Provides OAuth-authenticated access to Salesforce APIs with Bearer token forwarding, enabling AI agents to interact with Salesforce data and functionality through authenticated API calls.
Salesforce MCP Server
A Model Context Protocol (MCP) server for Salesforce integration with Bearer token forwarding.
How it Works
This MCP server demonstrates the OAuth Bearer token forwarding pattern:
- Langdock authenticates with Salesforce using your External Client App OAuth configuration
- Langdock receives a Bearer token from Salesforce
- Langdock forwards this Bearer token to your MCP server in the
Authorization
header - Your MCP server extracts this token and uses it to make authenticated API calls to Salesforce
The server stores the Bearer token per session, allowing it to maintain authenticated connections to Salesforce throughout the MCP session lifecycle.
Installation / Setup
Environment Setup
Create a .env
file in the root directory with your Salesforce configuration:
The server uses the Salesforce instance URL from the SALESFORCE_INSTANCE_URL
environment variable.
Configuration
The server requires:
- Bearer token in the
Authorization
header (format:Bearer YOUR_TOKEN
) - Salesforce instance URL via
SALESFORCE_INSTANCE_URL
environment variable (see Environment Setup above)
Salesforce setup
- Enable API Access, go to: Setup → Profiles → [Your Profile] → System Permissionsa. Make sure API Enabled is checked. Without this, no external app can reach Salesforce.
- Add a Connected App. You need to go to Setup → Apps → App Manager (https://your-instance.develop.lightning.force.com/lightning/setup/NavigationMenus/home).a. Create a new Connected Appb. Name your appc. Enable OAuth Settingsd. Set the callbackk url from /mcp on langdocke. Add scopes like: full, refresh_token, apif. Save your Consumer Key and Consumer Secret
Connecting with Langdock
Start the server
Tunnel using ngrok
Configure MCP client in Langdock
Then create and test the connection
This server cannot be installed
remote-capable server
The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.
Enables authenticated interaction with Salesforce through OAuth Bearer token forwarding. Allows users to make API calls to Salesforce instances while maintaining secure session-based authentication throughout the MCP lifecycle.
Related MCP Servers
- -securityFlicense-qualityRun your own MCP server for over 2,500 apps and APIs. * Run your own MCP server for over 2,500 APIs * Manage servers for your users, in your own app. * Connect accounts, configure params, and make API requests, all via tools * Fully-managed OAuth and credential storage )Last updated -19810,139
- -securityFlicense-qualityA MCP server that requires user authentication via Auth0, allowing it to call protected APIs on behalf of authenticated users.Last updated -
- -securityFlicense-qualityThis MCP server provides tools to interact with the Salesforce Agentforce API, allowing authentication, session creation, and message exchange with Salesforce agents.Last updated -11
- -securityAlicense-qualityA reference implementation for creating an MCP server supporting Streamable HTTP & SSE Transports with OAuth authorization, allowing developers to build OAuth-authorized MCP servers with minimal configuration.Last updated -85MIT License