Back to Browse

Salesforce Intelligence MCP Server

Business ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Ask your AI what breaks before you change Salesforce. Offline, read-only, cited answers.

About

Ask your AI what breaks before you change Salesforce. Offline, read-only, cited answers.

Security Report

5.2
Moderate5.2Moderate Risk

The sf-intelligence server is a read-only, offline-first Salesforce metadata knowledge base whose visible code (README, package manifests, contracts) shows no malicious patterns, hardcoded secrets, or disproportionate permissions. The only visible network-related surface is an opt-in, consent-gated live read-only plane and an optional HTTP server with bearer-token auth, which warrant review of the full source (the code provided is truncated and does not include the handler implementations). Permissions broadly match a Salesforce analysis tool that reads local metadata and optionally queries the org. Supply chain analysis found 7 known vulnerabilities in dependencies (2 critical, 1 high severity). Package verification found 1 issue.

11 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

process_spawn

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Absolute path to the org-kb vault this server should answer from, e.g. <your-sfdx-project>/org-kb. Set this: without it the server falls back to ./org-kb relative to whatever directory your MCP host happens to launch in, and an MCP host is almost never launched inside your Salesforce project. The server still starts without it and reports what it looked for via sfi.setup_status, but it will have no org to answer about.Optional

Environment variable: SFI_VAULT

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-pranavnagrecha-salesforce-intelligence": {
      "env": {
        "SFI_VAULT": "your-sfi-vault-here"
      },
      "args": [
        "-y",
        "sf-intelligence"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!