Salesforce MCP for Microsoft 365 Copilot

This project hosts a remote MCP server for Microsoft 365 Copilot and Teams scenarios. It preserves the existing Salesforce toolset and Salesforce OAuth flow, but removes the Claude-specific OAuth broker and replaces it with Microsoft identity on Azure App Service.

Exposed tools

• query_salesforce

• describe_object

• get_pipeline_summary

• list_recent_activity

• detect_anomalies

• get_schema_context

Related MCP server: MCP Salesforce Lite

Runtime architecture

Microsoft 365 Copilot / Teams -> Federated connector -> Azure App Service hosted MCP server -> Salesforce REST APIs

Authentication model

1. Microsoft identity is supplied to the app by Azure App Service Authentication.

2. The app resolves the signed-in Microsoft user from App Service headers.

3. That user starts Salesforce sign-in at /auth/salesforce/start.

4. Salesforce OAuth tokens are stored per Microsoft user session.

5. MCP requests on /mcp execute with that user's Salesforce session.

Key endpoints

• GET /health

• GET /auth/status

• GET /auth/salesforce/start

• GET /auth/salesforce/callback

• GET /auth/salesforce/disconnect

• POST /mcp

• GET /sse

• POST /message

Local development

1. Copy .env.example to .env.

2. Fill in Salesforce values.

3. For local testing only, set DEV_BYPASS_USER_ID and optionally the other DEV_BYPASS_* values.

4. Run npm install.

5. Run npm run build and npm start.

6. Open http://localhost:3000/auth/salesforce/start to connect Salesforce.

Azure deployment

See AZURE-DEPLOYMENT.md for the Azure App Service and Microsoft 365 Copilot setup.