Toolkit / IT approval kit / Salesforce

Salesforce connector: IT approval one-pager

Salesforce's MCP server can read and change data. An admin or IT has to act before anyone can connect it. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Download (.md) Print this page

Server URL

Full access server Source: github.com, checked 2026-10-22
https://api.salesforce.com/platform/mcp/v1/platform/sobject-all Source: StackMCP listing, checked 2026-10-16
Read-only server: https://api.salesforce.com/platform/mcp/v1/platform/sobject-reads Source: github.com, checked 2026-10-22 Source: github.com, checked 2026-10-22
Production org URL pattern. Sandbox and My Domain orgs use a different URL.

Access

Read + write

Source: github.com, checked 2026-10-16

Sign-in

OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials Source: StackMCP listing, checked 2026-10-16

Admin approval

YesSource: github.com, checked 2026-10-16

Setup

Needs admin or IT

An admin or IT has to act first, for example by approving or enabling the integration. Don't plan on connecting it alone. Source: github.com, checked 2026-10-16

Credits

Every call uses quota

Source: github.com, checked 2026-10-16

Plan

Enterprise Edition or above (Developer Edition also works) Source: github.com, checked 2026-10-16

What data can it reach?

Salesforce's docs list these tools for its MCP server:

• SOQL query (soqlQuery) and SOSL search (find)
• object schema (describeGlobal, getObjectSchema)
• related and recent records
• record create/update/delete (platform/sobject-all)
• custom tools from Apex, Flows and Named Queries
• prompt templates (sobject-all)

• It works as the signed-in person. It can only use objects that person can read, create, update or delete. Source: github.com, checked 2026-10-22
• Fields the person can't see are hidden from it. Fields they can't edit are read-only to it. Source: github.com, checked 2026-10-22
• It follows the same sharing rules as the person. Private records stay private. Source: github.com, checked 2026-10-22

What can it read, and what can it change?

Read + write Some Salesforce MCP tools change data, not just read it.

Things it can do in your Salesforce account:

• creates, updates and deletes Salesforce records (platform/sobject-all server)
• creates opportunities
• runs admin-defined custom actions (Apex invocable actions, Flows)

Review each change before you approve it, especially anything that sends messages or edits records other people rely on.

Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

• Salesforce says most organizations should start with its read-only server, platform/sobject-reads. That server has no tool that can create, update or delete a record. Source: github.com, checked 2026-10-22

Also check before you run anything that spends credits or quota (a usage limit). Credits or quota for this connector: Every call uses quota.

How does it sign in?

Sign-in method (from the StackMCP listing): OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials

• Every session belongs to one person who signed in with their own login. Source: github.com, checked 2026-10-22
• There are no service accounts. Source: github.com, checked 2026-10-22

Does an admin need to approve it?

What Salesforce's docs confirm about admin controls:

• An admin must approve or enable the connectionYesSource: github.com, checked 2026-10-16
• Scopes or permissions can limit what it reachesYesSource: github.com, checked 2026-10-16
• Individual tools can be turned offYesSource: github.com, checked 2026-10-16
• MCP activity shows in an audit logNot confirmed

• Every MCP server is off by default. An admin has to turn each one on in Setup, then API Catalog, then MCP Servers. Source: github.com, checked 2026-10-22
• Admins can link each External Client App to profiles and permission sets. That controls who can sign in through which assistant. Source: github.com, checked 2026-10-22
• When it updates a record, Salesforce shows the signed-in person as the editor. Source: github.com, checked 2026-10-22

How do we turn it off?

In Salesforce

The Salesforce docs we checked don't say how to revoke MCP access. Ask your Salesforce admin.

In the AI assistant

• In Claude, you can revoke access at any time. Disconnect the connector in Claude's settings, or in the tool's own security settings. Source: support.claude.com, checked 2026-10-22
• For other assistants, check that assistant's settings or ask your admin.

Does it use credits or quota?

Every call uses quota

No paid credits; every tool call counts against the org's daily Salesforce API request quota (one or more API calls per tool).

Send this to IT

Copy this, fill in the parts in [brackets] and send it.

Subject: Request: connect Salesforce to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Salesforce to [your AI assistant] using Salesforce's official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval to connect Salesforce with my own Salesforce login. It can only use the objects and records my Salesforce permissions allow.
- Any admin step Salesforce needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: OAuth 2.0 authorization code flow with PKCE via an admin-created External Client App (scopes mcp_api + refresh_token); no DCR, no client-credentials
- Setup: Needs admin or IT
- Credits: Every call uses quota

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/salesforce

Thanks,
[your name]

Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. We last checked the quotes on this page (vendor docs and the Claude help article) on Oct 22, 2026, and the StackMCP listing facts on Oct 16, 2026.

All the facts on one page, with sources: Salesforce MCP server. Setup steps: Connect Salesforce.

Other one-pagers: HubSpot · Gong · Apollo · Slack

Something out of date on this page? Report a correction, with a link to the vendor page that shows the right information.