# @aaronsb/salesforce-cloud-mcp AI-powered Salesforce MCP server: opportunity intelligence, similar-deal mining, conversation analysis, business case generation, SOQL, analytics, and CRUD with natural language interaction - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.8.2 - **Author:** aaronsb - **License:** MIT - **npm:** @aaronsb/salesforce-cloud-mcp - **Source:** https://github.com/aaronsb/salesforce-cloud - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-05T18:15:28.021Z - **Version scanned:** 0.8.2 - **CVEs:** none found by OSV at scan time ## Tools 18 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `batch` — Execute multiple operations in a single call with result references. Use $N.field to reference prior results (e.g., $0.id for the ID from operation 0). Destruct - `analyze` — Run analytics on any Salesforce object — group by categorical fields, aggregate numeric fields, and compute custom expressions. Uses field-type metadata for val - `analyze_conversation` — Analyze conversation activity and engagement patterns for an opportunity. Extracts insights from Gong calls, emails, and other activities to provide engagement - `generate_business_case` — Generate a markdown business case report for an opportunity. Fetches opportunity details, contacts, conversation insights, and similar won deals to produce a co - `enrich_opportunity` — Enrich an opportunity with market intelligence, industry insights, and strategic recommendations based on similar deal patterns and best practices. - `find_similar_opportunities` — Find opportunities similar to a reference opportunity or based on specific criteria. Includes pattern analysis and similarity scoring to identify market trends - `opportunity_insights` — Generate detailed insights and analytics from opportunity data including pipeline health, performance metrics, industry trends, and strategic recommendations. - `get_opportunity_details` — Get detailed information about a Salesforce opportunity including all available fields (both standard and custom), related records, and metadata - `search_opportunities` — Search for Salesforce opportunities by name, account, and stage. Returns matching opportunities ordered by close date. Results include both standard and custom - `search_fields` - `execute_soql` — Execute a SOQL query. Supports both standard and custom fields (custom fields end with __c in their API names). To see which fields this org actually populates - `describe_object` — Get an object's full metadata, including every standard and custom field when includeFields is true. Returns the complete schema — exhaustive but unranked, and - `create_record` — Create a new record in Salesforce. Supports both standard and custom fields in the data object. - `update_record` — Update an existing record in Salesforce. Supports updating both standard and custom fields. - `delete_record` — Delete a record from Salesforce - `get_user_info` — Get information about the current user - `download_file` — Download a file from Salesforce. Accepts a ContentVersionId (068...) or ContentDocumentId (069...). Saves to a sandboxed workspace directory (default: ~/.local/ - `list_objects` — List all available Salesforce objects, including both standard and custom objects ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"salesforce-cloud\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@aaronsb/salesforce-cloud-mcp\"\n ],\n \"env\": {\n \"SF_CLIENT_ID\": \"\",\n \"SF_CLIENT_SECRET\": \"\",\n \"SF_PASSWORD\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `SF_CLIENT_ID` — Sf Client ID (required) - `SF_CLIENT_SECRET` — Sf Client Secret (required) - `SF_PASSWORD` — Sf Password (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 3 credentials (2 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Critical blast radius — deletes data; holds an oauth grant. - Floor 60, ceiling 60 (tier: critical) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40aaronsb%2Fsalesforce-cloud-mcp - Install plan: https://forgeregistry.com/api/v1/packages/%40aaronsb%2Fsalesforce-cloud-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40aaronsb%2Fsalesforce-cloud-mcp - HTML page: https://forgeregistry.com/registry/%40aaronsb%2Fsalesforce-cloud-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.