// MCP TOOL REFERENCE

SALESFORCE MCP SERVER TOOLS

17 tools from the Salesforce MCP Server MCP Server, categorised by risk level.

View the Salesforce MCP Server policy →
// ALL 17 SALESFORCE MCP SERVER TOOLS
READ 7 tools
Read check-deploy-status Check the status of a deployment Read describe-sobject Describe SObject metadata with 1-hour caching Read get-apex-logs Get debug logs with filtering and parsing options Read get-record Retrieve a record by ID with optional field selection Read list-metadata-types List available metadata types in the org for discovery Read retrieve-metadata Retrieve metadata components from Salesforce org Read test-connection Test Salesforce connection and return organization info
WRITE 3 tools
Write create-record Create single or multiple records with auto-bulk switching Write update-record Update single or multiple records with auto-bulk switching Write upsert-record Upsert records using external ID with auto-bulk switching
DESTRUCTIVE 1 tools
Destructive delete-record Delete records by ID(s) with auto-bulk switching
EXECUTE 6 tools
Execute deploy-bundle Deploy a metadata bundle (e.g., LWC) from a directory path Execute deploy-metadata Deploy metadata components to Salesforce org Execute execute-apex Execute anonymous Apex code with debug log capture Execute execute-soql Execute SOQL query with auto-bulk switching for large result sets Execute execute-sosl Execute SOSL search with multi-object support Execute run-apex-tests Run Apex tests with coverage and detailed results

Route Salesforce MCP Server through PolicyLayer and every one of its 17 tools is checked against your policy before it runs.

CHECK YOUR STACK →

See every tool, the dangerous ones, and the token cost across your stack.

// FAQ
How many tools does the Salesforce MCP Server MCP server have? +

The Salesforce MCP Server MCP server exposes 17 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Salesforce MCP Server tools? +

Route the Salesforce MCP Server server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Salesforce MCP Server tools fall into? +

Salesforce MCP Server tools are categorised as Read (7), Write (3), Destructive (1), Execute (6). Each category has a recommended default policy.

Enforce policy on every Salesforce MCP Server tool call.

Start from Salesforce MCP Server, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Free to start. No card required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.