MCP Server for interacting with Salesforce instances
16 tools with mixed quality. Naming is verb-based and clear (get_, create_, delete_, assign_, deploy_, retrieve_). Descriptions present but brief (avg ~60 chars, well below 194-char baseline). Critical gap: input schemas not visible in provided source code, cannot verify parameter types, descriptions, or constraints. Tool definitions appear to exist but are not shown in the sample code provided. Error handling and output schemas not documented in visible code.
Assign a permission set to a user in a Salesforce org
Create a snapshot of a Salesforce org
Create a new Salesforce scratch org
Delete a Salesforce org
Deploy metadata to a Salesforce org
Enable one or more of the tools the Salesforce MCP server provides.
Get the username of the current Salesforce org
Input schemas not visible in source code. Cannot verify parameter types, descriptions, or constraints for most tools.
Descriptions are too brief (avg ~50 chars vs 194-char baseline). Examples: 'Get the username of the current Salesforce org' (52 chars), 'Resume a previous conversation or session' (42 chars). Lack context for LLM tool selection and when to use each tool.
No output schemas documented. LLMs cannot infer what fields to expect from tool responses, preventing downstream tool chaining and forcing extra discovery calls.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 44 | <=2025-11-25 | v2 |
List all authenticated Salesforce orgs
List all available tools this Salesforce MCP server can offer, providing the enabled status and description of each.
Open a Salesforce org in the browser
Query a Salesforce org using SOQL
Resume a previous conversation or session
Retrieve metadata from a Salesforce org
Suggest Salesforce CLI commands based on user intent
Test Salesforce agents
Run Apex tests in a Salesforce org
Destructive tools (sf-delete-org) lack confirmation or dry-run support. No evidence of permission gates or audit logging in visible code.
Parameter descriptions missing or minimal. 'org' parameter appears in 10+ tools but no description visible explaining format (username vs alias vs email), required permissions, or error cases.