"salesforce" matching MCP servers:

Enables Salesforce lead and permission set management through natural language. Supports creating leads, creating permission sets, and assigning permission sets to users via the Model Context Protocol.

Analyzes Salesforce permission architecture (profiles, permission sets, groups) to support RBAC remediation. It snapshots the permission model into DuckDB and provides tools for diffs, sensitive access detection, and verified decomposition proposals.

MCP server that scans Salesforce Agentforce metadata for security vulnerabilities using 61+ SAST rules, integrating into AI coding workflows to guard against OWASP LLM top 10 risks.

Permission gateway that hands an AI agent a scoped MCP endpoint instead of an OAuth token: connect 27 services (Gmail, Google Calendar/Drive/Ads/Search Console, Slack, Notion, GitHub, Jira, Salesforce, HubSpot, Stripe, LinkedIn, X, Meta Ads and more), grant per-action permissions finer than native OAuth scopes, audit every call and revoke a key in one click. Self-hostable, MIT.

Ledgent is a secure agentic integration layer that exposes Salesforce and billing operations as MCP tools. It enforces action-level authorization, idempotency, PII tokenization, and full audit logging, enabling AI agents to safely perform writes with human approval for high-risk actions.