Back to Home
salesforcecli icon

mcp

Verified Safe

by salesforcecli

Overview

The MCP Server for Salesforce facilitates seamless interaction between large language models (LLMs) and Salesforce orgs, providing a robust set of tools for common development and administrative tasks. This includes static code analysis for performance/security antipatterns, metadata deployment/retrieval, org management, SOQL queries, Apex/Agent testing, and DevOps workflows like work item management and conflict resolution.

Installation

Run Command
npx -y @salesforce/mcp --orgs DEFAULT_TARGET_ORG --toolsets orgs,metadata,data,users --tools run_apex_test --allow-non-ga-tools

Environment Variables

  • SF_MCP_SERVER_BIN
  • SF_USE_GENERIC_UNIX_KEYCHAIN
  • MCP_SERVER_REQUEST_TIMEOUT
  • FORCE_COLOR

Security Notes

The project adheres to Salesforce's internal security guidelines, including a dedicated security contact (`security@salesforce.com`). It demonstrates proactive security measures such as robust path traversal prevention (`sanitizePath` function in `mcp-provider-dx-core`), explicit handling and redaction of sensitive authentication information (e.g., `assertNoSensitiveInfo` in test utilities), and careful dependency management (e.g., `overrides` in root `package.json`). Contribution guidelines mandate security reviews for all pull requests. The architecture leverages `@salesforce/core` for secure Salesforce authentication mechanisms, which are well-established.

Similar Servers

Stats

Interest Score68
Security Score9
Cost ClassHigh
Avg Tokens3000
Stars250
Forks70
Last Update2026-01-19

Tags

SalesforceLLM IntegrationCoding AgentStatic AnalysisCode QualityPerformanceSecurityDevOpsMetadata ManagementOrg ManagementApexSOQLGitTypeScriptMonorepoMobile DevelopmentLWCAura