MCP server intelligence profile

salesforce-mcp-jsforce MCP Server

Enables SOQL queries, SOSL search, and record CRUD operations on a single Salesforce org via MCP, with optional read-only mode

Local Onlyimazhar101
Awaiting current scanNpm · 0.5.2

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

1Distribution channel
9Independently observed tools
0Linked remote endpoints
AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install @imazhar101/salesforce-mcp-jsforce from npm

Install exact version 0.5.2. No verified executable entrypoint is available, so use the package documentation to launch it.

npm install --save-exact @imazhar101/salesforce-mcp-jsforce@0.5.2

Identity

Canonical slugsalesforce-mcp-jsforce-c78a9826DeploymentLocal Only
Canonical packagenpm:@imazhar101/salesforce-mcp-jsforceRepositoryimazhar101/salesforce-mcp-jsforce
First publishedAug 11, 2026Latest releaseAug 11, 2026
Last security verification—Classification confidence90%
PublicationDraftOfficial distributionNot verified

Distributions

ChannelIdentifierCurrent versionVersionsSource
npm@imazhar101/salesforce-mcp-jsforce0.5.22Repository

Current release

PackageVersionPublished / observedInventorySecurity scan
npm@imazhar101/salesforce-mcp-jsforce0.5.2CurrentSep 5, 20269 toolsSucceeded · 0 resources · 0 promptsEvidence restricted
Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

  • Independent exact-version security scans
  • Continuous release and vulnerability monitoring
  • Risk-change alerts with capability context
  • Historical evidence and API exports
Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol
salesforce-mcp-jsforceServer-reported name
1Capability groups
Aug 22, 2026Observed

Tools 9

ToolCategoryAnnotationsRisk
salesforce_create_recordCreate a new record on the given object.
Input schema
{
  "type": "object",
  "properties": {
    "object_name": {
      "type": "string",
      "description": "API name of the object, e.g. Contact"
    },
    "data": {
      "type": "object",
      "additionalProperties": {},
      "description": "Field API name → value map for the new record"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "object_name",
    "data"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_delete_recordDelete a record by Id.
Input schema
{
  "type": "object",
  "properties": {
    "object_name": {
      "type": "string",
      "description": "API name of the object"
    },
    "record_id": {
      "type": "string",
      "description": "The Id of the record to delete"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "object_name",
    "record_id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_describe_objectDescribe an sObject: its fields, types, picklist values, and references (trimmed payload).
Input schema
{
  "type": "object",
  "properties": {
    "object_name": {
      "type": "string",
      "description": "API name of the object, e.g. Account or Custom__c"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "object_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_get_recordRetrieve a single record by Id, optionally limited to specific fields.
Input schema
{
  "type": "object",
  "properties": {
    "object_name": {
      "type": "string",
      "description": "API name of the object, e.g. Account"
    },
    "record_id": {
      "type": "string",
      "description": "The 15- or 18-char record Id"
    },
    "fields": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Optional list of field API names; omit for all fields"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "object_name",
    "record_id"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_identityReturn the identity (user, org, instance) of the supplied token. Use this to confirm the connection is authenticated.
Input schema
{
  "type": "object",
  "properties": {
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_list_objectsList all sObjects available in the org with their key metadata.
Input schema
{
  "type": "object",
  "properties": {
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_queryRun a SOQL query and return matching records.
Input schema
{
  "type": "object",
  "properties": {
    "soql": {
      "type": "string",
      "description": "A SOQL query, e.g. SELECT Id, Name FROM Account LIMIT 10"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "soql"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_searchRun a SOSL full-text search across objects.
Input schema
{
  "type": "object",
  "properties": {
    "sosl": {
      "type": "string",
      "description": "A SOSL search, e.g. FIND {Acme} IN ALL FIELDS RETURNING Account(Id, Name)"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "sosl"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
salesforce_update_recordUpdate fields on an existing record.
Input schema
{
  "type": "object",
  "properties": {
    "object_name": {
      "type": "string",
      "description": "API name of the object"
    },
    "record_id": {
      "type": "string",
      "description": "The Id of the record to update"
    },
    "data": {
      "type": "object",
      "additionalProperties": {},
      "description": "Field API name → new value map"
    },
    "_sfAuth": {
      "type": "object",
      "properties": {
        "accessToken": {
          "type": "string"
        },
        "instanceUrl": {
          "type": "string"
        },
        "apiVersion": {
          "type": "string"
        }
      },
      "required": [
        "accessToken",
        "instanceUrl"
      ],
      "additionalProperties": false,
      "description": "Internal: per-request Salesforce credentials injected by an MCP gateway. Leave unset in direct use — the server falls back to env/token-file creds."
    }
  },
  "required": [
    "object_name",
    "record_id",
    "data"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——

Resources 0

  • None observed.

Resource templates 0

  • None observed.

Prompts 0

  • None observed.

Remote endpoints

EndpointTransportAuthenticationHealthObserved
No verified remote endpoint is linked.

salesforce-mcp-jsforce MCP Server questions

How do I install salesforce-mcp-jsforce MCP Server?

Install the selected package version with: npm install --save-exact @imazhar101/salesforce-mcp-jsforce@0.5.2

What tools does salesforce-mcp-jsforce MCP Server provide?

salesforce-mcp-jsforce MCP Server exposed 9 tools during independent protocol observation, including salesforce_create_record, salesforce_delete_record, salesforce_describe_object, salesforce_get_record, salesforce_identity, salesforce_list_objects, salesforce_query, salesforce_search, and others.

Is salesforce-mcp-jsforce MCP Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Company and product intelligence

These internal links are derived from strong identity fields such as the implementation name, package, repository, vendor, and listing name—not generic description prose.

Associated company landscape

Salesforce intelligence →

Association is based on retained identity fields; it does not by itself prove first-party publication.

Salesforce 107 matches

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers

Let’s talk about MCP security.

Share your details and our security team will contact you.