Salesforce - Beta
Salesforce's Headless 360 MCP server exposes four tools that reach the whole Salesforce platform. dispatch runs any operation chosen at runtime; dispatch_readonly is capped at GET. Beta. OAuth verified 2026-09-08.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Salesforce - Beta via MCP
https://api.salesforce.com/platform/mcp/v1/platform/headless-360Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Use in Agentman
Connect Salesforce - Beta once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioSalesforce - Beta Tools & Capabilities (4)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- We did not read this server's tools. Our anonymous handshake was refused: the endpoint returned HTTP 401 with the body
{"errors":[{"message":"JWT Token is required"}]}to an anonymousinitializeon 2026-09-08, which is the live check that established the OAuth posture. The four tool names come from Anthropic's directory listing and Salesforce's own reference page, not from a handshake. We have not seen the server's annotations, so this page makes no claim aboutreadOnlyHintordestructiveHintvalues on the live tools. - Beta, with terms attached. Salesforce labels the Headless 360 MCP Server a Beta Service available from July 2026, states that use is at your sole discretion, and makes it subject to the applicable Beta Services Terms. Salesforce separately documents that beta server URLs and beta OAuth scopes stop working at GA and require reconnection.
- The tool count is not the capability. Salesforce states the operation library grows each release, so what
dispatchcan reach on the day you read this is not what it could reach at beta launch. Calldiscoverto see the current set; no static list on this page or any other can be authoritative. - The operation library started narrow. Salesforce states that at beta launch the server offers "dozens of operations", most focused on Setup tasks for admins — not the full platform.
- Scope cannot separate read from write. The protected-resource descriptor returns
mcp_apiandrefresh_tokenfor this endpoint, the same pair for every tool. Restricting an agent todispatch_readonlyis a client-side configuration, not an OAuth grant. - The connector inherits, and does not reduce, your permissions. Salesforce's guarantee is that the agent cannot exceed the signed-in user. An org connected by a System Administrator gives the agent administrator reach.
- Rate limits are your org's, not the server's. Salesforce documents that tools run as the authenticated user under the same rate limits as any REST call by that user. No separate MCP quota is published, so MCP traffic consumes the org's normal API allocation.
- Edition and version gates apply. Salesforce requires API version v67.0 or later, and its connection troubleshooting asks you to confirm the org edition supports API access, naming Developer or Enterprise, or Professional with API access enabled.
- Setup is not one click. An External Client App is required — Connected Apps are explicitly not supported — the app can take up to 30 minutes to become operational, and a Salesforce administrator must activate the server before any client can connect.
- Scratch orgs need a workaround. Salesforce states External Client Apps cannot be created directly in scratch orgs through the Setup UI; you build the app in a Dev Hub org, package it, and install the package.
- A three-year support floor, not a permanent one. Salesforce commits to supporting each hosted MCP service version for at least three years from first release, with at least one year's notice before a version is retired, and states tools may be upgraded or replaced between releases.
Frequently asked questions
No. Salesforce's documentation states that every Hosted MCP transaction runs as the authenticated user, and that object permissions, field-level security, sharing rules, profile permissions and permission sets all apply. Its wording is direct: if you cannot perform an action in Salesforce, your agent cannot perform it through the MCP server. Audit trails attribute every action to you.
The HTTP methods each accepts. Salesforce's request schema for dispatch permits GET, POST, PUT, DELETE and PATCH, so it can create, update and delete. The schema for dispatch_readonly restricts the method enum to GET alone, and Salesforce states the tool never changes data or configuration. Both take a URL and route through the same access guard.
Because it is a dispatcher, not a fixed toolset. Salesforce's documentation states that instead of exposing thousands of features as individual tools, the server provides four tools backed by a continuously growing library of Salesforce operations. The tool surface stays small and stable while the set of actions the agent can take scales independently of it.
It means the service is optional and governed by separate terms. Salesforce states the Headless 360 MCP Server is a Beta Service available from July 2026, that you use it at your sole discretion, and that any use is subject to the applicable Beta Services Terms. Salesforce also documents that server URLs and OAuth scopes changed between beta and GA.
Yes. Salesforce's documentation states MCP servers are disabled in your org by default and must be enabled by an administrator before clients can connect, and warns that clients will not connect even with correct authentication if servers are not enabled. An admin activates headless-360 from Setup, and activation can take up to two minutes.
Two, mcp_api and refresh_token. The server's own protected-resource descriptor, read on 2026-09-08, names exactly those for this endpoint and points at login.salesforce.com. Salesforce's setup documentation asks for the same pair in the External Client App. There is no read-only scope, so scope choice cannot separate dispatch from dispatch_readonly.
Not through OAuth scope, but through three other controls. Salesforce recommends configuring client-level tool permissions so approval is required before a tool changes configuration or deletes data. It also offers scoped read-only servers such as platform/sobject-reads, and notes that External Client Apps can be restricted to specific permission sets.
Your org's ordinary API limits. Salesforce documents that catalog-backed tools run as the authenticated user and that the same permissions and rate limits apply as they would to any REST API call made by that user. The connector publishes no separate MCP quota, so a dispatch call is metered against the org's normal API allocation.
Sources
- Salesforce, "Headless 360 MCP Server (Beta)" (fetched 2026-09-08). The
.htmlURL returned HTTP 403 to our client; the same page served cleanly at the.mdsuffix that Salesforce's own machine index publishes. · retrieved 2026-09-08 - Salesforce, machine-readable documentation index for Hosted MCP Servers (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Standard MCP Servers Reference" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Security Best Practices" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Create an External Client App" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Activate MCP Servers" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Transition from Beta" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "API Catalog" (rate limits) (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Server Connection Failures" (edition gate) (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Hosted MCP Servers End-of-Life" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Data 360 MCP Server" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce, "Configure Claude" (fetched 2026-09-08) · retrieved 2026-09-08
- Salesforce Beta Services Terms, linked from the Headless 360 page as
salesforce.com/company/legal/agreements/, which redirects to (checked 2026-09-08). We cite the resolved URL. · retrieved 2026-09-08 - Live anonymous probe of
https://api.salesforce.com/platform/mcp/v1/platform/headless-360— HTTP 401, noWWW-Authenticateheader (2026-09-08) · retrieved 2026-09-08 - Server's RFC 9728 descriptor (fetched 2026-09-08) · retrieved 2026-09-08
- Anthropic Connectors Directory entry (snapshot 2026-09-08) · retrieved 2026-09-08
developer.salesforce.com/robots.txtpermits these paths and carries noContent-Signalline; it explicitly advertises bothllms.txtfiles as "LLM and AI agent friendly content" (checked 2026-09-08) · retrieved 2026-09-08
Server Info
- Category
- Sales & CRM
- Developer
- Salesforce - Beta
- Tools
- 4
- Domain
- api.salesforce.com
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.
Similar MCP Servers for Sales & CRM
Related Resources
Ready to connect Salesforce - Beta?
Connect Salesforce - Beta once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.