Salesforce MCP Server

A Model Context Protocol (MCP) server for Salesforce CRM operations using REST APIs. This server provides CRUD (Create, Read, Update, Delete) operations for Salesforce objects.

Installation & Usage

Option 1: npm Package (Recommended)

# Install globally
npm install -g @imazhar101/mcp-salesforce-server

# Or run directly with npx
npx @imazhar101/mcp-salesforce-server

Option 2: Build from Source

# From project root
npm install
npm run build

# The server will be available at:
./dist/servers/salesforce/src/index.js

Cline MCP Configuration

To use this server with Cline (VS Code extension), add the following to your Cline MCP settings:

File Location:

• macOS: ~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
• Windows: %APPDATA%/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
• Linux: ~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json

Configuration:

{
  "mcpServers": {
    "salesforce-integration": {
      "command": "npx",
      "args": ["@imazhar101/mcp-salesforce-server"],
      "env": {
        "SALESFORCE_LOGIN_URL": "https://login.salesforce.com",
        "SALESFORCE_USERNAME": "your-username",
        "SALESFORCE_PASSWORD": "your-password",
        "SALESFORCE_SECURITY_TOKEN": "your-security-token"
      },
      "disabled": false,
      "alwaysAllow": ["query_records", "create_record", "update_record"]
    }
  }
}

Features

• OAuth Authentication: Automatic token management with persistence and auto-renewal
• Query: Execute SOQL queries to retrieve records
• Create: Create new records in any Salesforce object
• Read: Retrieve specific records by ID
• Update: Update existing records
• Delete: Delete records from Salesforce
• Describe: Get metadata information about Salesforce objects
• List Objects: List all available Salesforce object types
• Auto Re-authentication: Automatically refreshes expired tokens

Configuration

OAuth Authentication (Required)

Set OAuth environment variables for automatic authentication:

export SALESFORCE_CLIENT_ID="your_connected_app_client_id"
export SALESFORCE_CLIENT_SECRET="your_connected_app_client_secret"
export SALESFORCE_USERNAME="your_salesforce_username"
export SALESFORCE_PASSWORD="your_password_with_security_token"
export SALESFORCE_GRANT_TYPE="password"  # Optional, defaults to "password"
export SALESFORCE_LOGIN_URL="https://login.salesforce.com"  # Optional, defaults to production

Automatic Authentication: The server automatically authenticates on the first API call and handles token management transparently. Access tokens are stored in environment variables (SALESFORCE_ACCESS_TOKEN and SALESFORCE_INSTANCE_URL) and automatically renewed when they expire.

Setting up a Connected App:

1. Go to Setup → App Manager → New Connected App
2. Enable OAuth Settings
3. Add OAuth Scopes: Full access (full) or specific scopes
4. Set Callback URL (can be placeholder for username-password flow)
5. Note down Consumer Key (Client ID) and Consumer Secret (Client Secret)

Usage

Note: All tools automatically handle authentication using the environment variables above. No manual authentication is required.

Query Records

Execute SOQL queries to retrieve data:

{
  "tool": "salesforce_query",
  "soql": "SELECT Id, Name, Email FROM Contact WHERE AccountId != null LIMIT 10"
}

Create Records

Create new records in Salesforce:

{
  "tool": "salesforce_create",
  "sobject_type": "Account",
  "record": {
    "Name": "New Account",
    "Industry": "Technology",
    "Phone": "555-1234"
  }
}

Read Records

Retrieve specific records by ID:

{
  "tool": "salesforce_read",
  "sobject_type": "Account",
  "id": "0013D00000AbCdEf",
  "fields": ["Id", "Name", "Industry", "Phone"]
}

Update Records

Update existing records:

{
  "tool": "salesforce_update",
  "sobject_type": "Account",
  "id": "0013D00000AbCdEf",
  "record": {
    "Phone": "555-5678",
    "Industry": "Finance"
  }
}

Delete Records

Delete records from Salesforce:

{
  "tool": "salesforce_delete",
  "sobject_type": "Account",
  "id": "0013D00000AbCdEf"
}

Describe Objects

Get metadata information about Salesforce objects:

{
  "tool": "salesforce_describe",
  "sobject_type": "Account"
}

List Available Objects

List all available Salesforce object types (returns only object names):

{
  "tool": "salesforce_list_objects"
}

Note: This tool returns only the object names (e.g., "Account", "Contact", "Opportunity") for efficiency. Use salesforce_describe with a specific object name to get detailed metadata.

Common Salesforce Objects

• Account: Companies and organizations
• Contact: People associated with accounts
• Lead: Potential customers
• Opportunity: Sales deals
• Case: Customer service cases
• Task: Activities and to-dos
• Event: Calendar events and meetings
• User: Salesforce users
• Campaign: Marketing campaigns

Error Handling

The server provides detailed error messages for common issues:

• Invalid SOQL syntax
• Missing required fields
• Permission errors
• Record not found
• Field validation errors

Security

• Uses Salesforce REST API with OAuth authentication
• All operations respect Salesforce field-level security
• Object-level permissions are enforced by Salesforce
• Access token should be kept secure and rotated regularly

Limitations

• Requires valid Salesforce access token
• Subject to Salesforce API rate limits
• Large query results may be truncated (use LIMIT clause)
• Binary data and attachments require special handling