# Salesforce connector: IT approval one-pager

Salesforce's MCP server can read and change data. An admin or IT has to act before anyone can connect it. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Online: https://mcpforgtm.com/toolkit/it-approval/salesforce

- Server URL (full access server, Source: https://github.com/forcedotcom/mcp-hosted/wiki/FAQ): https://api.salesforce.com/platform/mcp/v1/platform/sobject-all (Source: StackMCP listing, https://mcpforgtm.com/tools/salesforce)
- Read-only server: https://api.salesforce.com/platform/mcp/v1/platform/sobject-reads (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Connecting-Your-MCP-Client, https://github.com/forcedotcom/mcp-hosted/wiki/FAQ)
- Production org URL pattern. Sandbox and My Domain orgs use a different URL.
- Access: Read + write (Source: https://github.com/forcedotcom/mcp-hosted/wiki/FAQ)
- Sign-in: OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials (Source: StackMCP listing, https://mcpforgtm.com/tools/salesforce)
- Admin approval: Yes (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Confirming-Availability)
- Setup: Needs admin or IT (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Client-Tips-and-Troubleshooting)
- Credits: Every call uses quota (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Known-Limitations)
- Plan: Enterprise Edition or above (Developer Edition also works) (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Confirming-Availability)

## What data can it reach?

Salesforce's docs list these tools for its MCP server:

- SOQL query (soqlQuery) and SOSL search (find)
- object schema (describeGlobal, getObjectSchema)
- related and recent records
- record create/update/delete (platform/sobject-all)
- custom tools from Apex, Flows and Named Queries
- prompt templates (sobject-all)
(Source: https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/hosted-mcp-servers-overview.html)

- It works as the signed-in person. It can only use objects that person can read, create, update or delete. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)
- Fields the person can't see are hidden from it. Fields they can't edit are read-only to it. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)
- It follows the same sharing rules as the person. Private records stay private. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)

## What can it read, and what can it change?

Read + write. Things it can do in your Salesforce account (Source: https://github.com/forcedotcom/mcp-hosted/wiki/FAQ):

- creates, updates and deletes Salesforce records (platform/sobject-all server)
- creates opportunities
- runs admin-defined custom actions (Apex invocable actions, Flows)

## Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

- Salesforce says most organizations should start with its read-only server, platform/sobject-reads. That server has no tool that can create, update or delete a record. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)

Also check before you run anything that spends credits or quota (a usage limit). Credits or quota for this connector: Every call uses quota.

## How does it sign in?

Sign-in method (from the StackMCP listing): OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials (Source: StackMCP listing, https://mcpforgtm.com/tools/salesforce)

- Every session belongs to one person who signed in with their own login. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)
- There are no service accounts. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)

## Does an admin need to approve it?

What Salesforce's docs confirm about admin controls:

- An admin must approve or enable the connection: Yes (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Confirming-Availability)
- Scopes or permissions can limit what it reaches: Yes (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)
- Individual tools can be turned off: Yes (Source: https://github.com/forcedotcom/mcp-hosted/wiki/FAQ)
- MCP activity shows in an audit log: Not confirmed

- Every MCP server is off by default. An admin has to turn each one on in Setup, then API Catalog, then MCP Servers. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/FAQ)
- Admins can link each External Client App to profiles and permission sets. That controls who can sign in through which assistant. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)
- When it updates a record, Salesforce shows the signed-in person as the editor. (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Security-and-Permissions)

## How do we turn it off?

### In Salesforce

The Salesforce docs we checked don't say how to revoke MCP access. Ask your Salesforce admin.

### In the AI assistant

- In Claude, you can revoke access at any time. Disconnect the connector in Claude's settings, or in the tool's own security settings. (Source: https://support.claude.com/en/articles/11175166-getting-started-with-custom-connectors-using-remote-mcp)
- For other assistants, check that assistant's settings or ask your admin.

## Does it use credits or quota?

Every call uses quota. No paid credits; every tool call counts against the org's daily Salesforce API request quota (one or more API calls per tool). (Source: https://github.com/forcedotcom/mcp-hosted/wiki/Known-Limitations)

## Send this to IT

Copy this, fill in the parts in [brackets] and send it.

```text
Subject: Request: connect Salesforce to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Salesforce to [your AI assistant] using Salesforce's official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval to connect Salesforce with my own Salesforce login. It can only use the objects and records my Salesforce permissions allow.
- Any admin step Salesforce needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials
- Setup: Needs admin or IT
- Credits: Every call uses quota

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/salesforce

Thanks,
[your name]
```

_Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. We last checked the quotes on this page (vendor docs and the Claude help article) on Oct 22, 2026, and the StackMCP listing facts on Oct 16, 2026._