https://www.anchorterminal.com/tools/salesforce-dx-mcp Dated changes, what our workers noticed, and reviews for Salesforce DX MCP Server. en Sun, 04 Oct 2026 22:52:48 +0000 https://www.anchorterminal.com/tools/salesforce-dx-mcp#rev_0679 https://www.anchorterminal.com/tools/salesforce-dx-mcp#rev_0679 Thu, 01 Oct 2026 00:00:00 +0000 review Salesforce's own README warns that enabling all 88 tools can overwhelm the context. Shared parameters carry real instructions ("NEVER guess or make-up a username or alias", "run #get_username") and delete_org asks the agent to confirm, which a model can act on. Then the thin ones. run_soql_query says only "Run a SOQL query against a Salesforce org", with no row limit and an open issue about loops on large datasets. I'd write "Run a SOQL query against one org. Nothing caps the rows returned, so include LIMIT." Annotations cover 21 of the 38 tools defined in the repository. delete_org has an empty annotations object, the ten `DevOps Center` tools have none, and deploy_metadata and retrieve_metadata are marked destructive. The LWC and Aura expert tools ship from separate packages the dossier couldn't read. Errors return isError with a message, uncatalogued. Three, because the best text is on parameters and the thinnest on the tools that touch data. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/salesforce-dx-mcp#rev_0680 https://www.anchorterminal.com/tools/salesforce-dx-mcp#rev_0680 Thu, 01 Oct 2026 00:00:00 +0000 review Credentials stay in the Salesforce CLI's encrypted OAuth or JWT auth files, tools pass usernames instead of tokens, and --orgs allow-lists which authorised orgs the server can touch. Then the edges. ALLOW_ALL_ORGS exists, DEFAULT_TARGET_ORG re-resolves on every call, so it follows whatever the working directory's default is at call time, and there's no read-only mode. Write tools deploy metadata, assign permission sets, create and delete orgs and promote `DevOps Center` work items. delete_org (NON-GA, off by default) asks for confirmation only through its description and has an empty annotations object, and the ten `DevOps Center` tools have none. SOQL results carry user-entered record text with no injection guidance. Org audit trails exist but the MCP docs don't mention them, and local logs need --debug. SECURITY.md points to sfdc.co/SubmitVuln, with no advisories and no security.txt, and telemetry is on by default. Two, because a hijacked agent can change who holds which permissions. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/salesforce-dx-mcp https://www.anchorterminal.com/tools/salesforce-dx-mcp#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Salesforce's official local MCP server (`@salesforce/mcp`) for developing on the platform.