamically registered via API endpoints that are themselves protected by the main API key. OAuth 2.1 with PKCE is implemented for secure authorization flows. A potential concern is the `authMiddleware` explicitly bypassing authentication in development mode if `API_KEY` is not set, which could be a risk if deployed improperly to production. Dynamic server registration with sensitive OAuth secrets in the request body requires the API endpoint to be sufficiently secured.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassLow
Avg Tokens1
Stars0
Forks0
Last Update2025-12-10

Tags

SalesforceMCPREST APINode.jsHeroku