// SCAN REPORT

Salesforce Metadata Mcp

213 tools. 182 can modify or destroy data without limits.

3 destructive tools with no built-in limits. Policy required.

Last updated:

182 can modify or destroy data
31 read-only
213 tools total

Community server · catalogue entry checked 09/07/2026

How to control Salesforce Metadata Mcp ↓

TOOL MAP

What Salesforce Metadata Mcp exposes to your agents

Read (31) Write / Execute (179) Destructive / Financial (3)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Salesforce Metadata Mcp tools

Destructive · High sf_bulk_delete_records This tool permanently removes records from Salesforce, an irreversible action. Destructive · High sf_delete_record This tool irreversibly deletes data from Salesforce. Destructive · High sf_delete_scratch_org The tool irreversibly deletes an entire scratch org and all associated data with no undo capability. Execute · High sf_deactivate_flow This tool triggers an external operation (via Tooling API) that changes the operational state of a Salesforce Flow, stopping it from being triggered.

182 of Salesforce Metadata Mcp's 213 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Salesforce Metadata Mcp

PolicyLayer is an MCP gateway — it sits between your AI agents and Salesforce Metadata Mcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "sf_bulk_delete_records": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "hello_world": {
    "limits": [
      {
        "counter": "hello_world_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "sf_check_code_coverage": {
    "limits": [
      {
        "counter": "sf_check_code_coverage_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Salesforce Metadata Mcp — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SALESFORCE METADATA →

Instant setup, no code required.

FULL CATALOGUE

All 213 Salesforce Metadata Mcp tools

DESTRUCTIVE 3 tools
Destructive sf_bulk_delete_records Deletes multiple records by ID asynchronously using Salesforce Bulk API 2.0. Returns a job ID to track status. Destructive sf_delete_record Deletes a single SObject record by record ID via the Salesforce REST API. The deletion is permanent and cannot Destructive sf_delete_scratch_org Deletes a Salesforce scratch org by alias. This permanently removes the org and all its data. Use when finishe
EXECUTE 15 tools
Execute sf_activate_omniscript Activates an OmniScript so it can be launched from FlexCards, Experience Cloud, or standalone pages. Identifie Execute sf_create_apex_class Creates and deploys an Apex class to the Salesforce org using the Metadata API. Accepts the full Apex source c Execute sf_create_apex_test_class Creates and deploys an Apex Test Class (annotated with @isTest). Provide the full test class source code. Opti Execute sf_create_apex_trigger Creates and deploys an Apex Trigger on any Salesforce object. Specify the trigger events (before insert, after Execute sf_create_flow Creates or updates a Salesforce Flow via the Metadata API. Supports AutoLaunchedFlow (required for Agentforce Execute sf_create_scheduled_job Schedules an Apex class that implements the Schedulable interface to run on a cron schedule. Use for batch pro Execute sf_create_scratch_org Creates a Salesforce scratch org using the SF CLI. Scratch orgs are temporary, configurable environments for d Execute sf_deactivate_flow Deactivates the currently active version of a Flow via the Tooling API, setting its status to Draft. This stop Execute sf_deploy_metadata Deploys a set of metadata components directly to the org using the Metadata API SOAP deploy operation. Builds Execute sf_devops_promote_work_item Promotes a DevOps Center work item to the next pipeline stage. Moving work items through the pipeline represen Execute sf_execute_anonymous_apex Executes anonymous Apex code in the Salesforce org using the Tooling API executeAnonymous endpoint. Returns co Execute sf_install_package Installs a package version into a target org using the SF CLI. Supports both managed and unlocked packages. Re Execute sf_promote_devops_work_item Promotes a DevOps Center work item to a specific pipeline stage by ID. Use to move work items forward in the p Execute sf_run_apex_tests Runs one or more Apex test classes and returns pass/fail results with any error messages. Uses the Salesforce Execute sf_send_email Sends an email from Salesforce using the emailSimple invocable action. The email is sent from the running user
WRITE 164 tools
Write hello_world A sample tool that returns a greeting Write sf_activate_flexcard Activates an OmniStudio FlexCard so it is visible on Lightning pages and Experience Cloud sites. Reads the ex Write sf_activate_flow Activates a specific Flow version (or the latest version) via the Tooling API. Only one version of a flow can Write sf_activate_integration_procedure Activates an Integration Procedure so it can be invoked from OmniScripts, FlexCards, and APIs. Identified by p Write sf_add_picklist_values Adds new picklist values to an existing Picklist or MultiselectPicklist field without removing existing values Write sf_add_to_change_set Adds one or more metadata components to an existing Outbound Change Set by change set name. Supports all metad Write sf_assign_layout_to_record_type Assigns an existing page layout to a specific record type on an object by updating the Profile metadata. Contr Write sf_assign_presence_status Grants access to a Presence Status for the specified Profiles and/or Permission Sets. Agents can only select p Write sf_assign_queue_member Adds a user to an existing Queue (GroupMember SObject) by username and queue DeveloperName. The queue must alr Write sf_assign_skill_to_agent Assigns a Skill to a Salesforce user (service agent) with a skill level rating. Creates a ServiceResource for Write sf_assign_territory_to_user Assigns a user to an Enterprise Territory Management territory via the UserTerritory2Association SObject. User Write sf_bulk_import_records Bulk imports records using the Salesforce Bulk API 2.0. Supports insert, upsert, update, and delete operations Write sf_bulk_insert_records Inserts multiple records of the same object type asynchronously using Salesforce Bulk API 2.0. More efficient Write sf_bulk_update_records Updates multiple records of the same object type asynchronously using Salesforce Bulk API 2.0. Each record mus Write sf_checkout_devops_work_item Checks out a DevOps Center work item, moving it to Write sf_commit_devops_work_item Commits changes for a DevOps Center work item by creating a commit record associated with the work item. Recor Write sf_configure_change_data_capture Enables Change Data Capture (CDC) for the specified Salesforce objects via the Metadata API. CDC publishes cha Write sf_create_agent Creates an Agentforce Agent (Einstein Copilot) shell in Salesforce. THIS IS STEP 1 OF A 5-STEP SEQUENCE — call Write sf_create_agent_action Creates an Agentforce Action (GenAiFunction) — step 2 of the agent setup sequence. Call this once per capabili Write sf_create_agent_planner Creates a GenAiPlanner that connects an Agentforce Agent (Bot) to its Topics — STEP 4 (FINAL) of the agent set Write sf_create_agent_topic Creates a Topic (GenAiPlugin) for an Agentforce Agent — step 3 of the agent setup sequence. Call this AFTER al Write sf_create_apex_email_service Creates an Apex Email Service that processes inbound emails via an Apex class implementing Messaging.InboundEm Write sf_create_approval_process Creates or updates a Salesforce Approval Process via the Metadata API. Define who can submit, approval steps w Write sf_create_assignment_rule Creates an Assignment Rule for Leads or Cases. Assignment rules automatically route new records to the appropr Write sf_create_aura_app Generates an Aura Application bundle scaffold. Returns the .app file content with the specified access level, Write sf_create_aura_component Generates an Aura (Lightning Component Framework) component scaffold. Returns the complete bundle file content Write sf_create_aura_event Generates an Aura Event scaffold (.evt file content). Supports COMPONENT events (propagate up the component hi Write sf_create_auth_provider Creates an Auth Provider in Salesforce for SSO or social login via the Metadata API. Supports OpenID Connect, Write sf_create_auto_response_rule Creates an Auto-Response Rule for Web-to-Lead or Web-to-Case. When a lead or case is created via a web form, t Write sf_create_bot_routing Configures an Einstein Bot to transfer conversations to a human agent queue when escalation conditions are met Write sf_create_business_hours Creates Business Hours in Salesforce via the Metadata API. Define working hours for each day of the week, spec Write sf_create_business_process Creates a Business Process for Opportunity (Stage values), Lead (Status values), Case (Status values), or Solu Write sf_create_calculation_matrix Creates a Calculation Matrix for rule-based lookups and calculations. Matrices map input combinations to outpu Write sf_create_calculation_procedure Creates a Calculation Procedure that orchestrates multi-step calculations using Calculation Matrices, formulas Write sf_create_chat_button Creates a Live Chat button (LiveChatButton) that can be embedded on websites to start chat sessions with agent Write sf_create_compact_layout Creates a Compact Layout for a Salesforce object. Compact Layouts define which fields appear in the highlights Write sf_create_connected_app Creates a Connected App in Salesforce to enable OAuth authentication for external applications. Connected Apps Write sf_create_connected_app_oauth_policy Updates the OAuth policies on an existing Connected App in Salesforce via the Metadata API. Configure the refr Write sf_create_csp_setting Creates a Content Security Policy trusted site, allowing LWC components and Visualforce pages to load resource Write sf_create_custom_application Creates a Lightning Application (App) in the Salesforce org via the Metadata API. Supports Standard and Consol Write sf_create_custom_button Creates a custom button or link on a Salesforce object via the Metadata API (WebLink). Supports list buttons, Write sf_create_custom_field Creates a new custom field on an existing Salesforce object. The field API name must end with Write sf_create_custom_label Creates or updates a Salesforce Custom Label. Custom Labels are text values accessible in Apex, Visualforce, L Write sf_create_custom_metadata_record Creates a record within an existing Custom Metadata Type (__mdt). Custom metadata records store configuration Write sf_create_custom_metadata_type Creates a new Custom Metadata Type (ending in __mdt) with optional custom fields. Custom Metadata Types store Write sf_create_custom_notification_type Creates a Custom Notification Type that can be sent from Flows, Apex, or Process Builder using the Send Custom Write sf_create_custom_object Creates a new Salesforce Custom Object using the Metadata API. The object name must end with Write sf_create_custom_permission Creates a Custom Permission that can be checked in formulas with $Permission.MyPerm or in Apex with FeatureMan Write sf_create_custom_setting Creates a Custom Setting object (ending in __c) with Hierarchy or List type. Custom Settings store data access Write sf_create_custom_tab Creates a Custom Web Tab (URL-based tab) that opens an external URL or web page within the Salesforce UI. Diff Write sf_create_dashboard Creates a Salesforce Dashboard with components (charts, metrics, tables, gauges) powered by reports. Dashboard Write sf_create_data_category Creates a Data Category Group with categories for classifying Salesforce Knowledge articles, solutions, or cas Write sf_create_dataraptor Creates a DataRaptor interface for OmniStudio data transformation. DataRaptors handle Extract (read from Sales Write sf_create_devops_pull_request Creates a pull request record for a DevOps Center work item. Pull requests represent code review requests befo Write sf_create_document_generation Creates an OmniStudio Document Generation configuration (OmniDocumentGenerationConfig metadata type) that link Write sf_create_duplicate_rule Creates a Duplicate Rule that uses Matching Rules to detect potential duplicates when records are saved. Can b Write sf_create_einstein_bot Creates a classic Einstein Bot (Bot + BotVersion metadata types) with one or more conversation dialogs. Classi Write sf_create_einstein_prediction Creates an Einstein Prediction Builder prediction definition (MLPredictionDefinition metadata type). Predictio Write sf_create_email_alert Creates a Workflow Email Alert action that can be triggered by Flows, Approval Processes, or Workflow Rules. S Write sf_create_email_template Creates an HTML or text email template that can be used in Workflow Email Alerts, Approval Processes, or sent Write sf_create_embedded_service Creates an Embedded Service deployment (EmbeddedServiceConfig) that bundles a chat button or messaging channel Write sf_create_entitlement_process Creates an Entitlement Process (SLA policy) that defines the time-based steps and milestones required to resol Write sf_create_escalation_rule Creates an Escalation Rule for Cases. Escalation rules automatically escalate cases that haven Write sf_create_experience_page Creates a page within an existing Experience Cloud site. Pages can be standard (home, login, profile, object d Write sf_create_experience_site Creates an Experience Cloud site (formerly Community) using a specified template. Supported templates: Custome Write sf_create_external_data_source Creates an External Data Source for Salesforce Connect, enabling read-write access to data stored outside Sale Write sf_create_external_id_field Creates a custom field with externalId=true on a Salesforce object. External ID fields can be used for upsert Write sf_create_external_object Creates an External Object (ending in __x) linked to an External Data Source. External Objects look like regul Write sf_create_field_dependency Creates a field dependency between a controlling picklist and a dependent picklist on the same object. When a Write sf_create_field_level_security Sets field-level security (FLS) for a field across one or more profiles, controlling whether each profile can Write sf_create_field_set Creates a field set on a Salesforce object via the Metadata API. Field sets are named groupings of fields used Write sf_create_field_update Creates a standalone Workflow Field Update action that sets a field to a formula, literal value, or null when Write sf_create_flexcard Creates an OmniStudio FlexCard (OmniUiCard metadata type). FlexCards display contextual data on Lightning page Write sf_create_flexipage Creates a Lightning App Builder page (FlexiPage) in the Salesforce org via the Metadata API. Supports AppPage, Write sf_create_flow_from_xml Deploys a Salesforce Flow directly from raw XML using the Metadata API zip deploy. Use this for complex flows Write sf_create_forecast_hierarchy Configures a Collaborative Forecasting hierarchy entry by assigning a user as a forecast manager for another u Write sf_create_formula_field Creates a formula field on any Salesforce object. Supports all return types (Text, Number, Currency, Date, Dat Write sf_create_global_action Creates a global quick action accessible from the global navigation bar in Salesforce. Supports Create, LogACa Write sf_create_global_value_set Creates a Global Value Set — a shared picklist definition that can be referenced by multiple Picklist fields a Write sf_create_holiday Creates a Holiday record in Salesforce via the Metadata API. Holidays are used with Business Hours to exclude Write sf_create_integration_procedure Creates an OmniStudio Integration Procedure — a server-side process that orchestrates data integration without Write sf_create_knowledge_article_type Creates a Knowledge Article Type (a custom object for Salesforce Knowledge) via the Metadata API. The article Write sf_create_letterhead Creates a Letterhead that provides a consistent visual wrapper for HTML email templates. Letterheads define he Write sf_create_lightning_app Creates a Lightning App in Salesforce — a branded navigation container with a custom navigation bar, utility b Write sf_create_list_view Creates a List View for any Salesforce object. List Views are saved filters that display a subset of records w Write sf_create_lwc Creates and deploys a new Lightning Web Component (LWC) to the Salesforce org. Provide the HTML template, Java Write sf_create_lwc_from_requirements Generates a complete LWC component scaffold (HTML template, JS controller, CSS, and meta XML) from a plain-Eng Write sf_create_lwc_jest_test Creates a Jest test file for an existing LWC component using @salesforce/lwc-jest conventions. The test file i Write sf_create_matching_rule Creates a Matching Rule used by Duplicate Rules to detect potential duplicate records. Define which fields to Write sf_create_mcp_server Generates a complete, working MCP server project structure on disk targeting a Salesforce org. Creates package Write sf_create_mcp_tool Adds a new tool definition to an existing MCP server project by reading the src/index.ts file and appending th Write sf_create_messaging_channel Creates a Messaging Channel for Salesforce digital engagement (SMS, WhatsApp, Facebook Messenger, Apple Messag Write sf_create_milestone Creates a Milestone Type that can be referenced in Entitlement Processes to define SLA checkpoints. Milestones Write sf_create_muting_permission_set Creates a Muting Permission Set that removes specific permissions from users in a Permission Set Group. Use to Write sf_create_named_credential Creates a Named Credential for making authenticated callouts to external systems from Apex or Flows. Named Cre Write sf_create_next_best_action Creates a Next Best Action (NBA) recommendation strategy (RecommendationStrategy metadata type). NBA strategie Write sf_create_notification_type Creates a Custom Notification Type for sending in-app and mobile push notifications. Custom notification types Write sf_create_omniscript Creates an OmniStudio OmniScript — a guided interaction flow for collecting data or performing processes. Omn Write sf_create_outbound_change_set Creates an Outbound Change Set in the org — a container for metadata components that can be deployed to connec Write sf_create_outbound_message Creates a Workflow Outbound Message that sends a SOAP XML payload to an external endpoint when triggered by a Write sf_create_package Creates a second-generation managed or unlocked package using the SF CLI. Packages bundle metadata for distrib Write sf_create_package_version Creates a new version of an existing second-generation package. Each version captures the current state of the Write sf_create_page_layout Creates a Page Layout for a Salesforce object. Page Layouts control what fields, related lists, and buttons ap Write sf_create_path_assistant Creates a Path Assistant (Sales Path or Kanban path) for a Salesforce object picklist field via the Metadata A Write sf_create_permission_set Creates a Permission Set with object permissions, field permissions, Apex class access, and user permissions. Write sf_create_permission_set_group Creates a Permission Set Group that aggregates multiple Permission Sets into a single assignable unit. Users a Write sf_create_platform_cache_partition Creates a Platform Cache partition in the Salesforce org via the Metadata API. Platform Cache improves app per Write sf_create_platform_event Creates a Platform Event object (ending in __e) for event-driven architecture. Platform Events enable real-tim Write sf_create_platform_event_trigger Creates an Apex trigger that fires when a Platform Event message is received (after insert). Use to process in Write sf_create_presence_configuration Creates a Presence Configuration (PresenceUserConfig) that controls which Service Channels agents can handle a Write sf_create_presence_status Creates a Presence Status that agents can set to indicate their availability. statusType: - Online: agent is Write sf_create_price_book Creates a Pricebook2 record and optionally adds products with pricing via PricebookEntry records. Price books Write sf_create_product Creates a Salesforce Product2 record. Products represent items or services that can be added to Opportunities Write sf_create_public_group Creates a Public Group (Group SObject with Type=Regular) for sharing rules, email distribution, or queue membe Write sf_create_push_topic Creates a Streaming API PushTopic for real-time record change notifications via the SObject API. Clients subsc Write sf_create_queue Creates a Queue in Salesforce. Queues are groups of users that can be assigned records (Cases, Leads, etc.). W Write sf_create_queue_routing_config Associates a Routing Configuration with an existing Queue, enabling OmniChannel routing for that queue. After Write sf_create_quick_action Creates an object-specific quick action on a Salesforce object via the Metadata API. Supports Create, Update, Write sf_create_record Creates a single SObject record via the Salesforce REST API. Provide the object API name and a fields object w Write sf_create_record_type Creates a Record Type on a Salesforce object. Record Types allow different page layouts, picklist values, and Write sf_create_remote_site_setting Creates a Remote Site Setting to allow an external URL for Apex callouts. Salesforce blocks outbound HTTP call Write sf_create_report Creates a Salesforce Report using the Report metadata type. Supports Tabular, Summary, Matrix, and Joined form Write sf_create_report_folder Creates a folder for organizing Reports or Dashboards. Folder access types: Hidden (only owner), Shared (expli Write sf_create_report_type Creates a Custom Report Type that defines what objects and fields are available when building reports. A repor Write sf_create_role Creates a Role in the Salesforce role hierarchy. Roles control record visibility through role-based sharing. U Write sf_create_role_hierarchy Creates multiple Salesforce roles in the role hierarchy in a single call. Roles control record visibility — us Write sf_create_routing_configuration Creates a Routing Configuration that defines how work items are assigned to agents. routingModel options: - L Write sf_create_saml_sso_config Creates a SAML Single Sign-On (SSO) configuration in Salesforce via the Metadata API. Provide the identity pro Write sf_create_sandbox Creates a new sandbox org via the Tooling API (SandboxInfo object). Supports Developer, Developer Pro, Partial Write sf_create_scheduled_flow Creates a Schedule-Triggered Flow that runs automatically on a recurring schedule (e.g., daily, weekly) agains Write sf_create_search_layout Creates or updates a SearchLayout for a Salesforce object, defining which fields appear in search results, loo Write sf_create_service_channel Creates an OmniChannel Service Channel that connects work items from a Salesforce object to the OmniChannel ro Write sf_create_service_territory Creates a Service Territory for Field Service Lightning. Territories define the geographic areas or organizati Write sf_create_sharing_rule Creates a Sharing Rule for a Salesforce object. Sharing Rules extend the OWD by automatically sharing records Write sf_create_skill Creates a Skill that can be assigned to service agents. Skills are used for: - OmniChannel skill-based routing Write sf_create_static_resource Creates a Static Resource from text/JSON/JS/CSS content. Static Resources are files stored in Salesforce and s Write sf_create_tab Creates a Custom Tab for a custom object so it appears in the navigation bar and App Launcher. Tabs are requir Write sf_create_territory Creates a Territory in Enterprise Territory Management (ETM). Territories define logical sales regions or acco Write sf_create_user Creates a new Salesforce user via the REST API. Requires username (must be unique and email-like), lastName, e Write sf_create_user_role_hierarchy Creates a new UserRole in the Salesforce Role Hierarchy. Roles control record visibility — users in higher rol Write sf_create_validation_rule Creates or updates a Salesforce Validation Rule on any object via the Metadata API. The errorConditionFormula Write sf_create_visualforce_component Creates a reusable Visualforce component (ApexComponent) in the Salesforce org via the Metadata API. Provide t Write sf_create_visualforce_email_template Creates a Visualforce email template in the Salesforce org. Provide the template name, subject, recipient type Write sf_create_visualforce_page Creates a Visualforce page in the Salesforce org via the Metadata API. Provide the page API name, label, and V Write sf_create_work_type Creates a Work Type that defines a category of field service job. Work Types set default durations, block time Write sf_create_workflow_field_update Creates a Workflow Field Update action that can be referenced by Approval Processes, Workflow Rules, or Flows. Write sf_create_workflow_rule Creates a Workflow Rule (legacy automation) that evaluates criteria and triggers actions. Use for simple autom Write sf_devops_create_work_item Creates a work item in Salesforce DevOps Center. Work items represent units of work (features, bug fixes, etc. Write sf_freeze_user Freezes or unfreezes a Salesforce user account. A frozen user cannot log in but the license is retained (unlik Write sf_import_omnistudio_component Imports an OmniStudio component into the org from previously exported JSON (from sf_export_omnistudio_componen Write sf_refresh_sandbox Refreshes an existing sandbox org by re-copying it from production via the Tooling API. The sandbox must alrea Write sf_reset_user_password Resets a Salesforce user Write sf_resolve_devops_merge_conflict Marks a merge conflict in DevOps Center as resolved with a specified resolution strategy. Use after manually r Write sf_share_report_folder Shares a Report or Dashboard folder with users, roles, groups, or territories. Sets access levels (View, Edit, Write sf_translate_custom_label Adds or updates a translation for a Salesforce Custom Label via the Metadata API (Translations type). Provide Write sf_translate_field_label Adds or updates a translation for a field label (and optionally help text) on a Salesforce object via the Meta Write sf_update_dashboard Updates an existing Dashboard Write sf_update_flexcard Updates an existing OmniStudio FlexCard (OmniUiCard). Reads the current definition, merges the provided change Write sf_update_integration_procedure Updates an existing Integration Procedure Write sf_update_lwc Updates an existing Lightning Web Component by redeploying it with updated HTML, JavaScript, or CSS. Provide o Write sf_update_omniscript Updates an existing OmniScript Write sf_update_record Updates an existing SObject record by record ID via the Salesforce REST API. Provide the object API name, the Write sf_update_user Updates an existing Salesforce user Write sf_upsert_record Creates or updates a Salesforce record using an External ID field for matching. If a record with the given ext
READ 31 tools
Read sf_check_code_coverage Retrieves Apex code coverage statistics from the org using the Tooling API. Shows which classes meet or fail t Read sf_check_deploy_status Checks the status of an in-progress or recently completed metadata deployment by async job ID. Returns the sta Read sf_check_devops_commit_status Retrieves the commit and deployment status for a DevOps Center work item. Shows recent commits and their deplo Read sf_detect_devops_merge_conflict Checks a DevOps Center work item for merge conflicts. Returns the work item details and any associated merge c Read sf_explore_slds_blueprints Returns Salesforce Lightning Design System (SLDS) component examples, best practices, and usage guidance for a Read sf_export_omnistudio_component Exports an OmniStudio component Read sf_export_records Exports Salesforce records as CSV data using a SOQL query. Useful for data extraction, backup, or analysis. s Read sf_get_apex_test_results Retrieves Apex test results from the most recent test runs via the Tooling API. Returns pass/fail status, erro Read sf_get_dataraptor Retrieves the configuration of a DataRaptor interface including its type, field mappings, and filter criteria. Read sf_get_deployment_history Retrieves the history of recent metadata deployments using the Tooling API DeployRequest object. Shows deploym Read sf_get_event_logs Queries EventLogFile for detailed activity logs. Event logs capture granular org activity for security monitor Read sf_get_field_history Queries the {Object}History object to retrieve a field-level change history for a specific record. Shows what Read sf_get_flexcard Retrieves the configuration of an OmniStudio FlexCard including its data source, fields, actions, states, and Read sf_get_flow_errors Retrieves Flow interview fault records from the FlowRecordRelation and FlowInterview objects. Shows flows that Read sf_get_integration_procedure Retrieves the configuration of an Integration Procedure including its elements and activation status. Identifi Read sf_get_login_history Queries LoginHistory to see user login activity — who logged in, from where, and whether they succeeded. Retu Read sf_get_omniscript Retrieves the configuration of an OmniScript including its elements, activation status, and LWC settings. Iden Read sf_get_org_limits Retrieves current API and governor limit usage for the org via the Salesforce Limits REST API. Returns all lim Read sf_get_record Retrieves a single Salesforce record by its 15 or 18 character record ID. Returns all or specified fields. ob Read sf_get_setup_audit_trail Queries the SetupAuditTrail object to see who made what configuration changes to the org, and when. Covers the Read sf_guide_lwc_accessibility Returns guidance and a checklist for LWC accessibility best practices covering ARIA attributes, keyboard navig Read sf_list_devops_projects Lists all DevOps Center projects in the org. Returns project names, IDs, and associated pipeline information. Read sf_list_devops_work_items Lists DevOps Center work items, optionally filtered by project or pipeline stage. Use to get an overview of wo Read sf_list_flow_versions Lists all versions of a specific Flow, or all Flows in the org, via the Tooling API. Returns version number, s Read sf_list_mcp_tools Lists all tools currently registered in a given MCP server project by reading and parsing its src/index.ts fil Read sf_list_sandboxes Lists all sandbox orgs associated with the production org, including their status, license type, and dates. Re Read sf_migrate_aura_to_lwc Analyzes an Aura component and returns a comprehensive migration guide with Aura-to-LWC concept mappings, key Read sf_query_records Executes a SOQL query against the org and returns matching records. Provide either a full SOQL string (soql pa Read sf_retrieve_metadata Retrieves metadata components from the org by initiating a SOAP retrieve operation. Returns an async job ID. T Read sf_scan_apex_antipatterns Scans Apex classes in the org for common anti-patterns using the Tooling API. Detects SOQL/DML in loops, hardc Read sf_search_records Searches across multiple Salesforce objects using SOSL (Salesforce Object Search Language). SOSL uses the sear
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

UnClick 1658 tools
adminautomation
Nodebench 824 tools
adminautomation
Yaver 812 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Crow 587 tools
adminautomation
Fortimanager 584 tools
adminautomation
TinyFn 572 tools
adminautomation
Mcp 571 tools
adminautomation
FAQ

Questions about Salesforce Metadata Mcp

Can an AI agent delete data through the Salesforce Metadata MCP server? +

Yes. The Salesforce Metadata Mcp server exposes 3 destructive tools including sf_bulk_delete_records, sf_delete_record, sf_delete_scratch_org. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Salesforce Metadata Mcp? +

The Salesforce Metadata Mcp server has 164 write tools including hello_world, sf_activate_flexcard, sf_activate_flow. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Salesforce Metadata Mcp.

How many tools does the Salesforce Metadata MCP server expose? +

213 tools across 4 categories: Destructive, Execute, Read, Write. 31 are read-only. 182 can modify, create, or delete data.

How do I enforce a policy on Salesforce Metadata Mcp? +

Register the Salesforce Metadata MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Salesforce Metadata Mcp tool call.

Deterministic rules across all 213 Salesforce Metadata Mcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SALESFORCE METADATA →

Instant setup, no code required.

213 Salesforce Metadata Mcp tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Salesforce Metadata's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.