// SCAN REPORT

Salesforce Marketing

47 tools. 14 can modify or destroy data without limits.

14 write tools that can modify data. Rate limits recommended.

Last updated: 6 May 2026

14 can modify or destroy data

33 read-only

47 tools total

// TOOL MAP

Read (33) Write / Execute (14) Destructive / Financial (0)

// WHAT CAN GO WRONG

Write operations (sf_add_campaign_member, sf_bulk_add_campaign_members, sf_convert_lead) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

Execute tools (sf_campaign_performance_trend, sf_run_report, sf_run_soql) trigger processes with side effects. Builds, notifications, workflows — all fired without throttling.

// RECOMMENDED RULES

Rate limit write operations

sf_add_campaign_member:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

sf_activity_summary:
  rules:
    - rate_limit: 60/minute

Controls API costs and prevents retry loops from exhausting upstream rate limits.

// ALL 47 SALESFORCE MARKETING TOOLS

EXECUTE 3 tools

Execute sf_campaign_performance_trend Execute sf_run_report Execute sf_run_soql

WRITE 11 tools

Write sf_add_campaign_member Write sf_bulk_add_campaign_members Write sf_convert_lead Write sf_create_campaign Write sf_create_contact Write sf_create_lead Write sf_create_task Write sf_update_campaign Write sf_update_campaign_member_status Write sf_update_contact Write sf_update_lead

READ 33 tools

Read sf_activity_summary Read sf_campaign_influence Read sf_campaign_member_status_breakdown Read sf_campaign_roi Read sf_contact_by_email Read sf_describe_object Read sf_forecast_summary Read sf_get_account Read sf_get_campaign Read sf_get_campaign_members Read sf_get_contact Read sf_get_lead Read sf_get_report_metadata Read sf_lead_conversion_metrics Read sf_lead_source_breakdown Read sf_list_account_contacts Read sf_list_campaigns Read sf_list_objects Read sf_list_reports Read sf_list_tasks_by_campaign Read sf_list_tasks_by_contact Read sf_list_tasks_by_lead Read sf_mql_trend Read sf_pipeline_by_campaign Read sf_pipeline_by_lead_source Read sf_pipeline_summary Read sf_recent_activities_by_contact Read sf_recent_activities_by_lead Read sf_search_accounts Read sf_search_contacts Read sf_search_leads Read sf_top_campaigns Read sf_won_revenue_by_campaign

// FAQ

How do I prevent bulk modifications through Salesforce Marketing? +

The Salesforce Marketing server has 11 write tools including sf_add_campaign_member, sf_bulk_add_campaign_members, sf_convert_lead. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the Salesforce Marketing MCP server expose? +

47 tools across 3 categories: Execute, Read, Write. 33 are read-only. 14 can modify, create, or delete data.

How do I add Intercept to my Salesforce Marketing setup? +

One line change. Instead of running the Salesforce Marketing server directly, prefix it with Intercept: intercept -c salesforce-marketing.yaml -- npx -y @salesforce-marketing-mcp. Download a pre-built policy from policylayer.com/policies/salesforce-marketing and adjust the limits to match your use case.

// RELATED SERVERS

Other MCP servers with similar tools.

Starter policies available for each. Same risk classification, same one-command setup.

Salesforce Marketing

Other MCP servers with similar tools.

Let agents act without letting them run wild.