// SCAN REPORT

Salesforce MCP Integration

5 tools. 3 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated: 5 Jul 2026

3 can modify or destroy data

2 read-only

5 tools total

Community server · catalogue entry verified 05/07/2026

How to control Salesforce MCP Integration ↓

TOOL MAP

What Salesforce MCP Integration exposes to your agents

Read (2) Write / Execute (3) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Salesforce MCP Integration tools

Execute · High createUnlockedPackageWithFlow This tool executes SFDX CLI commands to retrieve metadata and create an unlocked package in Salesforce. Execute · High soqlQuery SOQL (Salesforce Object Query Language) is primarily a read/query language, but executing arbitrary queries against a live CRM system carries significant risk: queries can expose sensitive customer data, PII, financial r Write · High createPackageWithFlowDependencies Creating a package in Salesforce is a write operation that modifies the system state by adding a new deployable artifact.

3 of Salesforce MCP Integration's 5 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Salesforce MCP Integration

PolicyLayer is an MCP gateway — it sits between your AI agents and Salesforce MCP Integration, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "createPackageWithFlowDependencies": {
    "limits": [
      {
        "counter": "createpackagewithflowdependencies_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "retrieveMetadata": {
    "limits": [
      {
        "counter": "retrievemetadata_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Salesforce MCP Integration — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SALESFORCE MCP INTEGRATION →

Instant setup, no code required.

FULL CATALOGUE

All 5 Salesforce MCP Integration tools

EXECUTE 2 tools

Execute createUnlockedPackageWithFlow Use SFDX to retrieve the flow and its dependencies, create a package.xml manifest, and create an unlocked pack Execute soqlQuery Execute a SOQL query on Salesforce

WRITE 1 tools

Write createPackageWithFlowDependencies Create a package in Salesforce with the specified flow and its dependencies.

READ 2 tools

Read retrieveMetadata Retrieve Salesforce metadata for a given type (e.g., Flow, FlowDefinition, CustomObject, ApexClass) Read retrieveMetadataFile Retrieve the full metadata file (e.g., XML) for a given metadataType and fullName.

FAQ

Questions about Salesforce MCP Integration

How do I prevent bulk modifications through Salesforce MCP Integration? +

The Salesforce MCP Integration server has 1 write tools including createPackageWithFlowDependencies. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Salesforce MCP Integration.

How many tools does the Salesforce MCP Integration MCP server expose? +

5 tools across 2 categories: Read, Write. 2 are read-only. 3 can modify, create, or delete data.

How do I enforce a policy on Salesforce MCP Integration? +

Register the Salesforce MCP Integration MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Salesforce MCP Integration tool call.

Deterministic rules across all 5 Salesforce MCP Integration tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SALESFORCE MCP INTEGRATION →

Instant setup, no code required.

5 Salesforce MCP Integration tools catalogued and risk-classified — across an index of 43,000+ MCP servers.