salesforce-docs-mcp

The server is designed for local-first operation, utilizing stdio transport, which prevents the exposure of HTTP endpoints. It employs parameterized SQLite queries to robustly prevent SQL injection and uses Zod for comprehensive input validation across all tool arguments. No 'eval' or code obfuscation is present in the core server logic. The server itself does not handle or store sensitive user data and makes no external network calls for its primary functionality. API keys for external LLMs (e.g., OpenAI) are only required for optional test scripts (`test-llm-judge.ts`) and are handled via environment variables, not hardcoded within the server's runtime code.