Evaluation record · mcp-server-salesforce
MCP Salesforce Server
vhosted (GA 2026-04-29); DX @salesforce/mcp 0.30.14Salesforce (Official)
MCPcrmenterprisemcpmodel-context-protocol
79
Strong
About This MCP
Salesforce's official MCP offering. Primary path is Hosted MCP Servers (GA 2026-04-29, included for Enterprise Edition+ and Developer Edition orgs): Salesforce-managed endpoints exposing org data, flows, Apex actions, and Named Query APIs via OAuth with PKCE, enforcing CRUD/FLS/sharing as the authenticated user. Variants: local DX MCP server (@salesforce/mcp, v0.30.x, Apache-2.0) for dev workflows, and the Data 360 MCP server in developer preview (May 2026).
Last Evaluated: July 9, 2026
Official WebsiteTrust Vector Analysis
Dimension Breakdown
🚀Performance & Reliability+
🚀Performance & Reliability
+
crm operation reliability
Assessment of hosted-server operation reliability against the underlying Salesforce API platform
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Salesforce hosts and scales the MCP servers on the same managed infrastructure as its REST APIs; structured tool calls replace unstructured API access
highVerified: 2026-07-09
query and flow execution
Review of tool execution paths for queries, flows, and Apex actions
Evidence
Salesforce Hosted MCP Servers - Standard Servers Reference — Prebuilt standard servers (Agentforce 360 Platform, Tableau Next, Data 360 SQL) plus custom servers exposing flows, Apex actions, and Named Query APIs as defined tool sets
mediumVerified: 2026-07-09
rate limit handling
Analysis of org API limit consumption by MCP tool calls
Evidence
Salesforce API Request Limits — MCP operations consume org API capacity subject to per-org API request limits by edition
mediumVerified: 2026-07-09
scalability
Managed-infrastructure scalability assessment
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Fully managed infrastructure: no servers to provision, no uptime to manage; Salesforce scales the servers as it does its REST APIs
highVerified: 2026-07-09
error recovery
Error propagation and recovery behavior review
Evidence
Salesforce Hosted MCP Servers Help — Tool calls surface standard Salesforce API errors (permission, validation, limits) to the client for recovery
mediumVerified: 2026-07-09
🛡️Security+
🛡️Security
+
authentication security
Authentication mechanism review
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — OAuth with PKCE controls access; a new MCP-specific OAuth scope separates MCP access from existing REST API scopes, granted via an External Client App
highVerified: 2026-07-09
permission scope control
Access control model analysis
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Existing org permissions automatically apply - CRUD, field-level security, and sharing rules; every transaction runs as the authenticated user with no anonymous service accounts
highVerified: 2026-07-09
data modification risk
Write-path risk assessment across standard and custom servers
Evidence
Salesforce Hosted MCP Servers - Standard Servers Reference — Standard and custom servers can execute writes (record CRUD, flows, Apex actions) with the user's full permissions; a read-only platform/sobject-reads server is available for lower-risk use such as sandboxes
highVerified: 2026-07-09
audit logging
Audit logging review
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Full audit trails are included; MCP transactions are attributable to the authenticated user in org auditing
highVerified: 2026-07-09
secure default posture
Default configuration and enablement review
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Secure-by-default: servers are off until an admin explicitly enables them in Setup > API Catalog > MCP Servers and creates an External Client App with appropriate scopes
highVerified: 2026-07-09
🔒Privacy & Compliance+
🔒Privacy & Compliance
+
crm pii exposure
Data flow analysis of CRM record exposure to the model context
Evidence
MCP Data Flow — Contact, lead, account, and opportunity records - CRM PII at enterprise scale - are returned to the MCP client and sent to the LLM provider
highVerified: 2026-07-09
least privilege support
Assessment of mechanisms available to minimize data exposed to agents
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Exposure can be narrowed with permission sets, FLS, sharing rules, and by choosing which servers/tools to enable (including a read-only server)
highVerified: 2026-07-09
data residency and control
Data residency and control boundary analysis
Evidence
Salesforce Hosted MCP Servers Help — MCP endpoints run inside Salesforce-managed infrastructure under existing org trust and compliance boundaries, but responses leave that boundary once delivered to the MCP client
mediumVerified: 2026-07-09
third party data sharing
Data sharing analysis
Evidence
LLM Provider Policies — CRM data retrieved via MCP is processed by the connected LLM provider (Claude, ChatGPT, Slack AI, etc.) under that provider's privacy policy
highVerified: 2026-07-09
consent and regulatory
Regulatory exposure assessment for CRM data in agent workflows
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Customer PII in CRM records may be subject to GDPR/CCPA; routing it through agent contexts requires customer-side controls beyond what the server enforces
mediumVerified: 2026-07-09
👁️Trust & Transparency+
👁️Trust & Transparency
+
documentation quality
Documentation completeness review
Evidence
Salesforce Hosted MCP Servers Documentation — First-party developer guide with a per-server tool reference, setup guides (Setup > API Catalog > MCP Servers), and client connection walkthroughs including Claude
Salesforce Developers Blog - Connect Claude with Hosted MCP Servers — Dedicated client integration guides published post-GA
highVerified: 2026-07-09
operation visibility
Logging and traceability assessment
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Servers define exactly which operations are available as structured tool calls, with full audit trails attributable to the authenticated user
highVerified: 2026-07-09
open source transparency
Source availability review across the hosted, DX, and Data 360 variants
Evidence
npm - @salesforce/mcp — Hosted servers are closed-source managed services, but the DX MCP server (@salesforce/mcp v0.30.14, Apache-2.0, last published 2026-06-23) and the Data 360 MCP server (forcedotcom/d360-mcp-server) are open source
GitHub - forcedotcom/d360-mcp-server — Data 360 MCP server published as an open-source developer preview
highVerified: 2026-07-09
api coverage clarity
API coverage documentation review
Evidence
Salesforce Developers Blog - Data 360 MCP Server (Developer Preview) — Coverage is explicitly documented per server; the Data 360 preview consolidates ~200 REST operations behind three facade tools (search, payload_examples, execute) to avoid context-window overload
highVerified: 2026-07-09
⚙️Operational Excellence+
⚙️Operational Excellence
+
ease of setup
Setup complexity assessment
Evidence
Salesforce Developers Blog - Hosted MCP Servers GA — Setup takes under 30 minutes but requires admin work: enable a server in Setup > API Catalog > MCP Servers, create an External Client App with MCP scopes, then connect the client via OAuth
highVerified: 2026-07-09
api performance
Performance assessment against underlying API behavior
Evidence
Salesforce Developer Platform — Performance tracks the underlying Salesforce APIs; complex queries and flow executions add latency versus simple record reads
mediumVerified: 2026-07-09
reliability
Reliability analysis
Evidence
Salesforce Trust Status — Runs on Salesforce-managed infrastructure with published trust/status transparency and enterprise SLAs
highVerified: 2026-07-09
feature coverage
Feature coverage assessment
Evidence
Salesforce Hosted MCP Servers - Standard Servers Reference — Standard servers for Agentforce 360 Platform, Tableau Next, and Data 360 SQL plus custom servers over flows, Apex actions, and Named Query APIs
highVerified: 2026-07-09
deployment flexibility
Deployment option and edition availability review
Evidence
npm - @salesforce/mcp — Three deployment shapes: hosted servers (GA, Enterprise Edition+ and Developer Edition at no extra cost), local DX MCP server on npm for developer workflows, and the Data 360 MCP server in developer preview (stdio, Java 17+) slated to join the hosted lineup at GA
highVerified: 2026-07-09
Strengths
- +Salesforce-managed hosted endpoints: no infrastructure to run, scales like the REST APIs (GA 2026-04-29)
- +Org permission model enforced end-to-end: CRUD, field-level security, and sharing rules apply, with every transaction running as the authenticated user
- +OAuth with PKCE plus a dedicated MCP OAuth scope separates agent access from existing API integrations
- +Secure by default: servers disabled until explicitly enabled in Setup, with full audit trails
- +Included at no additional cost for Enterprise Edition+ orgs and Developer Edition
- +Custom servers expose flows, Apex actions, and Named Query APIs as curated tool sets; read-only sobject-reads server available
- +Open-source variants: DX MCP server (@salesforce/mcp, Apache-2.0) for dev workflows and Data 360 MCP server in developer preview
Limitations
- !CRM PII at scale (contacts, leads, accounts, opportunities) flows into the LLM provider's context
- !Write-capable tools (record CRUD, flows, Apex actions) act with the user's full org permissions - over-permissioned users mean over-permissioned agents
- !Requires Enterprise Edition or above (or Developer Edition); not available on lower editions
- !Admin-driven setup (Setup enablement + External Client App) adds friction versus one-click consumer MCP servers
- !MCP tool calls consume org API request limits
- !Hosted servers are closed source; open-source DX and Data 360 variants cover different scopes (dev tooling, Data 360 APIs) rather than the hosted CRM servers
- !Data 360 MCP server is developer preview only (stdio, Java 17+) and not yet part of the hosted GA lineup
Metadata
license: Proprietary (hosted service); DX MCP server Apache-2.0; Data 360 MCP server open source (developer preview)
supported platforms
0: Hosted (Salesforce-managed endpoints, Enterprise Edition+ and Developer Edition)
1: Local DX server via npm (@salesforce/mcp)
2: Data 360 developer preview (Java 17+, stdio)
programming languages
0: N/A (hosted service)
1: TypeScript (DX server)
2: Java (Data 360 preview)
mcp version: 1.0
docs: https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/servers-reference.html
api dependency: Salesforce Platform APIs, Named Query APIs, Flows, Apex; Data 360 APIs (preview)
authentication: OAuth 2.0 with PKCE via External Client App; dedicated MCP OAuth scope
package name: @salesforce/mcp
github repo: https://github.com/forcedotcom/d360-mcp-server
first release: 2025-10 (hosted beta); 2026-04-29 (hosted GA)
maintained by: Salesforce
status: Active - hosted servers GA; DX server actively released (v0.30.14, 2026-06-23); Data 360 server developer preview
transport types
0: streamable-http (hosted)
1: stdio (DX and Data 360 servers)
Use Case Ratings
code generation
DX MCP server is purpose-built for Salesforce development workflows (orgs, metadata, testing)
customer support
Strong fit: case, contact, and account context with org permissions enforced
content creation
Useful for CRM-grounded outreach drafting; not a content platform
data analysis
Data 360 SQL and Tableau Next servers plus Named Queries enable governed analytics
research assistant
Good for account research within the org; limited outside CRM data
legal compliance
Strong access controls and audit trails, but CRM PII reaches the LLM provider
healthcare
Health Cloud data routed through agent contexts raises PHI exposure concerns
financial analysis
Governed access to revenue/opportunity data; FLS can shield sensitive fields
education
Applicable for Education Cloud orgs; standard CRM caveats apply
creative writing
Not a fit beyond CRM-personalized copy