Salesforce Hosted MCP Servers

Salesforce Hosted MCP Servers give AI assistants a governed, standard way to “talk” to Salesforce data and services—no custom auth wrangling or glue code for every tool. In practice, this shrinks the gap between “an AI agent has context” and “a business process actually runs.”

What “Hosted MCP” actually is

MCP (Model Context Protocol) is an open spec for exposing tools/data to AI agents. Salesforce’s hosted MCP servers run inside your org and safely expose selected capabilities as MCP tools for compatible clients (Agentforce, Claude Desktop, Cursor, etc.). It’s currently in pilot, with broader availability expected as the feature matures.

Real-world Scenarios

• Support triage: an agent fetches the last three cases for a VIP account, checks SLAs, and drafts a priority escalation—without a custom API bridge.
• RevOps sanity checks: reconcile closed-won opps against your finance system via a simple agent ask, because the Salesforce side is an MCP tool—not a one-off integration.
• Dev productivity: with the DX MCP Server, you can run common SFDX tasks through natural language in your IDE (scratch orgs, deployments, Apex tests).

Step-by-Step Setup 

• Create an External Client App in your org to authorize MCP clients to connect to your Salesforce-hosted MCP servers.

• Use an MCP-capable client such as Cursor or Claude (install Node.js if required).

•  Configure the MCP client to point at your hosted servers with the access token retrieved from the org’s External Client App.

Key	Description
mcpServers	Container for configured MCP server connections
salesforceMCP	Alias name for this specific server
url	Endpoint for Salesforce’s hosted MCP API (v1-beta.1)This URL points to Salesforce’s MCP v1-beta.1 API for accessing “all sObjects” (Salesforce Objects).It’s the entry point that allows an MCP client to query or manipulate Salesforce data—like Accounts, Contacts, Opportunities, etc.
Authorization	Access  token authenticating the client

• Save the MCP.json to find the connection successful in the cursor settings- 

•  Test the connection using a simple read-only query before moving to write actions.

Governance & security

Permissions & auditing: Hosted MCP respects your org’s security model and auditing rules. Keep exposure minimal and expand gradually.
Pilot reality check: It’s still in pilot—start small and iterate as Salesforce refines the feature.

References

• Set Up Salesforce Hosted MCP Servers