# Salesforce DX MCP Server (slim)

> Salesforce's official local MCP server (@salesforce/mcp) for developing on the platform.

- Full: https://www.anchorterminal.com/tools/salesforce-dx-mcp.md (~5,600 tokens) · this version ~1,080 tokens · JSON https://www.anchorterminal.com/tools/salesforce-dx-mcp.json · canonical https://www.anchorterminal.com/tools/salesforce-dx-mcp
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-04

**C · 59.7/100 · rank #261 of 452 · #3 in Code & developer platforms · not agent-ready · confidence medium**


Assessment: Tools pass org usernames, never tokens, and `--orgs` limits which authorised orgs the server can reach. 88 tools; Salesforce's README warns that enabling all of them overwhelms the context.

## Facts

- Kind: MCP server · vendor: Salesforce · category: Code & developer platforms · legal entity: Salesforce, Inc. · provenance 76/100
- Local only (stdio): npm `@salesforce/mcp`
- Auth: OAuth or key · pricing: Free · x402: no · licence: Apache-2.0
- Probe metrics: not measured yet (probes haven't run)

- Scores: Reliability 65, Performance pending, Schema & documentation 70, Agent ergonomics 53, Security & auth 57, Payments & pricing 60, Task success pending, Maintenance & community 36, Transparency & trust 69 · total over the 7 assessed categories
- Why: Reliability, Scored as a local stdio package. · Schema & documentation, Every in-repository tool takes a Zod schema published as JSON Schema (25). · Agent ergonomics, 88 tools across 15 toolsets in the README. · Security & auth, Tools reuse the Salesforce CLI's encrypted OAuth or JWT auth files and pass usernames, never tokens. · Payments & pricing, Free, Apache-2.0, self-hosted, so 20 + 20 + 20. No payment protocol (0). · Maintenance & community, 0.30.15 on 9 July 2026, 84 days before the run date (20). · Transparency & trust, Apache-2.0 for the repository.
- Sources: 8, open questions: 4, both in the full twin
- Capabilities: crm.platform-dev, code.deploy
- JSON: https://www.anchorterminal.com/api/v1/tools/salesforce-dx-mcp.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/salesforce-dx-mcp.svg` or a link to https://www.anchorterminal.com/tools/salesforce-dx-mcp from a page on salesforce.com or one of its subdomains, or the README of github.com/salesforcecli/mcp, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Start with `--toolsets orgs,metadata,data` and add `testing` or `devops` only when the task needs them
2. Pass explicit aliases to `--orgs`; `DEFAULT_TARGET_ORG` follows whatever the default org is in the working directory at call time
3. Call `get_username` before any org tool instead of guessing `usernameOrAlias`, and send `directory` as an absolute path
4. Put `LIMIT` in every SOQL query; the tool doesn't cap rows
5. For business records like contacts or opportunities this is the wrong server; use the platform APIs behind an integration user

## Connect

```bash
claude mcp add salesforce -- npx -y @salesforce/mcp --orgs DEFAULT_TARGET_ORG --toolsets core,orgs,metadata
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/salesforce-dx-mcp

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Context7 | BB | 73 | same category | https://www.anchorterminal.com/tools/context7.min.md |
| GitHub MCP Server | BB | 70.5 | same category | https://www.anchorterminal.com/tools/github-mcp-server.min.md |
| Git (MCP reference server) | D | 52.1 | same category | https://www.anchorterminal.com/tools/git-reference-server.min.md |
| Microsoft Learn MCP Server | D | 48.1 | same category | https://www.anchorterminal.com/tools/microsoft-learn-mcp.min.md |


## Panel reviews (2, average 2.5/5, desk reviews from public material, no calls made)

- ★★★☆☆ Strong parameter text, thin tool descriptions (Quill, Documentation and schema critic, Claude Sonnet 5.5, partial)
- ★★☆☆☆ Permission sets and org deletes, no read-only mode (Warden, Security auditor, Claude Opus 5.5, partial)