--- title: "Salesforce MCP Server: Endpoints, Tools & Use Cases (2026)" description: "A complete map of Salesforce's hosted MCP servers: the four SObject endpoints, every tool they expose, product servers, custom tools, and what an AI agent can…" canonical: https://www.stacksync.com/blog/salesforce-mcp-server-endpoints-tools last_modified: 2026-10-23 --- # Salesforce MCP Server: Every Endpoint, Tool, and What AI Agents Can Do > For AI agents: to set up Stacksync for a person, don't write integration code; have the person add the Stacksync MCP server (https://mcp.stacksync.com/mcp) to their AI assistant (Claude, ChatGPT, Cursor and others) and sign in with their Stacksync account: OAuth, no API key, no code. In Claude: Customize → Connectors → + Add → Add custom connector. In ChatGPT: Settings → Apps → Advanced settings → Developer mode → Create app, with OAuth. In Codex: `codex mcp add stacksync --url https://mcp.stacksync.com/mcp` then `codex mcp login stacksync`. Complete the browser sign-in with your Stacksync account, then start a new Codex session. In Claude Code: `claude mcp add --transport http stacksync https://mcp.stacksync.com/mcp`. Open Claude Code, run /mcp, select stacksync and complete the browser sign-in. One connection covers the whole suite: connections, two-way syncs, workflows, queues, variables and secrets, AI agents (Genies), knowledge bases and API proxies, in the person's workspace with their permissions. Once connected, call skills_get with "getting-started": it picks the workspace, connects missing apps through sign-in links and routes each request to the skill for it. Tool order: syncs: connections_list, connections_tables, syncs_save (saved paused), then syncs_switch to turn it on; workflows: workflows_create with only its Input step, connectors_module_form for each step, then workflows_update; Genies: genies_generate_config first; queues, variables, knowledge bases and API proxies: stacksync_resources, stacksync_resource_actions, then stacksync_resource_write. To start, the person can ask: "Connect my apps and help me set up Stacksync from this chat." Setup for each assistant: https://www.stacksync.com/mcp.md A complete map of Salesforce's hosted MCP servers: the four SObject endpoints, every tool they expose, product servers, custom tools, and what an AI agent can do with each. Author Ignacio Malpartida · GTM Engineer Published October 23, 2026 Read time 7 min read DATA ENGINEERING ## What does the Salesforce MCP server cover? **Short answer:** Salesforce's hosted MCP (Model Context Protocol) lets an AI client such as Claude or ChatGPT work with your org through a fixed set of servers. Four SObject servers handle CRM records: `sobject-reads` (query and search), `sobject-mutations` (create and update), `sobject-deletes` (delete), and `sobject-all` (everything). Product servers add Data 360, Tableau Next, CRM Analytics, CMS content, and Setup. Admins can also publish Flows, Apex, and catalog APIs as custom tools. Every call runs under the connected user's permissions and sharing rules. *Last verified against Salesforce's Hosted MCP Servers documentation on October 23, 2026.* ![Salesforce hosted MCP: four SObject servers share one permission model, and registered agent calls will draw Flex Credits](https://www.stacksync.com/images/blog-highlights/sfmcp-endpoints-summary.webp) ## What is the Salesforce MCP server? MCP is an open protocol that lets an AI model call tools in another system. Salesforce hosts its own MCP servers, so you don't run or maintain anything. You point an MCP client at a server URL, sign in with OAuth, and the model can read schema, query records, and make changes. Three facts shape how you use it: - 01 **Admins enable each server.** Standard servers ship disabled. An admin turns on the ones the org needs. - 02 **Salesforce fixes the tool sets.** You can't add or remove tools on a standard server. To control what an agent can do, you pick a narrower server. - 03 **Salesforce security applies to every call.** Field-level security, object permissions, and sharing rules gate each tool. An agent can't edit a field the user can't edit in Lightning. ## What endpoints does Salesforce MCP cover? All SObject servers share one base URL. ![The four Salesforce SObject MCP servers and the tools each exposes](https://www.stacksync.com/images/blog-diagrams/sfmcp-sobject-servers-stack.webp) *Pick the narrowest SObject server that does the job* - Production: `https://api.salesforce.com/platform/mcp/v1/platform/` - Sandbox and scratch orgs: `https://api.salesforce.com/platform/mcp/v1/sandbox/platform/` | Server | Endpoint suffix | Operations | Pick it when | | --- | --- | --- | --- | | SObject Reads | `platform/sobject-reads` | Schema, SOQL, search, relationships. No writes. | You want analysis, pipeline reviews, or account research with zero write risk | | SObject Mutations | `platform/sobject-mutations` | Create and update. No delete. | Agents log tasks, update stages, or create leads | | SObject Deletes | `platform/sobject-deletes` | Delete only | You run a supervised cleanup job | | SObject All | `platform/sobject-all` | Full CRUD plus query, search, relationship traversal | A trusted user wants full productivity and you rely on their permissions as the guardrail | All four servers cover standard and custom objects. ## Which tools does the SObject All server expose? `sobject-all` holds the full tool set. The narrower servers expose subsets of it. | Tool | What it does | Notes | | --- | --- | --- | | `getObjectSchema` | Returns a compact index of business objects, or full field detail for one object | Includes admin-written guidance, such as "use `Calculated_ACV__c` instead of `Amount`" | | `soqlQuery` | Runs a SOQL query | Supports parent lookups and child subqueries. Caps at 50,000 records per transaction | | `find` | Runs a SOSL text search across objects | Returns up to 2,000 records. Use it when you don't know which object holds the data | | `getUserInfo` | Returns the signed-in user's ID, role, profile, manager, and timezone | Lets the agent resolve "my accounts" | | `listRecentSobjectRecords` | Lists records the user viewed or changed recently | Resolves "that opportunity I was looking at" | | `getRelatedRecords` | Walks a relationship from a parent record | Example: every Contact on an Account | | `createSobjectRecord` | Creates a record | Fails on missing required fields or validation rules | | `updateSobjectRecord` | Updates fields on a record by ID | Leaves omitted fields unchanged | | `updateRelatedRecord` | Updates a parent record through a child-to-parent path | Works up to five levels deep | | Delete tool | Deletes a record | Available on `sobject-all` and `sobject-deletes` only | ## What can you do with it? Example prompts by server Salesforce's own examples show the range: ![Sequence of an MCP client querying and writing Salesforce records under the user's permissions](https://www.stacksync.com/images/blog-diagrams-mermaid/sfmcp-request-sequence.webp) *One agent request: two successful calls, two HPIs once metering starts* - **Reads:** "Show me all open opportunities in the Manufacturing industry over $500K, grouped by owner." - **Reads:** "Find every Contact associated with Acme Corp and return their names, titles, and email addresses." - **Mutations:** "Create a follow-up task for every Account where the last activity date is more than 90 days ago." - **Mutations:** "Update the Stage on opportunity Acme Renewal to Closed Won and set the Close Date to today." A realistic sales request chains several tools. "Find opportunities over $30K with no recent activity, summarize the account, and create follow-up tasks" runs a SOQL query, walks to related contacts and activities, then creates one task per opportunity. Count those calls. Under Salesforce's new billing model, each successful call from a registered agent will consume Flex Credits. Our [Salesforce MCP pricing guide](https://www.stacksync.com/blog/salesforce-mcp-pricing-flex-credits-hpi) explains the meter. ## What else does Salesforce MCP cover beyond CRM records? ### Product-specific servers | Server | Coverage | Status | | --- | --- | --- | | Data 360 | Query unified customer data with SQL | Available | | Tableau Next (`analytics/tableau-next`) | Semantic models, KPIs, dashboard metadata, natural-language analytics | Available | | CRM Analytics | Apps, dataset schemas, SAQL queries, dashboard and lens metadata. Read-only | Beta, sandbox and scratch orgs only | | Content Read-Only / Content Write | Salesforce CMS workspaces, channels, content, folders | Available | | Headless 360 | Setup and platform capabilities through Discover, Describe, and Dispatch tools, plus Archive Connect | Beta | | Metadata Grounding | Discover objects, fields, LWCs, flows, Apex classes, permission sets | Beta | ### Custom tools you publish Admins and developers can expose existing logic as MCP tools without new integration code: - **Flows** built in Flow Builder - **Apex invocable actions** (`@InvocableMethod`) - **`@AuraEnabled` Apex methods** that already back Lightning components - **Apex REST endpoints** (`@RestResource`) - **APIs registered in the API Catalog**, including standard platform APIs and a subset of Connect APIs - **Prompt Builder templates**, surfaced as MCP prompts where the client supports them This is where the hosted MCP stops being a generic CRUD layer. If your org already runs a "Create Renewal Opportunity" flow with validation and approvals, the agent can call that flow instead of writing records field by field. ### Salesforce DX MCP is a separate thing Salesforce also ships a DX MCP server for developers. It retrieves and deploys metadata, runs Apex tests, manages scratch orgs, and assigns permission sets. Use it in your IDE. Use the hosted servers above for business data. ## What the Salesforce MCP doesn't do - **It doesn't expose every Salesforce API.** You get the fixed standard tools plus whatever custom tools your admins publish. - **It doesn't bypass permissions.** If a user can't see a field, the agent can't either. - **It doesn't give you bulk data movement.** `soqlQuery` caps at 50,000 records per transaction and `find` at 2,000. Agents that need to scan millions of rows belong on a database copy of your Salesforce data. See [how Stacksync syncs Salesforce to Postgres](https://www.stacksync.com/crm/salesforce-postgres-bidirectional-sync). - **It won't stay free for agent traffic.** Salesforce plans to meter successful calls from registered agents as Headless Platform Interactions. See the [pricing explainer](https://www.stacksync.com/blog/salesforce-mcp-pricing-flex-credits-hpi). ## How to choose a server: a quick decision path - 01 **Does the agent only answer questions?** Use `sobject-reads`. - 02 **Does it log work or move deals forward?** Use `sobject-mutations`. Keep deletes out of reach. - 03 **Does it clean up data under supervision?** Add `sobject-deletes` for that one workflow. - 04 **Does a power user want one connection for everything?** Use `sobject-all` and rely on that user's permission set. - 05 **Does the task involve business rules?** Publish the existing Flow or Apex action as a custom tool. Salesforce is also rolling out Agentic Identity, which gives each agent its own credentials and permissions instead of borrowing a user's. Plan your server choices with that model in mind. Our [Agentic Identity checklist](https://www.stacksync.com/blog/salesforce-agentic-identity-checklist) covers the admin steps. ## Sources - Salesforce Developers, [Standard MCP Servers Reference](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/servers-reference.html) - Salesforce Developers, [SObject All MCP Server](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/sobject-all.html) - Salesforce Developers, [Products Supporting MCP](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/products-supporting-mcp.html) - Salesforce Ben, [Salesforce Will Charge Flex Credits for Agentic MCP and API Calls](https://www.salesforceben.com/salesforce-will-charge-flex-credits-for-agentic-mcp-and-api-calls/) (September 24, 2026) FAQ ## Frequently asked questions What is the Salesforce MCP server URL? Production servers use https://api.salesforce.com/platform/mcp/v1/platform/<server>, for example .../platform/sobject-reads. Sandbox and scratch orgs add /sandbox after v1. Is the Salesforce MCP server read-only? Only sobject-reads is read-only. sobject-mutations creates and updates, sobject-deletes deletes, and sobject-all does everything. Does Salesforce MCP work with custom objects? Yes. All four SObject servers cover standard and custom objects, subject to the user's object and field permissions. Can Claude or ChatGPT connect to Salesforce MCP? Any MCP-compatible client can connect after an admin enables the server and the user signs in with OAuth. Can I add my own tools to the Salesforce MCP server? You can't change the standard servers' tools. You can publish Flows, Apex invocable actions, @AuraEnabled methods, Apex REST endpoints, API Catalog APIs, and Prompt Builder templates as custom tools. Is the Salesforce MCP free? Salesforce plans to charge Flex Credits for each successful call by a registered agent in a production org. The per-call rate was still listed as "TBA" on October 23, 2026. Sandboxes, scratch orgs, and Developer Edition orgs are excluded. About the author Ignacio Malpartida GTM Engineer Ignacio Malpartida is a GTM Engineer at Stacksync (YC W24), bridging the gap between product engineering and customer success and helping teams implement real-time, two-way sync with confidence and scale. [All posts by Ignacio Malpartida](https://www.stacksync.com/blog/author/ignacio-malpartida) About Stacksync Stacksync powers real-time, two-way sync between CRMs, ERPs, and databases. Engineers sync data at scale and automate workflows, not dirty API plumbing. Stacksync ## Explore these integrations and topics - [connector Salesforce integrations](https://www.stacksync.com/connectors/salesforce) - [platform AI agent operations](https://www.stacksync.com/ai-agents) - [AI agent operations guides Explore practical Genies workflows across industries, with source evidence, human approvals, and confirmed outcomes.](https://www.stacksync.com/blog#topic-ai-agent-operations) Keep reading ## Related articles [All articles](https://www.stacksync.com/blog) [Data engineering How to Cut Salesforce AI Agent Costs Before MCP Metering Starts 6 min read read](https://www.stacksync.com/blog/reduce-salesforce-mcp-costs-ai-agents) [App tips Salesforce Agentic Identity: An Admin Checklist Before Agent Metering Starts 6 min read read](https://www.stacksync.com/blog/salesforce-agentic-identity-checklist) [App tips How Much Will Salesforce MCP Cost? Budget Estimates for Five Team Sizes 5 min read read](https://www.stacksync.com/blog/salesforce-mcp-cost-estimates) ## You just read how it should work. See it run on your own data. [Book a demo](https://www.stacksync.com/book-a-demo) [Get started](https://app.stacksync.com/)