Salesforce MCP: four ways to connect your agent to Salesforce
Salesforce hosts its own MCP servers, generally available since April 29, 2026, for every Enterprise Edition org and above. An admin switches a server on, and Claude, ChatGPT or another client connects with the user's own permissions. On November 10, 2026, we counted 43 Salesforce servers in the official MCP Registry, and Salesforce published none of them. Below are the four ways to connect, what each one needs and where each one stops.
Four ways at a glance
| Way | Who makes it | What you set up | Who it is for |
|---|---|---|---|
| Salesforce Hosted MCP Servers | Salesforce | An admin enables a server and creates an External Client App | Enterprise Edition orgs and above1 |
| The Salesforce CLI's MCP server | Salesforce | Install and run it yourself | Developers working on an org3 |
| A community server | A developer on GitHub | Run it yourself with your org's credentials | Developers who want to read or change the code5,6 |
| Conecto (ours) | Conecto | A connected app with a run-as user | A business whose agent should work in Salesforce and in other tools8 |
Give this to your agent
Set up Conecto from https://conecto.chat/SKILL.md , then keep our customer records up to date.
What Salesforce itself ships
Salesforce calls them hosted MCP servers. Its announcement describes one as "a Salesforce-managed endpoint that exposes your org's logic and assets" to any AI client that speaks MCP: data, flows, Apex actions and queries. Salesforce does the hosting, the sign-in and the permission checks.1
They went through three stages: a pilot in spring 2025, a beta in October 2025, and general availability on April 29, 2026, "for every Enterprise Edition org and above."1
What the announcement says you get:
- Servers ready to use: standard servers for the Agentforce 360 Platform, Tableau Next and Data 360 SQL.
- Servers you define: custom ones that expose your own flows, Apex actions and Named Query APIs.
- Your existing permissions: object and field access and sharing rules apply as they do in Salesforce, and "every transaction runs as the authenticated user."
- Prompt templates: starting points for common tasks such as an account review.1
Nothing is on by default. Salesforce describes a "secure-by-default posture requiring MCP servers to be specifically enabled," and a new OAuth scope that reaches MCP but not the REST APIs.1
How to connect Claude or ChatGPT to Salesforce
Salesforce's own shortest path has three steps, and it says the setup takes less than 30 minutes:
- Enable a server in Setup, under API Catalog, then MCP Servers.
- Create an External Client App with the
mcp_apiandrefresh_tokenscopes. - Connect your client: Postman to test, "then Claude, ChatGPT, or similar for everyday use."1
If you are not sure where to begin, Salesforce suggests trying the platform/sobject-reads server in a sandbox, because it only reads.1
In Claude and ChatGPT that last step means adding the server as a custom connector. Claude connectors and ChatGPT connectors show where. We looked for a ready-made Salesforce connector in Claude's directory on November 12, 2026 and did not find one at the address its connectors use. We could not search all 1,115 connectors there, so read that as not found, not as proof there is none.
How many Salesforce MCP servers there are
We went through every server in the official MCP Registry on November 10, 2026. Of its 60,115 active servers, 43 name Salesforce, Agentforce, SFDC or SOQL in their name, title or description. Twenty carry it in the name.2
| Count | |
|---|---|
| Salesforce servers in the registry | 43 |
| Remote, at a web address | 26 |
| Packages to install and run | 26 |
| Both | 9 |
| Published by Salesforce | 0 |
No server in the registry is published under Salesforce's own name, and none has an address at salesforce.com.2 Salesforce's hosted servers live inside each customer's org, so a public list has nothing to point at. All 43 come from other companies and developers.
For scale, 330 servers in the registry mention a CRM, and 20 name HubSpot. HubSpot MCP covers that side, and the full count of the registry is on our statistics page.
Open-source servers, from Salesforce and others
These are the most starred Salesforce projects we found on GitHub, read on November 12, 2026.
| Project | By | Stars | License | Last change |
|---|---|---|---|---|
| mcp | salesforcecli, Salesforce's CLI team | 488 | Apache 2.0 | October 5, 20263 |
| MCP-Salesforce | smn2gnt | 179 | MIT | July 29, 20265 |
| mcp-server-salesforce | tsmztech | 164 | MIT | November 6, 20266 |
| mcp-hosted | forcedotcom, Salesforce | 136 | Apache 2.0 | July 23, 20264 |
Two of the four are Salesforce's own. The CLI team's server is "for interacting with Salesforce instances," and you run it yourself.3 The mcp-hosted repository belongs to the hosted servers above.4
Stars show interest. They are not a review of the code. What to check before you connect a server applies to every one you run with your org's credentials.
Where Conecto fits
Conecto is our product. It connects Salesforce through an app your company makes: a connected app with the OAuth client credentials flow switched on, and a run-as user whose profile limits what the agent may touch. You give Conecto the org's My Domain and the app's consumer key, and the owner types the secret on a Conecto page, so it never passes through the chat.8
It has six tools, and four of them do the work:
| Tool | What it does | Price |
|---|---|---|
| salesforce_query | Runs one SOQL SELECT statement and returns up to 200 records | Free |
| salesforce_get | One record by object and id | Free |
| salesforce_create | Makes a record of any object the run-as user may create | $0.001 |
| salesforce_update | Changes a record's fields | $0.0017 |
Three limits to know:
- The agent works as one run-as user, not as each person. Salesforce's hosted servers run every call as the person who signed in.8,1
- It reads and writes records. It does not expose your flows or Apex actions, which the hosted servers can.7,1
- Changing an existing record waits for the owner's approval by default.8
What it adds is everything next to Salesforce. The same connection gives your agent Conecto's own tools, such as email inboxes, invoices and a help desk, so one agent can read an opportunity and send the invoice.
Which one fits
- Your org is on Enterprise Edition or above and you have an admin: Salesforce's hosted servers. They are Salesforce's own route, and they keep each user's permissions.1
- You are a developer working on an org: the Salesforce CLI's server.3
- You want to change how the server works: a community server, checked first.5,6
- Your agent should work across Salesforce and your other business tools: a connection such as Conecto's.8
How we counted
For the registry count, we read every entry of the official MCP Registry through its public API on November 10, 2026, counted each server name once at its latest active version, and searched each name, title and description for Salesforce, Agentforce, SFDC and SOQL.2 A server that mentions Salesforce only in passing still counts, so 43 is the widest fair number. The narrow one is 20.
Salesforce's part comes from its announcement of April 29, 2026, read on November 12, 2026. The GitHub table was read the same day.
We did not connect any of these to a real org, and we did not test what each tool does. This guide compares what each maker publishes.
Questions
Does Salesforce have an official MCP server?
Yes. Salesforce Hosted MCP Servers have been generally available since April 29, 2026, for every Enterprise Edition org and above.1
Is the Salesforce MCP server free?
The announcement names no price. It says which orgs get it, Enterprise Edition and above, and that an admin has to enable each server.1 Ask your Salesforce account team what applies to your contract.
Can Claude or ChatGPT connect to Salesforce?
Yes. Salesforce's own setup ends with connecting "Claude, ChatGPT, or similar" to a hosted server through an External Client App.1
What can an agent do in Salesforce through MCP?
With the hosted servers, whatever the server exposes and the signed-in user is allowed to do: read and change data, run flows and Apex actions, and use named queries.1 With Conecto, query, read, create and update records.7
How many Salesforce MCP servers are there?
We counted 43 in the official MCP Registry on November 10, 2026, out of 60,115 active servers. Salesforce published none of them.2
What is the safest way to start?
Salesforce suggests the read-only platform/sobject-reads server in a sandbox.1
Sources
We read these pages on . Each number in the guide links to the page behind that sentence.
- Salesforce Hosted MCP Servers Are Now Generally Available, Salesforce Developers Blog, April 29, 2026
- MCP Registry API, list of servers, counted November 10, 2026
- mcp, salesforcecli on GitHub
- mcp-hosted, forcedotcom on GitHub
- MCP-Salesforce, smn2gnt on GitHub
- mcp-server-salesforce, tsmztech on GitHub
- Salesforce tools, Conecto
- Connect Salesforce (salesforce_connect), Conecto
Conecto publishes this guide and sells business tools for AI agents. How we write our guides. To report a mistake, write to hello@conecto.chat.
Written by Amelia Cardona Hernandez, Co-founder of Conecto. LinkedIn