Salesforce MCP Server

MCP Salesforce TypeScript Connector

A TypeScript implementation of a Model Context Protocol (MCP) server for Salesforce integration, allowing LLMs to interact with Salesforce data through SOQL queries, SOSL searches, and CRUD operations.

Features

• 🔐 Simplified Password Authentication: Secure OAuth 2.0 Resource Owner Password Credentials Flow
• 📊 SOQL & SOSL: Execute queries and searches against Salesforce
• 🔍 Metadata Access: Retrieve object fields, labels, and types
• ✏️ CRUD Operations: Create, read, update, and delete records
• 🛠️ Tooling API: Execute Tooling API requests
• ⚡ Apex REST: Execute Apex REST requests
• 🌐 REST API: Make direct REST API calls to Salesforce
• 🐳 Docker Ready: No hardcoded values, fully configurable via environment variables
• 🔄 Token Refresh: Automatic token refresh for long-running sessions

Available Tools

• authenticate_password - Authenticate using username/password with OAuth
• run_soql_query - Execute SOQL queries
• run_sosl_search - Execute SOSL searches
• get_object_fields - Get metadata for Salesforce objects
• get_record - Retrieve specific records by ID
• create_record - Create new records
• update_record - Update existing records
• delete_record - Delete records
• tooling_execute - Execute Tooling API requests
• apex_execute - Execute Apex REST requests
• restful - Make direct REST API calls

Quick Start with Docker

Prerequisites

1. Create a Connected App in Salesforce:
   • Go to Setup → Apps → App Manager → New Connected App
   • Fill in basic information (App Name, API Name, Contact Email)
   • Enable OAuth Settings
   • Set callback URL: http://localhost:8080/callback (required but not used)
   • Select OAuth Scopes:
     • Access your basic information (id, profile, email, address, phone)
     • Perform requests on your behalf at any time (refresh_token, offline_access)
     • Access and manage your data (api)
   • Save and note down the Consumer Key and Consumer Secret
2. Get your Security Token:
   • Go to Setup → My Personal Information → Reset Security Token
   • Check your email for the new security token

Using the Docker Image

Pull and run the latest Docker image:

MCP Configuration

VS Code using Docker image

Add to your .vscode/mcp.json:

You can also use volumes to mount a config file instead of passing environment variables:

Claude Desktop using Docker image

Add to your claude_desktop_config.json:

Environment Variables

The server requires the following environment variables:

Required (OAuth Authentication)

• SALESFORCE_CLIENT_ID - Consumer Key from your Connected App
• SALESFORCE_CLIENT_SECRET - Consumer Secret from your Connected App
• SALESFORCE_USERNAME - Your Salesforce username
• SALESFORCE_PASSWORD - Your Salesforce password
• SALESFORCE_SECURITY_TOKEN - Your Salesforce security token

Optional

• SALESFORCE_SANDBOX - Set to "true" for sandbox, "false" for production (default: "false")

Alternative (Direct Token Authentication)

Instead of username/password, you can use:

• SALESFORCE_ACCESS_TOKEN - Direct access token
• SALESFORCE_INSTANCE_URL - Salesforce instance URL (e.g., https://your-instance.my.salesforce.com)

Backward Compatibility

The server also supports alternative variable names:

• SF_CONSUMER_KEY / SF_CONSUMER_SECRET
• SF_USERNAME / SF_PASSWORD / SF_SECURITY_TOKEN

Using Docker Compose

1. Create a .env file with your environment variables:

2. Run using Docker Compose:

Examples

Using the Tools

Once connected, you can use the tools through your MCP client:

Authentication:

Query Data:

Search:

Get Metadata:

Create Record:

Troubleshooting

Common Issues

1. Authentication Failed
   • Verify credentials are correct
   • Check Connected App OAuth scopes include "Access and manage your data (api)"
   • Ensure security token is current (reset if needed)
   • Verify sandbox setting matches your org type
2. Container Won't Start
   • Ensure both CLIENT_ID and CLIENT_SECRET are provided
   • Check that all required environment variables are set
   • Verify Docker has access to pull the image
3. Network Errors
   • Check internet connection
   • Verify Salesforce service status
   • Check firewall settings allow outbound HTTPS connections

Debug Mode

For verbose logging, add the debug environment variable:

Contributing

See CONTRIBUTING.md for information about:

• Project architecture and development setup
• Running from source code
• Contributing guidelines and pull request process

License

MIT License - see LICENSE file for details.

Links

• Salesforce Documentation
• Model Context Protocol
• Docker Hub Repository