Atlas / MCP servers / salesforcecli / Salesforce

SalesforceBLOCK

Name: Salesforce
Author: salesforcecli

mcp/salesforcecli/salesforce-12

MCP server by salesforcecli · Audited 2026-09-30

⚑ Report / re-scan Source ↗

MCP Server for interacting with Salesforce instances

Verdict

BLOCK

Grade

Trust score

60 /100

Exposed tools

15 15r · 0w · 0d

Transport

stdio

License

Apache-2.0

Stars

483

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

MCP Server for Interacting with Salesforce Orgs

[](https://www.npmjs.com/package/@salesforce/mcp) [](https://opensource.org/license/apache-2-0)

Feedback

Report bugs and issues here. For feature requests and other related topics, start a Discussion here.

Documentation

For general documentation about the Salesforce DX MCP Server, see this section in the Salesforce DX Developer Guide. The docs include:

Comprehensive overview, including details about the security features.
Quick start guide.
Multiple examples of configuring the server in your MCP client.
Sample prompts for invoking the core DX MCP tools.

Here are the release notes.

Overview of the Salesforce DX MCP Server

The Salesforce DX MCP Server is a specialized Model Context Protocol (MCP) implementation designed to facilitate seamless interaction between large language models (LLMs) and Salesforce orgs. This MCP server provides a robust set of tools and capabilities that enable LLMs to read, manage, and operate Salesforce resources securely.

Configure the DX MCP Server

Configure the Salesforce DX MCP Server for your MCP client by updating its associated MCP JSON file; each client is slightly different, so check your MCP client documentation for details. See MCP Client Configurations for more examples.

Here's an example for VS Code with Copilot in which you create and update a .vscode/mcp.json file in your project:

{
"servers": {
"Salesforce DX": {
"command": "npx",
"args": ["-y", "@salesforce/mcp",
"--orgs", "D

Read from source at commit f6f55474dbcdOBSERVED · 2026-09-30

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add mcp -- npx -y @salesforce/[email protected]

claude-desktop

{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@salesforce/[email protected]"
      ]
    }
  }
}

Exposed tools (15)

15 read · 0 write · 0 destructive.

Tool	Risk	Description
`ApexPage`	read	Root element of a Visualforce page
`BooleanLiteral`	read	Boolean literal
`ClassDeclaration`	read	Represents a class declaration
`Element`	read	HTML element
`FunctionDeclaration`	read	JavaScript function
`HtmlDocument`	read	HTML document root
`IfStatement`	read	Represents an if statement
`IntegerLiteral`	read	Integer literal
`MethodCallExpression`	read	Represents a method call
`MethodDeclaration`	read	Represents a method declaration
`OutputText`	read	Display text content
`StringLiteral`	read	String literal
`test-tool`	read	Test tool description
`test-tool-2`	read	Test tool description
`test-tool-3`	read	Test tool description

Trust audit

BLOCKgrade D · trust 60/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: none-observed
Shell: declared (9 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (23)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/mcp-provider-code-analyzer/src/actions/create-regex-custom-rule.ts:29

exec(input: CreateRegexCustomRuleInput): Promise<CreateRegexCustomRuleOutput>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/mcp-provider-code-analyzer/src/actions/create-xpath-custom-rule.ts:26

exec(input: CreateXpathCustomRuleInput): Promise<CreateXpathCustomRuleOutput>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/mcp-provider-code-analyzer/src/actions/describe-rule.ts:38

exec(input: DescribeRuleInput): Promise<DescribeRuleOutput>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/mcp-provider-code-analyzer/src/actions/get-ast-nodes.ts:18

exec(input: GetAstNodesInput): Promise<GetAstNodesOutput>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/mcp-provider-code-analyzer/src/actions/list-rules.ts:49

exec(input: ListRulesInput): Promise<ListRulesOutput>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWInventory / provenance · inv.hidden_file · CWE-1104

.commitlintrc.json

.commitlintrc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

packages/mcp-provider-api/.prettierrc.json

.prettierrc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

packages/mcp-provider-dx-core/.eslintrc.cjs

.eslintrc.cjs

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

packages/mcp-provider-dx-core/.mocharc.json

.mocharc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

packages/mcp-provider-dx-core/.nycrc

.nycrc

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.symlink · CWE-1104

packages/mcp/README.md

packages/mcp/README.md

Why it matters. link not followed

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.github/workflows/publish-mcp-server.yml:93

cd ../../

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.github/workflows/publish-mcp-server.yml:206

# Use -L flag to dereference symlinks (e.g., README.md -> ../../README.md)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.github/workflows/publish-providers.yml:188

cd ../../

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/EXAMPLE-MCP-PROVIDER/test/tools/sf-example-tool.test.ts:2

import { ExampleMcpTool } from "../../src/tools/example_tool.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/mcp-provider-code-analyzer/src/ast/metadata/pmd-ast-reference.ts:40

const fileUrl = new URL(`../../data/pmd/${normalizedLanguage}-ast-reference.json`, import.meta.url);

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

packages/mcp/DEVELOPING.md:82

3. If successful, open the specified localhost URL in your browser. In this example it's `http://127.0.0.1:6274`:

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

packages/mcp/DEVELOPING.md:85

MCP Inspector is up and running at http://127.0.0.1:6274

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@commitlint/cli, @commitlint/config-conventional, @modelcontextprotocol/inspector, rimraf

Why it matters. 4 dependency range(s) float