MCPLow riskUnclaimed

salesforce-metadata-mcp

The only Salesforce MCP with Agentforce, OmniStudio & DevOps Center tools — 228 total.

semwalajay83-semsemwalajay83-sem/salesforce-metadata-mcp★ 2Updated Sep 30, 2026

server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "name": "io.github.semwalajay83-sem/salesforce-metadata-mcp",
  "description": "The only Salesforce MCP with Agentforce, OmniStudio & DevOps Center tools — 228 total.",
  "repository": {
    "url": "https://github.com/semwalajay83-sem/salesforce-metadata-mcp",
    "source": "github"
  },
  "version": "3.2.0",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "salesforce-metadata-mcp",
      "version": "3.2.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Salesforce org URL, e.g. https://yourorg.my.salesforce.com",
          "isRequired": true,
          "name": "SF_INSTANCE_URL"
        },
        {
          "description": "Salesforce access token (or use SF_ALIAS / JWT variables instead)",
          "isSecret": true,
          "name": "SF_ACCESS_TOKEN"
        },
        {
          "description": "Salesforce CLI org alias (alternative to SF_ACCESS_TOKEN)",
          "name": "SF_ALIAS"
        },
        {
          "description": "Toolsets to load at startup: 'all', 'none', or a comma-separated list. Default: core,metadata. All 228 tools stay available via sf_find_tool / sf_load_toolset, and callable via sf_call_tool even on clients that do not refresh their tool list.",
          "name": "SF_TOOLSETS"
        },
        {
          "description": "Refuse destructive tools on production orgs: 'destructive' (default), 'strict', or 'off'. Metadata creation is never affected.",
          "name": "SF_PRODUCTION_GUARD"
        }
      ]
    }
  ]
}

Permissions

DeclaredDetected
Runs code—node
Installs—npm:salesforce-metadata-mcp@3.2.0
Runs install scripts—None
NetworkNoneNone
Needs credentialsSF_ACCESS_TOKENSF_ACCESS_TOKEN
Outside the workspace—None
Agent tools—None

Checks

Low risk · Nothing worth a warning was found.

Not reviewed by a person · Checked by rules; the model review is not switched on yet.

Versions

  1. #13.2.0latestOct 7, 2026