Is Mcp Server Salesforce safe to use?

Mcp Server Salesforce has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Mcp Server Salesforce?

Mcp Server Salesforce supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Mcp Server Salesforce do?

Mcp Server Salesforce provides 15 tools: salesforce_search_objects, salesforce_describe_object, salesforce_query_records, salesforce_aggregate_query, salesforce_dml_records and 10 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Mcp Server Salesforce?

Mcp Server Salesforce is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.

Is Mcp Server Salesforce actively maintained?

Mcp Server Salesforce is recently maintained — last commit was 44 days ago. It has 150 GitHub stars.

Mcp Server Salesforce

Name: Mcp Server Salesforce
Rating: 4.3 (1 reviews)
Author: tsmztech

Salesforce MCP Server

MaintainedNot tested

Other

★ 150↓ 1.3k/wknpm GitHub

85No CVEsmaintained15 toolsMIT

Quick Install

{
  "mcpServers": {
    "salesforce": {
      "env": {
        "SALESFORCE_CONNECTION_TYPE": "Salesforce_CLI"
      },
      "args": [
        "-y",
        "@tsmztech/mcp-server-salesforce"
      ],
      "command": "npx"
    }
  }
}

Setup guide

Should you use this server?

Salesforce MCP Server

✓

Is it safe?

No known CVEs for @tsmztech/mcp-server-salesforce.

No authentication — any process on your machine can connect.

MIT. View license →

✓

Is it maintained?

Last commit 44 days ago. 150 stars. 1,278 weekly downloads.

Will it work with my client?

Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Context cost

15 tools. ~900 tokens (0.4% of 200K).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@tsmztech/mcp-server-salesforce' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Score Breakdown

MCPpedia Score

Click each category to see evidence

85A

Last scored 12h ago

How we score →

Security

30/30

No known vulnerabilities.

✓

Known CVEs — No known CVEs for @tsmztech/mcp-server-salesforcecheck OSV.dev

✗

Tool safety — Found: code execution

✓

Tool poisoning — No poisoning indicators detected

✓

Injection vectors — No injection vectors detected

✓

Tool stability — Tool definitions stable

○

Dependency health — found on deps.dev, recently updated

✓

License — License: MIT

○

Authentication

Tools (15)

salesforce_search_objects

Search for standard and custom objects by partial name matches

salesforce_describe_object

Get detailed object schema information including field definitions, relationships, and picklist values

salesforce_query_records

Query records with relationship support including parent-to-child and child-to-parent relationships

salesforce_aggregate_query

Execute aggregate queries with GROUP BY, aggregate functions (COUNT, COUNT_DISTINCT, SUM, AVG, MIN, MAX), and HAVING clauses

salesforce_dml_records

Perform data operations including insert, update, delete, and upsert using external IDs

salesforce_manage_object

Create and modify custom objects including object properties and sharing settings

salesforce_manage_field

Manage object fields including adding custom fields, modifying properties, and creating relationships

salesforce_manage_field_permissions

Manage Field Level Security by granting or revoking read/edit access for specific profiles

salesforce_search_all

Search across multiple objects using SOSL with field snippets

salesforce_read_apex

Read Apex classes including full source code and metadata with wildcard support

Frequently Asked Questions

Is Mcp Server Salesforce safe to use?: Mcp Server Salesforce has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Mcp Server Salesforce?: Mcp Server Salesforce supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Mcp Server Salesforce do?: Mcp Server Salesforce provides 15 tools: salesforce_search_objects, salesforce_describe_object, salesforce_query_records, salesforce_aggregate_query, salesforce_dml_records and 10 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Mcp Server Salesforce?: Mcp Server Salesforce is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
Is Mcp Server Salesforce actively maintained?: Mcp Server Salesforce is recently maintained — last commit was 44 days ago. It has 150 GitHub stars.