Salesforce runs on your own machine — the client starts it, so there is no endpoint to ping. 79 installs a week from npm. Last commit 2 Nov 2026.
Salesforce CRM MCP server: accounts, contacts, opportunities, leads, tasks, and custom objects
What the code does
We read the source, 22 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
fs.writeFileSync(outFd, pdfBuffer);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server-salesforce -e 'SALESFORCE_CLIENT_ID=<SALESFORCE_CLIENT_ID>' -e 'SALESFORCE_CLIENT_SECRET=<SALESFORCE_CLIENT_SECRET>' -- npx -y @mindstone/mcp-server-salesforce{
"mcpServers": {
"mcp-server-salesforce": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-salesforce"
],
"env": {
"SALESFORCE_CLIENT_ID": "<SALESFORCE_CLIENT_ID>",
"SALESFORCE_CLIENT_SECRET": "<SALESFORCE_CLIENT_SECRET>"
}
}
}
}[mcp_servers.mcp-server-salesforce]
command = "npx"
args = ["-y", "@mindstone/mcp-server-salesforce"]
env = { SALESFORCE_CLIENT_ID = "<SALESFORCE_CLIENT_ID>", SALESFORCE_CLIENT_SECRET = "<SALESFORCE_CLIENT_SECRET>" }{
"mcpServers": {
"mcp-server-salesforce": {
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-salesforce"
],
"env": {
"SALESFORCE_CLIENT_ID": "<SALESFORCE_CLIENT_ID>",
"SALESFORCE_CLIENT_SECRET": "<SALESFORCE_CLIENT_SECRET>"
}
}
}
}{
"servers": {
"mcp-server-salesforce": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mindstone/mcp-server-salesforce"
],
"env": {
"SALESFORCE_CLIENT_ID": "<SALESFORCE_CLIENT_ID>",
"SALESFORCE_CLIENT_SECRET": "<SALESFORCE_CLIENT_SECRET>"
}
}
}
}Put your own values in place of
<SALESFORCE_CLIENT_ID> (Salesforce Connected App client ID (recommended path)), <SALESFORCE_CLIENT_SECRET> (Salesforce Connected App client secret (recommended path)).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
SALESFORCE_SANDBOX (Set to true for sandbox environments), SALESFORCE_ACCESS_TOKEN (Static access token (alternative to OAuth)), SALESFORCE_INSTANCE_URL (Salesforce instance URL (required for manual token mode)), SALESFORCE_CONFIG_DIR (Custom config directory), SALESFORCE_OAUTH_PORT (OAuth callback port (0 = OS-assigned)), SALESFORCE_OAUTH_SCOPES (Space-separated OAuth scopes).
Alternatives to Salesforce
same job, measured the same wayMCP server for Salesforce CRM — Accounts, Contacts, Opportunities, Leads, Cases.
MCP server for Salesforce CRM — Accounts, Contacts, Opportunities, Leads, Cases.
MCP server for Getfly CRM — customers, opportunities, orders, tickets and tasks.
Read and write Insightly contacts, organisations, leads, opportunities, tasks and notes.
Search and read Sellsy companies, contacts, opportunities, invoices and tasks; create records.
MCP server for Decern CRM — contacts, deals, pipelines, tasks, and approvals.
Remote MCP for amoCRM and Kommo: leads, contacts, tasks, pipelines, chats, Salesbot. OAuth.
Outreach sales engagement MCP server: prospects, sequences, accounts, tasks, and mailings
Salesforce — questions
Answers built from our own checks of this server.