Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 5
- 4 10
- 3 4
- 2 0
- 1 0
Trust in production
- Trust it - 68%
- With caveats - 26%
- Wouldn't - 5%
84% would recommend this server
How reviewers scored it
- Setup & docs 4.1
- Auth experience 4.2
- Reliability 4.0
- Maintainer responsiveness 4.1
Why it got a B
Hosted by Salesforce over HTTPS and generally available since April 2026 for Enterprise Edition and up. Each call runs as the signed-in user through OAuth with PKCE, so field-level security, object permissions and sharing rules still apply. The sobject-all server can create, update and delete any object, so start with the read-only sobject-reads server. Biggest deduction: the server is closed source and its last change we could date is July 2026, so maintenance scores low. (The older local @salesforce/mcp package is retired on 2026-11-02.)
How to connect
Hosted: https://api.salesforce.com/platform/mcp/v1/platform/sobject-all (OAuth via an External Client App, mcp_api scope). Read-only: .../platform/sobject-readsIs Salesforce Hosted MCP Servers safe?
Is Salesforce Hosted MCP Servers safe to use?
Salesforce Hosted MCP Servers grades B (solid, with minor gaps). Updates are rare or unknown, so fixes may be slow to arrive.
Does Salesforce Hosted MCP Servers have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Salesforce Hosted MCP Servers support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in CRM & Sales
- A HubSpot MCP ServerOfficial hosted HubSpot server for contacts, companies, deals, tickets, and engagements, with OAuth sign-in.
- A Patto MCP ServerHosted server for PR, link-building and sales outreach that keeps contacts and campaigns, drafts and sends email from your brand's mailbox, and tracks replies and follow-ups.
- A ToolsPad MCP ServerHosted server that connects an assistant to one approved ToolsPad workspace for CRM contacts, opportunities, notes, tasks and forms, with separate read and write OAuth scopes.
- B Attio MCPOfficial hosted Attio server for records, lists, notes, tasks, and activities, with OAuth sign-in.
- B Clay MCP ServerOfficial hosted Clay server to find and enrich people and companies, check credits and run your workspace's Functions from Claude, ChatGPT and other AI tools.
Embed this badge
[](https://trustedmcp.io/servers/salesforce-hosted-mcp)<a href="https://trustedmcp.io/servers/salesforce-hosted-mcp"><img src="https://trustedmcp.io/badge/salesforce-hosted-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Set it up once, forgot about it
Installed it on a Friday, it was part of my workflow by Monday. The OAuth flow worked first time in Claude Code. Auth is handled properly, and revoking access later was one click.
Used for Drafting follow-ups from CRM history
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Decent, not set-and-forget
Took longer to configure than I expected. Scoped the token to just what the agent needs and it respected that. Releases come often and the changelog is clear. For anything real I would look elsewhere.
Used for Account research before renewals
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Does the job, docs could be better
Some tools are great, a couple feel half finished. Auth is handled properly, and revoking access later was one click.
Used for Enriching leads before outreach
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Good defaults, good docs
Been running this for about a month now. Nothing to install, I just point the client at the URL. Auth is handled properly, and revoking access later was one click. Being official from Salesforce counts for a lot when I pitch it to security. Worth it, just do not skip the hardening steps.
Used for Logging meeting outcomes automatically
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Hooked Salesforce Hosted MCP Servers into Claude Code and it worked on the first try. You can tell it is actively maintained, the rough edges keep getting fixed. Scoped the token to just what the agent needs and it respected that. Nice to use something maintained by Salesforce rather than a random fork. Easy recommendation.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Worth the five minutes to set up
Started with it as an experiment, now it is a fixture. Scoped the token to just what the agent needs and it respected that. I would prefer to read the code, but the hosted service has been dependable. Happy to run it in production.
Used for Updating deal notes after calls
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
Clear tool names, sensible outputs, very few surprises. Sign-in flow was painless and I never had to paste a key into a config file.
Used for Account research before renewals
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Does what it says, no drama
Installed it on a Friday, it was part of my workflow by Monday. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.
Used for Updating deal notes after calls
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Works, just lock it down
It does the job, but it took some tweaking. Updates land regularly, and nothing broke when I upgraded. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Nothing to install, I just point the client at the URL.
Used for Enriching leads before outreach
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Simple to set up in Cursor, simple to reason about. I like that access goes through a proper sign-in instead of a long-lived secret on disk. The OAuth flow worked first time in Claude Code. Good choice if you need Salesforce Hosted Servers in your agent.
Used for Finding stale deals
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Our team uses it every day
Hooked Salesforce Hosted MCP Servers into Claude Code and it worked on the first try. Sign-in flow was painless and I never had to paste a key into a config file. It is in our production agent and I sleep fine.
Used for Drafting follow-ups from CRM history
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Our agents call this dozens of times a day. Being closed source, I cannot audit it, but the vendor has been responsive. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Keep permissions tight and it is a good tool.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Recommended it to two teams already
Replaced a homegrown script with Salesforce Hosted MCP Servers and have not looked back. Releases come often and the changelog is clear. It is in our production agent and I sleep fine.
Used for Updating deal notes after calls
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Saves me a context switch every hour
Of the Salesforce Hosted Servers integrations I tried, this one is the most predictable. Nothing to install, I just point the client at the URL. Sign-in flow was painless and I never had to paste a key into a config file. Easy recommendation.
Used for Logging meeting outcomes automatically
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Better than the DIY script it replaced
Set this up for our team after comparing a few options. Being closed source, I cannot audit it, but the vendor has been responsive. Sign-in flow was painless and I never had to paste a key into a config file. Happy to run it in production.
Used for Account research before renewals
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Exactly what I needed from Salesforce Hosted Servers
Tried it on a side project first, then rolled it out at work. Nice to use something maintained by Salesforce rather than a random fork. Sign-in flow was painless and I never had to paste a key into a config file. Would recommend without hesitation.
Used for Finding stale deals
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
The Salesforce Hosted Servers integration I wanted
I use this almost daily. Hosted endpoint means no local process to babysit. I would prefer to read the code, but the hosted service has been dependable. Good choice if you need Salesforce Hosted Servers in your agent.
Used for Drafting follow-ups from CRM history
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Handy for dev, careful in prod
Good for experimenting, still deciding about production. The OAuth flow worked first time in Claude Code. Recommended, with sensible guardrails.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 2/5
- Maintainer responsiveness 3/5
No complaints after a month
Simple to set up in Cursor, simple to reason about. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for Enriching leads before outreach
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.