Summary
Connects to Salesforce via the REST API to expose CRM operations for accounts, contacts, opportunities, leads, tasks, users, and custom objects. Built by Mindstone as part of a 35-connector suite that emphasizes security hardening (pinned dependencies, OIDC provenance, no publish-time scripts). You'd reach for this when you want an LLM to query pipeline data, update records, or orchestrate workflows across your Salesforce org without building custom integrations. The server uses stdio transport and supports multi-account scenarios. Part of the broader Mindstone collection that includes similar treatment for HubSpot, Microsoft 365, Google Workspace, and other SaaS platforms.
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
Tools
Public tool metadata for what this MCP can expose to an agent.
80 tools
SALESFORCE_ACCOUNT_CREATION_WITH_CONTENT_TYPE_OPTIONDEPRECATED: Creates a new Salesforce Account using a JSON POST request, requiring 'Name'; specific fields (e.g., custom, DunsNumber) may have org-level prerequisites.66 params
DEPRECATED: Creates a new Salesforce Account using a JSON POST request, requiring 'Name'; specific fields (e.g., custom, DunsNumber) may have org-level prerequisites.
Parameters* required
IdstringUnique identifier for the account (system-generated and read-only upon creation).
FaxstringFax number for the account.
SicstringStandard Industrial Classification (SIC) code (max 20 chars). For business accounts only.
NamestringName of the account (required, max 255 chars). For Person Accounts, this is a concatenated field from the associated contact and not directly modifiable.
SitestringName of the account’s specific location or site (max 80 chars).
TypestringType of account, influencing categorization and behavior.
PhonestringPrimary phone number for the account (max 40 chars).
JigsawstringData.com company ID reference (max 20 chars, API v22.0+). For business accounts. Read-only, do not modify.
RatingstringProspect rating (picklist).
SLA__cstringCustom field for Service Level Agreement (SLA) type/details.
OwnerIdstringID of the Salesforce user owning this account. 'Transfer Record' permission may be needed to update if not the API user (API v16.0+).
SicDescstringDescription of line of business based on SIC code (max 80 chars). For business accounts only.
WebsitestringWebsite URL of the account (max 255 chars).
IndustrystringPrimary industry of the account (picklist, max 40 chars).
ParentIdstringID of the parent account for subsidiary or hierarchical relationships.
PhotoUrlstringURL path for the social network profile image (read-only). Blank if Social Accounts and Contacts is not enabled for the user.
Active__cstringCustom field indicating if the account is active.
IsDeletedbooleanIndicates if the account is in the Recycle Bin (read-only).
NaicsCodestringNAICS code (6-digit industry classifier, max 8 chars). For business accounts. Requires Data.com Prospector/Clean.
NaicsDescstringDescription of line of business based on NAICS code (max 120 chars). For business accounts. Requires Data.com Prospector/Clean.
OwnershipstringOwnership structure (picklist).
DunsNumberstringD-U-N-S number (9-digit identifier, max 9 chars). For business accounts. Requires Data.com Prospector/Clean.
TradestylestringOrganization's 'Doing Business As' (DBA) name (max 255 chars). For business accounts. Requires Data.com Prospector/Clean.
BillingCitystringCity for the billing address (max 40 chars).
CleanStatusstringData quality status compared with Data.com.
CreatedByIdstringID of the user who created the account (read-only).
CreatedDatestringDate and time of account creation (read-only).
DescriptionstringText description of the account (max 32,000 chars).
YearStartedstringYear the organization was established (max 4 chars). For business accounts. Requires Data.com Prospector/Clean.
BillingStatestringState or province for the billing address (max 80 chars).
ShippingCitystringCity for the shipping address (max 40 chars).
TickerSymbolstringStock market ticker symbol (max 20 chars). For business accounts only.
AccountNumberstringAccount number assigned to this account (max 40 chars).
AccountSourcestringOrigin source of the account record (admin-defined picklist, values max 40 chars).
AnnualRevenueintegerEstimated annual revenue.
BillingStreetstringStreet address for the billing location.
ShippingStatestringState or province for the shipping address (max 80 chars).
BillingCountrystringCountry for the billing address (max 80 chars).
DandbCompanyIdstringAssociated Dun & Bradstreet company ID for D&B integration (read-only).
LastViewedDatestringTimestamp of when current user last viewed this account record (read-only).
MasterRecordIdstringID of the master record if this account was merged (read-only).
ShippingStreetstringStreet address for the shipping location (max 255 chars).
SystemModstampstringTimestamp of last modification by user or automated process (read-only).
BillingLatitudeintegerLatitude for the billing address (-90 to 90, up to 15 decimal places).
JigsawCompanyIdstringAssociated Data.com company ID (read-only).
ShippingCountrystringCountry for the shipping address (max 80 chars).
attributes__urlstringInternal Salesforce field: Relative API URL for this SObject record. System-set or read-only.
BillingLongitudeintegerLongitude for the billing address (-180 to 180, up to 15 decimal places).
LastActivityDatestringMost recent due date of an event or closed task associated with the record (read-only).
LastModifiedByIdstringID of the user who last modified the account (read-only).
LastModifiedDatestringDate and time of last modification (read-only).
OperatingHoursIdstringID of associated operating hours. Requires Salesforce Field Service.
ShippingLatitudeintegerLatitude for the shipping address (-90 to 90, up to 15 decimal places).
attributes__typestringInternal Salesforce field: Type of the SObject (e.g., 'Account'). System-set or read-only.
BillingPostalCodestringPostal code for the billing address (max 20 chars).
NumberOfEmployeesintegerNumber of employees (max 8 digits).
ShippingLongitudeintegerLongitude for the shipping address (-180 to 180, up to 15 decimal places).
LastReferencedDatestringTimestamp of when current user last accessed this record or related items (read-only).
SLASerialNumber__cstringCustom field for SLA serial number.
ShippingPostalCodestringPostal code for the shipping address (max 20 chars).
CustomerPriority__cstringCustom field for customer priority (e.g., High, Medium, Low).
NumberofLocations__cintegerCustom field for the number of physical locations.
SLAExpirationDate__cstringCustom field for SLA expiration date.
UpsellOpportunity__cstringCustom field indicating upsell opportunity potential.
BillingGeocodeAccuracystringAccuracy level of the geocode for the billing address.
ShippingGeocodeAccuracystringAccuracy level of the geocode for the shipping address.
SALESFORCE_ADD_CONTACT_TO_CAMPAIGNAdds a contact to a campaign by creating a CampaignMember record, allowing you to track campaign engagement.3 params
Adds a contact to a campaign by creating a CampaignMember record, allowing you to track campaign engagement.
Parameters* required
statusstringThe status of the campaign member. Common values include 'Sent', 'Responded'. The available statuses depend on campaign configuration.default: Sent
contact_idstringThe Salesforce ID of the contact to add to the campaign.
campaign_idstringThe Salesforce ID of the campaign to add the contact to.
SALESFORCE_ADD_LEAD_TO_CAMPAIGNAdds a lead to a campaign by creating a CampaignMember record, allowing you to track campaign engagement.3 params
Adds a lead to a campaign by creating a CampaignMember record, allowing you to track campaign engagement.
Parameters* required
statusstringThe status of the campaign member. Common values include 'Sent', 'Responded'. The available statuses depend on campaign configuration.default: Sent
lead_idstringThe Salesforce ID of the lead to add to the campaign.
campaign_idstringThe Salesforce ID of the campaign to add the lead to.
SALESFORCE_ADD_OPPORTUNITY_LINE_ITEMAdds a product (line item) to an opportunity. The product must exist in a pricebook entry that's associated with the opportunity's pricebook.8 params
Adds a product (line item) to an opportunity. The product must exist in a pricebook entry that's associated with the opportunity's pricebook.
Parameters* required
discountnumberDiscount percentage (0-100). Cannot be used with TotalPrice.
quantitynumberThe quantity of the product to add.
unit_pricenumberThe sales price per unit. If not specified, uses the standard price from the pricebook entry.
descriptionstringOptional description for this line item.default:
total_pricenumberThe total price for this line item. Cannot be used with UnitPrice or Discount.
service_datestringService date for the product in YYYY-MM-DD format.
opportunity_idstringThe Salesforce ID of the opportunity to add a product to.
pricebook_entry_idstringThe ID of the PricebookEntry that contains the product and price information. This links to a specific product in a specific pricebook.
SALESFORCE_APPLY_LEAD_ASSIGNMENT_RULESApplies configured lead assignment rules to a specific lead, automatically routing it to the appropriate owner based on your organization's rules.1 params
Applies configured lead assignment rules to a specific lead, automatically routing it to the appropriate owner based on your organization's rules.
Parameters* required
lead_idstringThe Salesforce ID of the lead to apply assignment rules to.
SALESFORCE_ASSOCIATE_CONTACT_TO_ACCOUNTAssociates a contact with an account by updating the contact's AccountId field.2 params
Associates a contact with an account by updating the contact's AccountId field.
Parameters* required
account_idstringThe Salesforce ID of the account to associate the contact with.
contact_idstringThe Salesforce ID of the contact to associate with an account.
SALESFORCE_CLONE_OPPORTUNITY_WITH_PRODUCTSClones an opportunity and optionally its products (line items). Creates a new opportunity with the same field values and products as the original.5 params
Clones an opportunity and optionally its products (line items). Creates a new opportunity with the same field values and products as the original.
Parameters* required
new_namestringName for the cloned opportunity. If not specified, will append 'Clone of' to original name.default:
close_datestringClose date for the cloned opportunity in YYYY-MM-DD format. If not specified, uses original close date.
stage_namestringStage for the cloned opportunity. If not specified, uses original stage.default:
clone_productsbooleanWhether to clone the opportunity's products (line items). Set to false to clone only the opportunity.default: true
opportunity_idstringThe ID of the opportunity to clone.
SALESFORCE_CLONE_RECORDCreates a copy of an existing Salesforce record by reading its data, removing system fields, and creating a new record. Optionally apply field updates to the clone.3 params
Creates a copy of an existing Salesforce record by reading its data, removing system fields, and creating a new record. Optionally apply field updates to the clone.
Parameters* required
record_idstringThe ID of the record to clone.
object_typestringThe Salesforce object type to clone (e.g., Account, Contact, Lead, Opportunity).
field_updatesstringOptional field updates to apply to the cloned record as a JSON string. Use this to modify specific fields in the clone. Example: '{"Name": "Clone of Original", "Status": "New"}'
SALESFORCE_COMPLETE_TASKMarks a task as completed with optional completion notes. This is a convenience action that updates the task status to 'Completed'.2 params
Marks a task as completed with optional completion notes. This is a convenience action that updates the task status to 'Completed'.
Parameters* required
task_idstringThe Salesforce ID of the task to mark as completed.
completion_notesstringOptional notes to add about the task completion. Will be appended to existing description.default:
SALESFORCE_CREATE_ACCOUNTCreates a new account in Salesforce with the specified information.22 params
Creates a new account in Salesforce with the specified information.
Parameters* required
faxstringFax number.default:
namestringAccount name (required field in Salesforce).
typestringType of account.default:
phonestringMain phone number.default:
websitestringCompany website URL.default:
industrystringIndustry the account belongs to.default:
sic_descstringStandard Industrial Classification (SIC) description.default:
parent_idstringID of the parent account if this is a subsidiary. Must be a valid Salesforce Account Id (15- or 18-character).default:
descriptionstringText description of the account.default:
billing_citystringBilling address city.default:
billing_statestringBilling address state/province.default:
shipping_citystringShipping address city.default:
account_sourcestringSource of the account.default:
annual_revenuenumberEstimated annual revenue.
billing_streetstringBilling address street.default:
shipping_statestringShipping address state/province.default:
billing_countrystringBilling address country.default:
shipping_streetstringShipping address street.default:
shipping_countrystringShipping address country.default:
billing_postal_codestringBilling address postal/zip code.default:
number_of_employeesintegerNumber of employees.
shipping_postal_codestringShipping address postal/zip code.default:
SALESFORCE_CREATE_CAMPAIGNCreates a new campaign in Salesforce with the specified information.13 params
Creates a new campaign in Salesforce with the specified information.
Parameters* required
namestringCampaign name (required field in Salesforce).
typestringType of campaign.default:
statusstringCurrent status of the campaign.default:
end_datestringCampaign end date in YYYY-MM-DD format.default:
is_activebooleanWhether the campaign is currently active.default: false
parent_idstringID of the parent campaign if this is a child campaign.default:
start_datestringCampaign start date in YYYY-MM-DD format.default:
actual_costnumberActual cost spent on the campaign.default: 0
descriptionstringDetailed description of the campaign.default:
number_sentnumberNumber of individuals targeted by the campaign.default: 0
budgeted_costnumberBudgeted cost for the campaign.default: 0
expected_revenuenumberExpected revenue from the campaign.default: 0
expected_responsenumberExpected response rate as a percentage.default: 0
SALESFORCE_CREATE_CAMPAIGN_RECORD_VIA_POSTDEPRECATED: Creates a new campaign record in Salesforce; if 'ParentId' is provided, it must be a valid ID of an existing Campaign record, and if 'OwnerId' is provided, it must be a valid ID of an active User.35 params
DEPRECATED: Creates a new campaign record in Salesforce; if 'ParentId' is provided, it must be a valid ID of an existing Campaign record, and if 'OwnerId' is provided, it must be a valid ID of an active User.
Parameters* required
IdstringUnique identifier for the campaign record, usually system-generated upon creation.
NamestringRequired. Name of the campaign (limit 80 characters).
TypestringType of campaign (limit 40 characters).
StatusstringCurrent status of the campaign (limit 40 characters).
EndDatestringEnding date for the campaign (YYYY-MM-DD); responses received after this date are still counted.
OwnerIdstringID of the campaign owner. Defaults to the ID of the user making the API call.
IsActivebooleanIndicates if the campaign is active. Label: Active.
ParentIdstringID of the parent Campaign record for hierarchical grouping.
IsDeletedbooleanIndicates if the campaign record has been deleted.
StartDatestringStarting date for the campaign (YYYY-MM-DD).
ActualCostintegerActual cost of the campaign, in the organization's currency.
NumberSentintegerTotal number of individuals targeted (e.g., emails sent). Label: Num Sent.
CreatedByIdstringRead-only. ID of the user who created this campaign record.
CreatedDatestringRead-only. Creation date and time (ISO 8601).
DescriptionstringDetailed description of the campaign (limit 32KB; first 255 characters displayed in reports).
BudgetedCostintegerBudgeted cost for this campaign, in the organization's currency.
NumberOfLeadsintegerRead-only. Total leads associated with this campaign. Label: Leads in Campaign.
LastViewedDatestringRead-only. Timestamp of current user's last view of this record/list view (ISO 8601). Null if only accessed (see LastReferencedDate) but not viewed.
SystemModstampstringRead-only. Last modification date and time by a user or automated process (ISO 8601).
ExpectedRevenueintegerExpected revenue from this campaign, in the organization's currency.
attributes__urlstringRead-only. Relative URL to the campaign record.
ExpectedResponseintegerPercentage of responses expected from targeted individuals.
LastActivityDatestringRead-only. Most recent activity date (event due date or closed task due date, YYYY-MM-DD).
LastModifiedByIdstringRead-only. ID of the user who last modified this campaign record.
LastModifiedDatestringRead-only. Last modification date and time (ISO 8601).
NumberOfContactsintegerRead-only. Total contacts associated with this campaign. Label: Total Contacts.
attributes__typestringsObject type, typically 'Campaign'.
NumberOfResponsesintegerRead-only. Contacts and unconverted leads with Member Status “Responded”. Label: Responses in Campaign.
LastReferencedDatestringRead-only. Timestamp of current user's last access to this record, a related record, or a list view (ISO 8601).
NumberOfOpportunitiesintegerRead-only. Total opportunities associated with this campaign. Label: Opportunities in Campaign.
AmountAllOpportunitiesintegerRead-only. Total monetary amount of all opportunities (including closed/won) in this campaign, in organization's currency. Label: Value Opportunities in Campaign.
AmountWonOpportunitiesintegerRead-only. Total monetary amount of closed/won opportunities in this campaign, in organization's currency. Label: Value Won Opportunities in Campaign.
NumberOfConvertedLeadsintegerRead-only. Leads converted to an account and contact from this campaign. Label: Converted Leads.
NumberOfWonOpportunitiesintegerRead-only. Closed or won opportunities from this campaign. Label: Won Opportunities in Campaign.
CampaignMemberRecordTypeIdstringRecord type ID for associated CampaignMember records, determining their fields and layout.
SALESFORCE_CREATE_CONTACTCreates a new contact in Salesforce with the specified information.16 params
Creates a new contact in Salesforce with the specified information.
Parameters* required
emailstringContact's email address.default:
phonestringContact's primary phone number.default:
titlestringContact's job title.default:
birthdatestringContact's birthdate in YYYY-MM-DD format.default:
last_namestringContact's last name (required field in Salesforce).
account_idstringID of the Account this contact is associated with.default:
departmentstringContact's department.default:
first_namestringContact's first name.default:
descriptionstringAdditional notes or description about the contact.default:
lead_sourcestringSource from which this contact originated.default:
mailing_citystringContact's mailing city.default:
mobile_phonestringContact's mobile phone number.default:
mailing_statestringContact's mailing state/province.default:
mailing_streetstringContact's mailing street address.default:
mailing_countrystringContact's mailing country.default:
mailing_postal_codestringContact's mailing postal/zip code.default:
SALESFORCE_CREATE_LEADCreates a new lead in Salesforce with the specified information.19 params
Creates a new lead in Salesforce with the specified information.
Parameters* required
citystringLead's city.default:
emailstringLead's email address.default:
phonestringLead's phone number.default:
statestringLead's state/province.default:
titlestringLead's job title.default:
ratingstringLead rating.default:
statusstringLead status.default:
streetstringLead's street address.default:
companystringLead's company name (required field in Salesforce).
countrystringLead's country.default:
websitestringLead's company website.default:
industrystringLead's industry.default:
last_namestringLead's last name (required field in Salesforce).
first_namestringLead's first name.default:
descriptionstringAdditional notes or description about the lead.default:
lead_sourcestringSource of the lead.default:
postal_codestringLead's postal/zip code.default:
annual_revenuenumberLead's company annual revenue.default: 0
number_of_employeesintegerNumber of employees at lead's company.default: 0
SALESFORCE_CREATE_LEAD_WITH_SPECIFIED_CONTENT_TYPEDEPRECATED: Creates a new Lead in Salesforce, requiring `LastName` and `Company` unless person accounts are enabled and `Company` is null.54 params
DEPRECATED: Creates a new Lead in Salesforce, requiring `LastName` and `Company` unless person accounts are enabled and `Company` is null.
Parameters* required
CitystringCity for the address.
EmailstringEmail address.
PhonestringPrimary phone number.
StatestringState or province for the address.
TitlestringTitle (e.g., CFO, CEO; up to 128 characters).
JigsawstringData.com contact ID (max 20 chars). Indicates Data.com import. Do not modify; for import troubleshooting.
RatingstringRating (e.g., Hot, Warm, Cold).
StatusstringCurrent status (e.g., Open, Contacted). Defined in LeadStatus object in Salesforce setup.
StreetstringStreet address.
CompanystringCompany name (up to 255 characters). If person accounts are enabled and this is null, lead converts to a person account.
CountrystringCountry for the address.
OwnerIdstringID of the owner. Defaults to current user if unspecified.
WebsitestringWebsite URL.
IndustrystringPrimary industry of the lead's company.
LastNamestringLast name of the lead (up to 80 characters).
PhotoUrlstringPath for social network profile image URL; used with Salesforce instance URL. Empty if Social Accounts/Contacts disabled.
FirstNamestringFirst name (up to 40 characters).
IsDeletedbooleanIndicates if the lead is in the Recycle Bin (true) or not (false). Salesforce defaults to false if this field is omitted.
LeadSourcestringSource of the lead.one of
Web · Other · Phone Inquiry · Partner Referral · Purchased ListPostalCodestringPostal or ZIP code for the address.
Primary__cstringCustom field, possibly indicates if primary contact/lead.
SICCode__cstringCustom field for Standard Industrial Classification (SIC) code.
SalutationstringSalutation for the lead.one of
Mr. · Ms. · Mrs. · Dr. · Prof.CleanStatusstringRecord's clean status compared with Data.com (e.g., Matched, Different, Pending).
CreatedByIdstringID of user who created this. System-generated, read-only.
CreatedDatestringCreation timestamp. System-generated, read-only.
DescriptionstringDescription (up to 32,000 characters).
IsConvertedbooleanTrue if converted to Account/Contact/Opportunity; false otherwise. Read-only; set upon conversion.
IndividualIdstringAssociated data privacy record ID. Available if Data Protection/Privacy enabled.
AnnualRevenueintegerAnnual revenue of the lead’s company.
ConvertedDatestringConversion date. Read-only; set upon conversion.
DandbCompanyIdstringAssociated D&B Company record ID. Available if Data.com used.
LastViewedDatestringTimestamp when current user last viewed. Null if only accessed (LastReferencedDate) but not viewed. Read-only.
MasterRecordIdstringID of the master record if this lead was deleted due to a merge; null otherwise.
SystemModstampstringTimestamp of last modification by user or system. System-generated, read-only.
IsUnreadByOwnerbooleanTrue if assigned to an owner but not yet viewed by them. Salesforce defaults to true when a lead is created or its owner changes.
JigsawContactIdstringJigsaw contact ID. Read-only.
attributes__urlstringRelative URL of SObject record. Usually metadata, not set by user on creation.
EmailBouncedDatestringDate/time of last email bounce (if bounce management active).
IsPriorityRecordbooleanTrue if this lead is marked as a priority record.
LastActivityDatestringLater of most recent event's Due Date or most recently closed task's Due Date. Read-only.
LastModifiedByIdstringID of user who last modified this. System-generated, read-only.
LastModifiedDatestringLast modification timestamp. System-generated, read-only.
attributes__typestringSObject type (typically 'Lead'). Usually metadata, not set by user on creation.
CompanyDunsNumberstringD-U-N-S number (unique 9-digit business ID; max 9 chars). Available if Data.com Prospector/Clean used.
NumberOfEmployeesintegerNumber of employees at the lead’s company.
ConvertedAccountIdstringID of the Account object from conversion. Read-only.
ConvertedContactIdstringID of the Contact object from conversion. Read-only.
EmailBouncedReasonstringReason for last email bounce (if bounce management active).
LastReferencedDatestringTimestamp when current user last accessed this or related record. Read-only.
ProductInterest__cstringCustom field indicating the product(s) the lead is interested in.
CurrentGenerators__cstringCustom field for information about current generators or similar equipment/services.
NumberofLocations__cintegerCustom field for the number of locations the lead's company has.
ConvertedOpportunityIdstringID of the Opportunity from conversion. Read-only.
SALESFORCE_CREATE_NEW_CONTACT_WITH_JSON_HEADERDEPRECATED: Creates a new Contact in Salesforce; 'LastName' is required, an existing 'AccountId' must be used if provided, and any custom fields (ending with '__c') must be predefined.63 params
DEPRECATED: Creates a new Contact in Salesforce; 'LastName' is required, an existing 'AccountId' must be used if provided, and any custom fields (ending with '__c') must be predefined.
Parameters* required
IdstringUnique contact identifier, system-generated; omit for new contact creation.
FaxstringPrimary business fax. Label: Business Fax.
NamestringRead-only: Full name, a concatenation of FirstName, MiddleName, LastName, and Suffix (up to 203 characters).
EmailstringEmail address.
PhonestringPrimary business phone. Label: Business Phone.
TitlestringContact's title (e.g., CEO, Vice President).
JigsawstringRead-only: Data.com Company ID (max 20 chars), indicates import from Data.com. Label: Data.com Key. Do not modify.
OwnerIdstringID of the Salesforce user owning this contact. Defaults to the logged-in user if unspecified.
LastNamestringRequired: Contact's last name (up to 80 characters).
Level__cstringCustom field: Contact's level (e.g., Primary, Secondary). '__c' denotes a custom field.
PhotoUrlstringRead-only: Path for social profile image URL (redirects). Empty if Social Accounts & Contacts disabled.
AccountIdstringParent Account ID; must exist if specified. Caution advised when changing for portal-enabled contacts.
BirthdatestringBirthdate (YYYY-MM-DD). SOQL queries ignore year for date comparisons (e.g., `Birthdate > TODAY`).
FirstNamestringContact's first name (up to 40 characters).
HomePhonestringHome phone.
IsDeletedbooleanRead-only: True if contact is in Recycle Bin. Label: Deleted.
OtherCitystringAlternate address: City.
DepartmentstringContact's department.
LeadSourcestringLead source for this contact (e.g., Web, Phone Inquiry).
OtherPhonestringAlternate address phone.
OtherStatestringAlternate address: State or province.
SalutationstringHonorific for the contact's name (e.g., Dr., Mr., Mrs.).
CleanStatusstringRecord's clean status compared to Data.com (e.g., 'Matched' may appear as 'In Sync' in UI).
CreatedByIdstringRead-only: ID of user who created contact.
CreatedDatestringRead-only: Timestamp of contact creation.
DescriptionstringDescription (up to 32KB). Label: Contact Description.
MailingCitystringMailing address: City.
MobilePhonestringMobile phone.
OtherStreetstringAlternate address: Street.
ReportsToIdstringID of manager contact reports to. Not for person accounts (IsPersonAccount true).
IndividualIdstringID of associated data privacy record. Available if Data Protection & Privacy enabled.
Languages__cstringCustom field: Languages spoken by the contact (e.g., English;Spanish). '__c' denotes a custom field.
MailingStatestringMailing address: State or province.
OtherCountrystringAlternate address: Country.
AssistantNamestringAssistant's name.
ContactSourcestringSource of contact information, for more granular tracking than LeadSource.
MailingStreetstringMailing address: Street.
OtherLatitudeintegerAlternate address: Latitude (-90 to 90, 15 decimal places). Use with OtherLongitude.
AssistantPhonestringAssistant's phone.
IsEmailBouncedbooleanTrue if email bounced; bounce management must be active.
LastViewedDatestringRead-only: Timestamp current user last viewed contact. Null if only referenced.
MailingCountrystringMailing address: Country.
MasterRecordIdstringRead-only: ID of the master record post-merge deletion; null otherwise.
OtherLongitudeintegerAlternate address: Longitude (-180 to 180, 15 decimal places). Use with OtherLatitude.
SystemModstampstringRead-only: Timestamp of last system modification (user or automated).
JigsawContactIdstringRead-only: Jigsaw (Data.com) ID, links to Data.com contact data.
MailingLatitudeintegerMailing address: Latitude (-90 to 90, 15 decimal places). Use with MailingLongitude.
OtherPostalCodestringAlternate address: Postal code.
attributes__urlstringRelative URL for this SObject record, usually system-generated. Part of 'attributes' metadata.
EmailBouncedDatestringDate and time of email bounce, if bounce management is active and an email bounced.
IsPriorityRecordbooleanTrue if contact is a priority record.
LastActivityDatestringRead-only: Most recent due date of associated event or closed task.
LastCUUpdateDatestringRead-only: Timestamp of last update from a contact update request.
LastModifiedByIdstringRead-only: ID of user who last modified contact.
LastModifiedDatestringRead-only: Timestamp of last modification.
MailingLongitudeintegerMailing address: Longitude (-180 to 180, 15 decimal places). Use with MailingLatitude.
attributes__typestringSalesforce SObject type, typically 'Contact'. Part of 'attributes' metadata.
LastCURequestDatestringRead-only: Timestamp of last contact update request (e.g., Data.com Clean).
MailingPostalCodestringMailing address: Postal code.
EmailBouncedReasonstringReason for email bounce, if bounce management is active and an email bounced.
LastReferencedDatestringRead-only: Timestamp current user last accessed contact, related record, or its list view.
OtherGeocodeAccuracystringAlternate address: Geocode accuracy. See Salesforce docs for geolocation compound fields.
MailingGeocodeAccuracystringMailing address: Geocode accuracy. See Salesforce docs for geolocation compound fields.
SALESFORCE_CREATE_NOTECreates a new note attached to a Salesforce record with the specified title and content.5 params
Creates a new note attached to a Salesforce record with the specified title and content.
Parameters* required
bodystringBody/content of the note. Can contain detailed text information.default:
titlestringTitle of the note (required field in Salesforce).
owner_idstringID of the user who will own the note. Defaults to the current user if not specified.default:
parent_idstringID of the record to attach the note to (required field in Salesforce). Can be any record that supports notes like Account, Contact, Lead, Opportunity, etc.
is_privatebooleanWhether the note should be private (only visible to owner and users with Modify All Data permission).default: false
SALESFORCE_CREATE_NOTE_RECORD_WITH_CONTENT_TYPE_HEADERDEPRECATED: Creates a new Note record in Salesforce, associated with an existing Salesforce object via `ParentId`, automatically including a `Content-Type: application/json` header.14 params
DEPRECATED: Creates a new Note record in Salesforce, associated with an existing Salesforce object via `ParentId`, automatically including a `Content-Type: application/json` header.
Parameters* required
IdstringUnique identifier for the Note object, typically auto-generated and not provided in the request.
BodystringContent or body of the note.
TitlestringTitle of the note.
OwnerIdstringID of the Salesforce User who will own the note; defaults to the API user.
ParentIdstringID of the parent Salesforce record (e.g., Account, Contact) to which this note is related; must reference an existing record.
IsDeletedbooleanIndicates if the object is in the Recycle Bin. Label is Deleted.
IsPrivatebooleanIf true, restricts note visibility to the owner or users with "Modify All Data" permission. Label is Private.
CreatedByIdstringID of the user who created the note (system-generated, read-only on create).
CreatedDatestringTimestamp of note creation (system-generated, read-only on create).
SystemModstampstringTimestamp of last system change (system-generated).
attributes__urlstringAPI URL for the SObject. Corresponds to `attributes.url` in the JSON body (typically read-only).
LastModifiedByIdstringID of the user who last modified the note (system-generated).
LastModifiedDatestringTimestamp of last modification (system-generated).
attributes__typestringSObject type, should be 'Note' if provided. Corresponds to `attributes.type` in the JSON body.
SALESFORCE_CREATE_OPPORTUNITYCreates a new opportunity in Salesforce with the specified information.12 params
Creates a new opportunity in Salesforce with the specified information.
Parameters* required
namestringOpportunity name (required field in Salesforce).
typestringType of opportunity.default:
amountnumberEstimated total sale amount.default: 0
next_stepstringDescription of next step in sales process.default:
account_idstringID of the Account this opportunity is associated with.default:
close_datestringExpected close date in YYYY-MM-DD format (required field in Salesforce).
contact_idstringID of the primary Contact for this opportunity.default:
stage_namestringCurrent stage of the opportunity (required field in Salesforce).
descriptionstringText description of the opportunity.default:
lead_sourcestringSource of the opportunity.default:
probabilitynumberPercentage probability of closing (0-100).default: 0
pricebook2_idstringID of the price book for this opportunity.default:
SALESFORCE_CREATE_OPPORTUNITY_RECORDDEPRECATED: Creates a new Opportunity record in Salesforce; `Name`, `StageName`, and `CloseDate` are mandatory, and ensure any referenced IDs (e.g., `AccountId`, `CampaignId`) are valid and corresponding Salesforce features are enabled if used.48 params
DEPRECATED: Creates a new Opportunity record in Salesforce; `Name`, `StageName`, and `CloseDate` are mandatory, and ensure any referenced IDs (e.g., `AccountId`, `CampaignId`) are valid and corresponding Salesforce features are enabled if used.
Parameters* required
IdstringSystem-generated unique identifier. Typically not provided during creation; providing it may be ignored or cause an error.
NamestringDescriptive name for the opportunity. Required. Limit: 120 characters.
TypestringOpportunity type (e.g., 'New Business', 'Existing Customer'). Values depend on Salesforce configuration.
IsWonbooleanRead-only. Indicates if won, lost, or open. Auto-set by Salesforce based on StageName; cannot be set on creation.
AmountintegerEstimated total sale amount. If products are involved, this may be auto-calculated, and direct updates might be ignored.
FiscalstringFiscal period ('YYYY Q' format, e.g., '2024 1') based on CloseDate. Used if standard fiscal year settings not enabled. Often auto-derived.
OwnerIdstringID of the User owning this opportunity. Defaults to creating user if unspecified (depending on settings). Ensure User ID is valid and active.
IsClosedbooleanRead-only. Indicates if closed or open. Auto-set by Salesforce based on StageName; cannot be set on creation.
NextStepstringNext actionable step towards closing. Limit: 255 characters.
AccountIdstringID of the linked Account. Often crucial for creating a valid opportunity.
CloseDatestringExpected close date (YYYY-MM-DD). Required.
ContactIdstringID of the primary Contact. Set only during creation. Use OpportunityContactRole object to modify or add other contacts later.
IsDeletedbooleanIndicates if the record is in the Recycle Bin. Generally used for querying, not set during creation.
IsPrivatebooleanIf true, this opportunity is private and only visible to the owner and users with appropriate sharing access.
PushCountintegerRead-only. Used internally by Salesforce for mobile sync updates. Not user-settable.
StageNamestringCurrent stage (e.g., 'Prospecting', 'Closed Won'). Required. May update ForecastCategoryName, IsClosed, IsWon, and Probability. Query OpportunityStage object or refer to Salesforce setup for valid names.
CampaignIdstringID of the influencing Campaign. Ensure Campaign feature is enabled and ID is valid.
FiscalYearintegerFiscal year (e.g., 2024) of CloseDate. Often auto-derived from CloseDate based on org's fiscal year settings.
LeadSourcestringLead or opportunity source (e.g., 'Web', 'Partner Referral'). Values depend on Salesforce configuration.
CreatedByIdstringRead-only. ID of the user who created this record. Auto-set by Salesforce.
CreatedDatestringRead-only. Creation timestamp. Auto-set by Salesforce.
DescriptionstringDetailed text description. Limit: 32,000 characters.
ProbabilityintegerLikelihood (percentage, e.g., 75 for 75%) of closing. Often implied by StageName but can be overridden.
Pricebook2IdstringID of the associated Price Book (Pricebook2). Generally required if adding products. Ensure products/price books are enabled and ID is valid.
FiscalQuarterintegerFiscal quarter (1-4) of CloseDate. Often auto-derived from CloseDate based on org's fiscal year settings.
HasOverdueTaskbooleanRead-only. Indicates if overdue Tasks exist. API v35.0+.
LastViewedDatestringRead-only. Timestamp of when current user last viewed this record. Not settable on creation.
OrderNumber__cstringCustom field: Associated order number.
SystemModstampstringRead-only. Last system modification timestamp. Auto-set by Salesforce.
ExpectedRevenueintegerRead-only. Calculated as Amount * Probability. Cannot be set during creation.
HasOpenActivitybooleanRead-only. Indicates if open activities (Events or Tasks) exist. API v35.0+.
attributes__urlstringRelative URL for this Opportunity record.
ForecastCategorystringForecast category (e.g., 'Pipeline', 'Best Case'). Often implied by StageName. For API v12.0+, typically set via ForecastCategoryName. Values depend on Salesforce configuration.
LastActivityDatestringRead-only. Date of the most recent activity (Event or Task). Not settable on creation.
LastModifiedByIdstringRead-only. ID of the user who last modified this record. Auto-set by Salesforce.
LastModifiedDatestringRead-only. Last modification timestamp. Auto-set by Salesforce.
attributes__typestringSObject type for this record, typically 'Opportunity'.
TrackingNumber__cstringCustom field: Associated tracking number.
LastReferencedDatestringRead-only. Timestamp of when current user last accessed this record or a related one. Not settable on creation.
MainCompetitors__cstringCustom field: Identified main competitors.
LastStageChangeDatestringRead-only. Timestamp of last StageName change. Auto-set by Salesforce.
CurrentGenerators__cstringCustom field: Information on current generators.
ForecastCategoryNamestringName of the forecast category (e.g., 'Pipeline'). API v12.0+. Often implied by StageName but can be overridden. Typically determines ForecastCategory.
HasOpportunityLineItembooleanRead-only. Indicates if associated line items (products) exist. System-managed; ignored during creation.
TotalOpportunityQuantityintegerTotal quantity of items (e.g., units, licenses). Used in quantity-based forecasting.
LastAmountChangedHistoryIdstringRead-only. ID of OpportunityHistory record tracking last Amount change (API v50.0+). Not settable on creation.
DeliveryInstallationStatus__cstringCustom field: Delivery or installation status.
LastCloseDateChangedHistoryIdstringRead-only. ID of OpportunityHistory record tracking last CloseDate change (API v50.0+). Not settable on creation.
SALESFORCE_CREATE_TASKCreates a new task in Salesforce to track activities, to-dos, and follow-ups related to contacts, leads, or other records.10 params
Creates a new task in Salesforce to track activities, to-dos, and follow-ups related to contacts, leads, or other records.
Parameters* required
statusstringStatus of the task.default: Not Started
who_idstringID of the Contact or Lead this task is associated with.default:
subjectstringSubject/title of the task.
what_idstringID of the related record (Account, Opportunity, Case, etc.) this task is associated with.default:
owner_idstringID of the user who owns the task. Defaults to current user if not specified.default:
prioritystringPriority level of the task.default: Normal
descriptionstringDetailed description or notes for the task.default:
activity_datestringDue date for the task in YYYY-MM-DD format.
is_reminder_setbooleanWhether to set a reminder for this task.default: false
reminder_date_timestringDate and time for the reminder in ISO format (YYYY-MM-DDTHH:MM:SS). Required if is_reminder_set is true.
SALESFORCE_DELETE_ACCOUNTPermanently deletes an account from Salesforce. This action cannot be undone.1 params
Permanently deletes an account from Salesforce. This action cannot be undone.
Parameters* required
account_idstringThe Salesforce ID of the account to delete.
SALESFORCE_DELETE_A_LEAD_OBJECT_BY_ITS_IDDEPRECATED: Permanently deletes an existing Lead object from Salesforce using its unique ID.1 params
DEPRECATED: Permanently deletes an existing Lead object from Salesforce using its unique ID.
Parameters* required
idstringThe unique 15-character or 18-character ID of the Lead object to be deleted. Lead object IDs typically start with the prefix '00Q'. This is a required path parameter.
SALESFORCE_DELETE_CAMPAIGNPermanently deletes a campaign from Salesforce. This action cannot be undone.1 params
Permanently deletes a campaign from Salesforce. This action cannot be undone.
Parameters* required
campaign_idstringThe Salesforce ID of the campaign to delete.
SALESFORCE_DELETE_CONTACTPermanently deletes a contact from Salesforce. This action cannot be undone.1 params
Permanently deletes a contact from Salesforce. This action cannot be undone.
Parameters* required
contact_idstringThe Salesforce ID of the contact to delete.
SALESFORCE_DELETE_LEADPermanently deletes a lead from Salesforce. This action cannot be undone.1 params
Permanently deletes a lead from Salesforce. This action cannot be undone.
Parameters* required
lead_idstringThe Salesforce ID of the lead to delete.
SALESFORCE_DELETE_NOTEPermanently deletes a note from Salesforce. This action cannot be undone.1 params
Permanently deletes a note from Salesforce. This action cannot be undone.
Parameters* required
note_idstringThe Salesforce ID of the note to delete.
SALESFORCE_DELETE_OPPORTUNITYPermanently deletes an opportunity from Salesforce. This action cannot be undone.1 params
Permanently deletes an opportunity from Salesforce. This action cannot be undone.
Parameters* required
opportunity_idstringThe Salesforce ID of the opportunity to delete.
SALESFORCE_EXECUTE_SOQL_QUERYDEPRECATED: Executes the provided SOQL query against Salesforce; the query must begin with 'SELECT'.1 params
DEPRECATED: Executes the provided SOQL query against Salesforce; the query must begin with 'SELECT'.
Parameters* required
soql_querystringThe SOQL (Salesforce Object Query Language) query to execute. Example: 'SELECT Id, Name, Email FROM Contact WHERE Name LIKE '%John%' LIMIT 10'. Make sure to follow SOQL syntax and escape single quotes properly.
SALESFORCE_FETCH_ACCOUNT_BY_ID_WITH_QUERYDEPRECATED: Use this action to retrieve a Salesforce Account by its unique ID, which must be a valid and existing Salesforce Account ID; you can optionally specify a comma-delimited list of fields to return.2 params
DEPRECATED: Use this action to retrieve a Salesforce Account by its unique ID, which must be a valid and existing Salesforce Account ID; you can optionally specify a comma-delimited list of fields to return.
Parameters* required
idstringUnique identifier (ID) of the Salesforce Account to retrieve.
fieldsstringOptional comma-delimited list of Account field names to retrieve (e.g., 'Name,BillingCity,Industry'). If unspecified, null, or empty, all accessible Account fields are returned.
SALESFORCE_FETCH_MODIFIED_OR_UNMODIFIED_SOBJECTSDEPRECATED: Fetches SObjects from `/sobjects` based on caller-set 'If-Modified-Since' (returns objects modified after a date, or 304 status if none) or 'If-Unmodified-Since' (returns objects if unmodified since a date, or 412 status if modified) HTTP headers.2 params
DEPRECATED: Fetches SObjects from `/sobjects` based on caller-set 'If-Modified-Since' (returns objects modified after a date, or 304 status if none) or 'If-Unmodified-Since' (returns objects if unmodified since a date, or 412 status if modified) HTTP headers.
Parameters* required
If-Modified-SincestringFetch sObjects modified after this RFC3339 datetime string.
If-Unmodified-SincestringFetch sObjects unmodified since this RFC3339 datetime string.
SALESFORCE_GET_ACCOUNTRetrieves a specific account by ID from Salesforce, returning all available fields.1 params
Retrieves a specific account by ID from Salesforce, returning all available fields.
Parameters* required
account_idstringThe Salesforce ID of the account to retrieve.
SALESFORCE_GET_CAMPAIGNRetrieves a specific campaign by ID from Salesforce, returning all available fields.1 params
Retrieves a specific campaign by ID from Salesforce, returning all available fields.
Parameters* required
campaign_idstringThe Salesforce ID of the campaign to retrieve.
SALESFORCE_GET_CONTACTRetrieves a specific contact by ID from Salesforce, returning all available fields.2 params
Retrieves a specific contact by ID from Salesforce, returning all available fields.
Parameters* required
fieldsstringComma-delimited string of Contact field API names to retrieve. If omitted, all fields are returned.
contact_idstringThe Salesforce ID of the contact to retrieve.
SALESFORCE_GET_DASHBOARDGets detailed metadata for a specific dashboard including its components, layout, and filters.1 params
Gets detailed metadata for a specific dashboard including its components, layout, and filters.
Parameters* required
dashboard_idstringThe Salesforce ID of the dashboard to retrieve.
SALESFORCE_GET_LEADRetrieves a specific lead by ID from Salesforce, returning all available fields.1 params
Retrieves a specific lead by ID from Salesforce, returning all available fields.
Parameters* required
lead_idstringThe Salesforce ID of the lead to retrieve.
SALESFORCE_GET_NOTERetrieves a specific note by ID from Salesforce, returning all available fields.1 params
Retrieves a specific note by ID from Salesforce, returning all available fields.
Parameters* required
note_idstringThe Salesforce ID of the note to retrieve.
SALESFORCE_GET_NOTE_BY_ID_WITH_FIELDSDEPRECATED: Retrieves a Salesforce Note object by its ID, optionally specifying which fields to return; the Note ID must exist.2 params
DEPRECATED: Retrieves a Salesforce Note object by its ID, optionally specifying which fields to return; the Note ID must exist.
Parameters* required
idstringUnique identifier (ID) of the Note object to retrieve.
fieldsstringComma-delimited API names of fields for the Note object (e.g., 'Title,Body'). If omitted, all accessible fields are retrieved.
SALESFORCE_GET_OPPORTUNITYRetrieves a specific opportunity by ID from Salesforce, returning all available fields.2 params
Retrieves a specific opportunity by ID from Salesforce, returning all available fields.
Parameters* required
fieldsstringComma-delimited string of Opportunity field API names to retrieve. If omitted, all fields are returned.
opportunity_idstringThe Salesforce ID of the opportunity to retrieve.
SALESFORCE_GET_REPORTGets detailed metadata for a specific report including its structure, columns, filters, and groupings.1 params
Gets detailed metadata for a specific report including its structure, columns, filters, and groupings.
Parameters* required
report_idstringThe Salesforce ID of the report to retrieve metadata for.
SALESFORCE_GET_REPORT_INSTANCEGets the results of a report instance created by running a report. Check status to see if report has completed.2 params
Gets the results of a report instance created by running a report. Check status to see if report has completed.
Parameters* required
report_idstringThe Salesforce ID of the report.
instance_idstringThe report instance ID returned from running a report.
SALESFORCE_GET_USER_INFORetrieves information about the current user or a specific user in Salesforce.2 params
Retrieves information about the current user or a specific user in Salesforce.
Parameters* required
user_idstringThe Salesforce User ID to retrieve information for. If not provided, returns current user info.default:
include_permissionsbooleanWhether to include user permissions in the response (requires additional API call).default: false
SALESFORCE_LIST_ACCOUNTSLists accounts from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists accounts from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch accounts. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Name, Type, Industry, Phone, Website, BillingCity, ShippingCity, AnnualRevenue, NumberOfEmployees FROM Account
SALESFORCE_LIST_CAMPAIGNSLists campaigns from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists campaigns from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch campaigns. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Name, Type, Status, StartDate, EndDate, BudgetedCost, ActualCost, ExpectedRevenue, IsActive, ParentId FROM Campaign
SALESFORCE_LIST_CONTACTSLists contacts from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists contacts from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch contacts. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, FirstName, LastName, Email, Phone, Title, Department, AccountId FROM Contact
SALESFORCE_LIST_DASHBOARDSLists all dashboards available in Salesforce with basic metadata including name, ID, and URLs.
Lists all dashboards available in Salesforce with basic metadata including name, ID, and URLs.
No parameter schema in public metadata yet.
SALESFORCE_LIST_EMAIL_TEMPLATESLists available email templates in Salesforce with filtering and search capabilities.8 params
Lists available email templates in Salesforce with filtering and search capabilities.
Parameters* required
limitintegerMaximum number of templates to return.default: 50
order_bystringField to sort results by.default: Name
folder_namestringFilter by folder name to get templates from a specific folder.default:
search_termstringSearch term to filter templates by name. Uses LIKE operator for partial matches.default:
include_bodybooleanWhether to include the template body content in results. Note: This may increase response size significantly.default: false
template_typestringFilter by template type. Common values: text, custom, html, visualforce.default:
is_active_onlybooleanWhether to return only active templates. Set to false to include inactive templates.default: true
order_directionstringSort direction: ASC for ascending, DESC for descending.default: ASC
SALESFORCE_LIST_LEADSLists leads from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists leads from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch leads. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, FirstName, LastName, Company, Title, Email, Phone, Status, LeadSource, Rating, Industry FROM Lead
SALESFORCE_LIST_NOTESLists notes from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists notes from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch notes. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Title, Body, IsPrivate, ParentId, OwnerId, CreatedDate, LastModifiedDate FROM Note
SALESFORCE_LIST_OPPORTUNITIESLists opportunities from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.1 params
Lists opportunities from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection.
Parameters* required
querystringSOQL query to fetch opportunities. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Name, StageName, CloseDate, Amount, Probability, Type, LeadSource, AccountId FROM Opportunity
SALESFORCE_LIST_PRICEBOOK_ENTRIESLists pricebook entries from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection. Use this to map product names to pricebook entry IDs needed for opportunity line items.1 params
Lists pricebook entries from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection. Use this to map product names to pricebook entry IDs needed for opportunity line items.
Parameters* required
querystringSOQL query to fetch pricebook entries. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Name, Product2Id, Pricebook2Id, UnitPrice, IsActive, ProductCode, Product2.Name FROM PricebookEntry
SALESFORCE_LIST_PRICEBOOKSLists pricebooks from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection. Use this to map pricebook names to IDs.1 params
Lists pricebooks from Salesforce using SOQL query, allowing flexible filtering, sorting, and field selection. Use this to map pricebook names to IDs.
Parameters* required
querystringSOQL query to fetch pricebooks. Use standard SOQL syntax to filter, sort, and limit results.default: SELECT Id, Name, IsActive, IsStandard, Description FROM Pricebook2
SALESFORCE_LIST_REPORTSLists all reports available in Salesforce with basic metadata including name, ID, and URLs.
Lists all reports available in Salesforce with basic metadata including name, ID, and URLs.
No parameter schema in public metadata yet.
SALESFORCE_LOG_CALLLogs a completed phone call as a task in Salesforce with call-specific details like duration, type, and disposition.8 params
Logs a completed phone call as a task in Salesforce with call-specific details like duration, type, and disposition.
Parameters* required
who_idstringID of the Contact or Lead associated with the call.default:
subjectstringSubject line for the call log. Defaults to 'Call'.default: Call
what_idstringID of the related record (Account, Opportunity, Case, etc.) associated with the call.default:
commentsstringDetailed notes or description of what was discussed during the call.default:
call_datestringDate of the call in YYYY-MM-DD format. Defaults to today if not specified.
call_typestringType of call made.default: Outbound
call_dispositionstringOutcome or result of the call.default:
call_duration_secondsintegerDuration of the call in seconds.
SALESFORCE_LOG_EMAIL_ACTIVITYCreates an EmailMessage record to log email activity in Salesforce, associating it with related records.14 params
Creates an EmailMessage record to log email activity in Salesforce, associating it with related records.
Parameters* required
statusstringStatus of the email. 0=New, 1=Read, 2=Replied, 3=Sent, 4=Forwarded, 5=Draftdefault: 3
subjectstringSubject line of the email.
html_bodystringHTML body of the email. If provided, takes precedence over text_body for display.default:
parent_idstringID of the parent record, typically a Case for case-related emails.default:
text_bodystringPlain text body of the email.default:
cc_addressstringCC email addresses (comma-separated if multiple).default:
to_addressstringEmail addresses of the recipients (comma-separated if multiple).
bcc_addressstringBCC email addresses (comma-separated if multiple).default:
is_incomingbooleanWhether this is an incoming email (true) or outgoing email (false).default: false
from_addressstringEmail address of the sender.
message_datestringDate/time the email was sent in ISO format. Defaults to current time if not provided.
related_to_idstringID of the record to associate this email with (Account, Opportunity, Case, etc.).
is_client_managedbooleanWhether the email is client-managed (not sent through Salesforce).default: true
is_externally_visiblebooleanWhether the email is visible in customer portals/communities.default: true
SALESFORCE_MASS_TRANSFER_OWNERSHIPTransfers ownership of multiple records to a new owner in a single operation using Salesforce's composite API for better performance.4 params
Transfers ownership of multiple records to a new owner in a single operation using Salesforce's composite API for better performance.
Parameters* required
record_idsarrayList of record IDs to transfer ownership.
object_typestringThe Salesforce object type for the records to transfer (e.g., Account, Contact, Lead, Opportunity).
new_owner_idstringThe user ID of the new owner to transfer records to.
send_notification_emailbooleanWhether to send email notification to the new owner about the transfer.default: false
SALESFORCE_QUERY_CONTACTS_BY_NAMEDEPRECATED: Finds Salesforce Contact records by name using a case-insensitive search.3 params
DEPRECATED: Finds Salesforce Contact records by name using a case-insensitive search.
Parameters* required
limitintegerMaximum number of contact records to return.default: 20
fieldsstringComma-separated list of Salesforce Contact object field API names to retrieve. Common field API names include: Id, Name, FirstName, LastName, Email, Phone, MobilePhone, Title, AccountId.default: Id,Name,Email,Phone,AccountId
contact_namestringThe name or partial name to search for within the 'Name' field of Salesforce Contact records. Supports partial matches (e.g., 'John' will find 'John Smith', 'John Doe', etc.).
SALESFORCE_QUERY_REPORTDEPRECATED: Executes a Salesforce report synchronously by its `id` and `reportType`, optionally with dynamic ad-hoc adjustments like filters or groupings, and returns its data without modifying the saved report.32 params
DEPRECATED: Executes a Salesforce report synchronously by its `id` and `reportType`, optionally with dynamic ad-hoc adjustments like filters or groupings, and returns its data without modifying the saved report.
Parameters* required
idstringThe unique identifier (ID) of the report to query.
namestringThe display name of the report. This is typically used for display purposes and may not be unique.
chartarrayConfiguration for the chart to be displayed with the report, if any.
scopestringDefines the scope of the data on which you run the report. For example, you can run the report against all opportunities, opportunities you own, or opportunities your team owns. Valid values depend on the report type.
sortByarrayA list of dictionaries specifying the columns and direction for sorting the report data. Each dictionary should define 'column' (API name) and 'sortOrder' ('asc' or 'desc').
bucketsarrayA list of bucket field definitions to apply to the report.
topRowsobjectLimits report output to a specified number of top or bottom rows.
currencystringSupported currency codes for reports.one of
USD · EUR · GBP · CAD · AUD · JPYdivisionstringDetermines the division of records to include in the report (e.g., West Coast, East Coast). Available only if your organization uses divisions to segment data and you have the 'Affected by Divisions' permission. If you do not have this permission, reports include records in all divisions.
folderIdstringThe ID of the folder where the report is stored. Necessary if identifying the report by `developerName` within a specific folder.
aggregatesarrayList of aggregate field identifiers to include in the report (e.g., sum of Amount as 's!Amount', average of Amount as 'a!Amount').
reportTypeobjectSpecifies the type of the report, including its unique API name (`type`) and display name (`label`). This defines the objects and fields available for reporting.
crossFiltersarrayA list of cross-object filters to apply to the report.
reportFormatstringThe desired format for the report output. Determines the structure of the data returned.one of
TABULAR · SUMMARY · MATRIX · MULTI_BLOCKdetailColumnsarrayA list of API names of the columns to include in the detail section of the report.
developerNamestringThe unique API developer name of the report being queried. This is often used to identify a saved report definition.
groupingsDownarrayA list of field groupings to be applied down rows (for summary or matrix reports).
hasDetailRowsbooleanIf true, the report output will include individual record rows (detail rows). If false, only summary data is returned.default: true
reportFiltersarrayA list of filter conditions to apply to the report data. Each filter specifies a column, operator, and value.
showSubtotalsbooleanIf true, the report output will include subtotals for groupings.default: true
hasRecordCountbooleanIf true, the report will display the total number of records.default: true
showGrandTotalbooleanIf true, the report output will include a grand total summary.default: true
groupingsAcrossarrayA list of field groupings to be applied across columns (for matrix reports).
standardFiltersarrayA list of standard filters to apply, typically specific to the `reportType`. Each filter is a dictionary with 'name' and 'value' string pairs.
standardDateFilterobjectA filter based on a standard or custom date range for a specific date field.
customDetailFormulaarrayA list of row-level (custom detail) formula definitions for the report.
presentationOptionsobjectPresentation settings for the report.
reportBooleanFilterstringA string defining the logical relationship between multiple `reportFilters`. Uses 1-based indexing for filters (e.g., '(1 AND 2) OR 3').
customSummaryFormulaarrayA list of custom summary formula definitions for the report.
historicalSnapshotDatesarrayA list of dates for which historical trending data should be retrieved. Dates should be in YYYY-MM-DD format.
userOrHierarchyFilterIdstringThe ID of a user or role used to filter the report based on role hierarchy (e.g., 'My Team's Opportunities').
allowedInCustomDetailFormulabooleanIndicates if fields used in the report are allowed in custom detail formulas.
SALESFORCE_REMOVE_ACCOUNT_BY_UNIQUE_IDENTIFIERDEPRECATED: Deletes an existing Salesforce Account using its unique ID, returning an empty response on success (HTTP 204).1 params
DEPRECATED: Deletes an existing Salesforce Account using its unique ID, returning an empty response on success (HTTP 204).
Parameters* required
idstringUnique Salesforce Account ID (typically 15 or 18 characters).
SALESFORCE_REMOVE_A_SPECIFIC_CONTACT_BY_IDDEPRECATED: Permanently deletes a specific Contact from Salesforce using its unique ID, which must correspond to an existing record.1 params
DEPRECATED: Permanently deletes a specific Contact from Salesforce using its unique ID, which must correspond to an existing record.
Parameters* required
idstringThe unique identifier (ID) of the Contact object to be deleted. This is a required path parameter. Salesforce IDs are typically 15-character case-sensitive or 18-character case-insensitive.
SALESFORCE_REMOVE_CAMPAIGN_OBJECT_BY_IDDEPRECATED: Permanently deletes a specific Campaign SObject in Salesforce using its unique ID.1 params
DEPRECATED: Permanently deletes a specific Campaign SObject in Salesforce using its unique ID.
Parameters* required
idstringThe unique Salesforce identifier (typically 18-character) of the Campaign SObject to be deleted.
SALESFORCE_REMOVE_FROM_CAMPAIGNRemoves a lead or contact from a campaign by deleting the CampaignMember record. Provide either the member_id (lead/contact ID) or the specific campaign_member_id.3 params
Removes a lead or contact from a campaign by deleting the CampaignMember record. Provide either the member_id (lead/contact ID) or the specific campaign_member_id.
Parameters* required
member_idstringThe Salesforce ID of the lead or contact to remove from the campaign. Either member_id or campaign_member_id must be provided.default:
campaign_idstringThe Salesforce ID of the campaign to remove the member from.
campaign_member_idstringThe specific CampaignMember record ID to delete. Either member_id or campaign_member_id must be provided.default:
SALESFORCE_REMOVE_NOTE_OBJECT_BY_IDDEPRECATED: Permanently deletes an existing Salesforce Note object identified by its unique ID.1 params
DEPRECATED: Permanently deletes an existing Salesforce Note object identified by its unique ID.
Parameters* required
idstringThe unique 15-character or 18-character Salesforce ID of the Note object to be deleted.
SALESFORCE_REMOVE_OPPORTUNITY_BY_IDDEPRECATED: Permanently deletes an existing Salesforce Opportunity by its ID; if the Opportunity does not exist, a 'not found' (404) error occurs.1 params
DEPRECATED: Permanently deletes an existing Salesforce Opportunity by its ID; if the Opportunity does not exist, a 'not found' (404) error occurs.
Parameters* required
idstringUnique identifier of the Salesforce Opportunity to be deleted, e.g., '001R0000005hDFYIA2'.
SALESFORCE_RETRIEVE_ACCOUNT_DATA_AND_ERROR_RESPONSESDEPRECATED: Retrieves comprehensive metadata for the Salesforce Account sObject, detailing its properties, recent records, and related resource URLs.
DEPRECATED: Retrieves comprehensive metadata for the Salesforce Account sObject, detailing its properties, recent records, and related resource URLs.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_CAMPAIGN_DATA_WITH_ERROR_HANDLINGDEPRECATED: Retrieves comprehensive information and metadata for the Salesforce Campaign sObject, provided it is enabled and accessible in the organization, and features robust error handling.
DEPRECATED: Retrieves comprehensive information and metadata for the Salesforce Campaign sObject, provided it is enabled and accessible in the organization, and features robust error handling.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_CONTACT_INFO_WITH_STANDARD_RESPONSESDEPRECATED: Retrieves comprehensive metadata (e.g., fields, data types, picklist values) for the Salesforce Contact SObject; this action does not retrieve individual contact records.
DEPRECATED: Retrieves comprehensive metadata (e.g., fields, data types, picklist values) for the Salesforce Contact SObject; this action does not retrieve individual contact records.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_LEAD_BY_IDRetrieves details for a Salesforce Lead by its ID; the specified Lead ID must exist in Salesforce.2 params
Retrieves details for a Salesforce Lead by its ID; the specified Lead ID must exist in Salesforce.
Parameters* required
idstringUnique identifier (ID) of the Salesforce Lead to retrieve.
fieldsstringComma-delimited list of Salesforce Lead field API names to return (e.g., Name,Email,Company). If omitted, all accessible fields are returned.
SALESFORCE_RETRIEVE_LEAD_DATA_WITH_VARIOUS_RESPONSESDEPRECATED: Retrieves Lead sObject data from Salesforce, such as recently viewed leads or general Lead object information.
DEPRECATED: Retrieves Lead sObject data from Salesforce, such as recently viewed leads or general Lead object information.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_NOTE_OBJECT_INFORMATIONDEPRECATED: Retrieves comprehensive metadata for the Salesforce 'Note' SObject, if it is enabled and accessible, to understand its structure and capabilities.
DEPRECATED: Retrieves comprehensive metadata for the Salesforce 'Note' SObject, if it is enabled and accessible, to understand its structure and capabilities.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_OPPORTUNITIES_DATARetrieves all available Opportunity records, representing potential revenue-generating deals, from Salesforce.
Retrieves all available Opportunity records, representing potential revenue-generating deals, from Salesforce.
No parameter schema in public metadata yet.
SALESFORCE_RETRIEVE_OPPORTUNITY_BY_ID_WITH_OPTIONAL_FIELDSDEPRECATED: Retrieves a Salesforce Opportunity by its ID; the Opportunity ID must exist.2 params
DEPRECATED: Retrieves a Salesforce Opportunity by its ID; the Opportunity ID must exist.
Parameters* required
idstringThe unique Salesforce ID of the Opportunity record to retrieve. This is a required path parameter.
fieldsstringAn optional, comma-delimited list of API names of the Opportunity fields to retrieve. If not specified, all accessible fields for the Opportunity object will be returned. This parameter is used as a query parameter in the GET request.
SALESFORCE_RETRIEVE_SPECIFIC_CAMPAIGN_OBJECT_DETAILSDEPRECATED: Retrieves details for a specific Salesforce Campaign object by its ID, optionally limiting to specified fields; the Campaign object must exist.2 params
DEPRECATED: Retrieves details for a specific Salesforce Campaign object by its ID, optionally limiting to specified fields; the Campaign object must exist.
Parameters* required
idstringThe unique identifier (ID) of the Salesforce Campaign object to retrieve. Example: '001R0000005hDFYIA2'.
fieldsstringOptional comma-delimited list of field API names for the Campaign object whose values you want to retrieve (e.g., 'name,description,numberofemployees,industry'). Field names are case-sensitive and should match Salesforce API names. If unspecified, all accessible fields are returned.
SALESFORCE_RETRIEVE_SPECIFIC_CONTACT_BY_IDRetrieves a Salesforce Contact by its unique ID; the ID must correspond to an existing Contact record in Salesforce.2 params
Retrieves a Salesforce Contact by its unique ID; the ID must correspond to an existing Contact record in Salesforce.
Parameters* required
idstringThe unique Salesforce ID of the Contact record to retrieve.
fieldsstringComma-delimited string of Contact field API names to retrieve. If omitted, a default set of fields is returned.
SALESFORCE_RUN_REPORTRuns a report and returns the results. Creates a report instance that can be checked for completion.1 params
Runs a report and returns the results. Creates a report instance that can be checked for completion.
Parameters* required
report_idstringThe Salesforce ID of the report to run.
SALESFORCE_RUN_SOQL_QUERYExecutes a SOQL query against Salesforce data. Returns records matching the query with pagination support.1 params
Executes a SOQL query against Salesforce data. Returns records matching the query with pagination support.
Parameters* required
querystringSOQL query to execute. Use standard SOQL syntax.
SALESFORCE_SEARCH_ACCOUNTSSearch for Salesforce accounts using multiple criteria like name, industry, type, location, or contact information.10 params
Search for Salesforce accounts using multiple criteria like name, industry, type, location, or contact information.
Parameters* required
namestringSearch by account name. Supports partial matches.
typestringSearch by account type.
limitintegerMaximum number of accounts to return.default: 50
phonestringSearch by phone number. Supports partial matches.
fieldsstringComma-separated list of Account fields to retrieve.default: Id,Name,Type,Industry,Phone,Website,BillingStreet,BillingCity,BillingState,BillingCountry,NumberOfEmployees,AnnualRevenue
websitestringSearch by website. Supports partial matches.
industrystringSearch by industry.
billing_citystringSearch by billing city. Supports partial matches.
billing_statestringSearch by billing state/province. Supports partial matches.
billing_countrystringSearch by billing country. Supports partial matches.
SALESFORCE_SEARCH_CAMPAIGNSSearch for Salesforce campaigns using multiple criteria like name, type, status, date range, or active status.8 params
Search for Salesforce campaigns using multiple criteria like name, type, status, date range, or active status.
Parameters* required
namestringSearch by campaign name. Supports partial matches.
typestringSearch by campaign type.
limitintegerMaximum number of campaigns to return.default: 50
fieldsstringComma-separated list of Campaign fields to retrieve.default: Id,Name,Type,Status,StartDate,EndDate,IsActive,Description,BudgetedCost,ActualCost,NumberOfContacts,NumberOfLeads
statusstringSearch by campaign status.
is_activebooleanFilter by active status. True for active campaigns, False for inactive.
start_date_tostringUpper bound for StartDate (inclusive). Use YYYY-MM-DD.
start_date_fromstringLower bound for StartDate (inclusive). Use YYYY-MM-DD.
SALESFORCE_SEARCH_CONTACTSSearch for Salesforce contacts using multiple criteria like name, email, phone, account, or title.7 params
Search for Salesforce contacts using multiple criteria like name, email, phone, account, or title.
Parameters* required
namestringSearch by contact name (first name, last name, or full name). Supports partial matches.
emailstringSearch by email address. Supports partial matches.
limitintegerMaximum number of contacts to return.default: 50
phonestringSearch by phone number. Supports partial matches.
titlestringSearch by job title. Supports partial matches.
fieldsstringComma-separated list of Contact fields to retrieve.default: Id,Name,FirstName,LastName,Email,Phone,MobilePhone,Title,AccountId,Account.Name
account_namestringSearch by associated account name. Supports partial matches.
SALESFORCE_SEARCH_LEADSSearch for Salesforce leads using multiple criteria like name, email, phone, company, title, status, or lead source.9 params
Search for Salesforce leads using multiple criteria like name, email, phone, company, title, status, or lead source.
Parameters* required
namestringSearch by lead name (first name, last name, or full name). Supports partial matches.
emailstringSearch by email address. Supports partial matches.
limitintegerMaximum number of leads to return.default: 50
phonestringSearch by phone number. Supports partial matches.
titlestringSearch by job title. Supports partial matches.
fieldsstringComma-separated list of Lead fields to retrieve.default: Id,Name,FirstName,LastName,Email,Phone,Title,Company,Status,LeadSource,CreatedDate
statusstringSearch by lead status.
companystringSearch by company name. Supports partial matches.
lead_sourcestringSearch by lead source.
mcp-servers
Source-available MCP servers by Mindstone. Works with any MCP host — Claude Desktop, Cursor, Rebel, and others.
Browse all 35 connectors with their version, auth model, and tool count at the catalogue site (regenerated from each connector's STATUS.json on every push).
Connectors
| Connector | Description |
|---|---|
| apple-shortcuts | Run and list Apple Shortcuts on macOS via the shortcuts CLI |
| browser-automation | Headless browser control via accessibility snapshots — navigate, fill forms, click, and screenshot pages via the agent-browser CLI |
| elevenlabs | Generate speech, music, and sound effects, browse voices, and transcribe audio via the ElevenLabs API |
| email-imap | Read, search, send, and manage emails through IMAP and SMTP |
| fathom | List and search meetings, view details, read transcripts, and manage teams via Fathom AI |
| freshdesk | Manage helpdesk tickets, search support requests, reply to customers, and add internal notes |
| gamma | Create AI-powered presentations, documents, webpages, and social posts via Gamma |
| google-analytics | Discover GA4 accounts and properties, explore the live schema, and run reports via the Google Analytics API |
| google-workspace | Read, search, and send across Gmail, Calendar, Drive, Docs, Sheets, Slides, Contacts, and Comments with host-orchestrated OAuth and per-account on-disk credentials |
| hubspot | Manage HubSpot CRM — contacts, companies, deals, tickets, leads, tasks, notes, properties, lists, workflows, knowledge base, and files — with multi-account, host-orchestrated OAuth |
| humaans | Query employee profiles, job roles, time-away requests, and company info via Humaans HR |
| kling | Generate AI videos from text descriptions or images via Kling AI |
| microsoft-calendar | List, create, update, and respond to Outlook calendar events, check free/busy, and list calendars; reuses the cohort's host-orchestrated Microsoft 365 OAuth surface |
| microsoft-files | List, search, upload, download, share, and read OneDrive files via Microsoft Graph; reuses the cohort's host-orchestrated Microsoft 365 OAuth surface |
| microsoft-mail | List, search, read, send, reply, forward, draft, move, and delete Outlook email; owns the cohort's host-orchestrated Microsoft 365 OAuth surface |
| microsoft-sharepoint | Discover sites, browse libraries, read pages and lists, search content, and mutate SharePoint files/lists with incremental Sites.Read.All consent |
| microsoft-teams | List and read Teams chats, send chat messages, list teams and channels, and read presence; reuses the cohort's host-orchestrated Microsoft 365 OAuth surface |
| mixmax | Manage sequences, send tracked emails, use templates, and monitor engagement via Mixmax |
| nano-banana | Generate and edit images using Google Gemini's AI capabilities |
| napkin | Generate professional visuals — diagrams, infographics, and illustrations — from text via Napkin AI |
| office | Read and edit Word documents, Excel workbooks, and PowerPoint presentations from desktop Microsoft 365 via an Office Add-in sidecar |
| openai-image | Generate and edit images via OpenAI's gpt-image-2 — sharp text rendering, multilingual support, and four quality levels |
| outreach | Manage prospects, sequences, accounts, tasks, and mailings via the Outreach sales engagement API |
| pandadoc | Create, send, and manage documents, templates, and e-signatures via PandaDoc |
| quickbooks | Manage invoices, bills, customers, vendors, employees, and accounts in QuickBooks Online |
| replit-ssh | Read, write, list, and check files on Replit projects over SSH/SFTP, with one-shot SSH key + config setup on the operator's machine |
| retell-ai | Place voice-agent phone calls, manage agents and LLM prompts, and discover voices via the Retell AI API |
| runway | Generate AI video, images, audio, speech, and sound effects via Runway ML |
| salesforce | Manage accounts, contacts, opportunities, leads, tasks, users, and custom objects via the Salesforce API |
| servicenow | Manage incidents, change requests, users, and knowledge base articles in ServiceNow |
| slack | Multi-workspace Slack — channels, messages, threads, reactions, users, files, bookmarks, and scheduled messages via the Slack Web API, with host-orchestrated OAuth |
| talentlms | Manage users, courses, groups, branches, enrolments, and assessments in TalentLMS |
| vanta | Read and manage compliance posture in Vanta — vulnerabilities, tests, controls, evidence, resources, people, vendors, documents, and compliance summary |
| workday | Query workers, profiles, and organizations in Workday HCM |
| zendesk | Manage tickets, macros, users, and views in Zendesk Support |
Quick Start
Each server builds independently:
cd connectors/<name>
npm install
npm run build
Or run directly via npx (once published):
npx -y @mindstone/mcp-server-zendesk
Moving from
@mindstone-engineering/? Every server has been republished under the shorter@mindstone/npm scope. The legacy@mindstone-engineering/mcp-server-*packages still install but are marked deprecated. See MIGRATION.md for the consumer one-liner and the deprecation timeline.
See each server's README for configuration and host setup instructions. Some connectors require additional environment variables to opt into specific behaviour (e.g. QB_ALLOW_PROD_WRITES for QuickBooks production writes, MCP_WORKSPACE_PATH for sandboxed file reads, BROWSER_AUTOMATION_ALLOW_EVAL for browser-automation script eval) — see the per-connector READMEs for the full list.
Security & Hardening
This monorepo follows a defence-in-depth posture for tool-call hosts. Highlights include:
- Workflow safety. GitHub Actions workflows are env-fy'd against script injection (CWE-94), every action is pinned to a commit SHA (kept current by Dependabot), and each job is granted a least-privilege
permissions:block. Publish is split into a build job (does the install/test/pack with no publish credentials) and a publish job (downloads the packed tarball, runs onlynpm publish --ignore-scripts --provenanceunder OIDC trusted publishing, gated by thenpm-publishenvironment). The publish job invokes NO third-party JS —tsc,vitest, lifecycle scripts, etc. all run upstream, away fromid-token: write. See docs/security/AUDIT_FOX-3319_tanstack_supply_chain.md for the supply-chain threat model and docs/security/BRANCH_PROTECTION.md for required GitHub settings. - Release-age cool-down. The repo-level
.npmrcsetsmin-release-age=7(days), so CI refuses to install dependency versions published in the last week. This blocks the "same-day malicious re-publish" path that ships post-npm audit-clean PRs into a release tag. - Provenance-attested releases. Releases are published by CI (
.github/workflows/release.yml) under the@mindstone/npm scope via Trusted Publishing OIDC — no long-lived npm token exists anywhere — with--provenanceSigstore attestations consumers can verify vianpm audit signatures. Every publishable release commit must carry aRelease-Gatetrailer pointing at its pre-release security review, and every publish posts an alert; the full gate chain is in docs/PUBLISH_APPROVAL_PROCESS.md. (Only a brand-new connector's first publish is manual and WebAuthn-gated; those tarballs carry no provenance attestation but remain shasum-verifiable — check out the release commit and runnpm pack; see MIGRATION.md.) - OpenSSF Scorecard. The repo runs the OpenSSF Scorecard weekly via
.github/workflows/scorecard.yml. The report is generated by a third party from the source tree, so every claim above (action pinning, branch protection, token usage, dependency hygiene) is independently checked rather than just asserted here. The current score is shown by the badge at the top of this README.
Recommendations for consumers
These connectors are published as plain npm packages. The strongest single thing you can do to protect yourself from a future supply-chain compromise of any npm package (these or otherwise) is to use a client that does not run lifecycle scripts by default:
- pnpm (
pnpm install/pnpm dlx) — does not executepostinstall/preparehooks unless explicitly allowlisted viaonlyBuiltDependencies. pnpm v11+ also defaults to a 24-hourminimumReleaseAgecool-down. - bun (
bunx) — same default, no lifecycle scripts unless allowlisted. - npm — if you must use npm, set
min-release-age=7andignore-scripts=truein your global~/.npmrc. Requires npm v11.10+ formin-release-age.
None of our published packages need postinstall to function, so disabling lifecycle scripts in your installer of choice is safe.
- Untrusted-content envelopes. External content from email, helpdesk, and ticketing systems (email-imap, freshdesk, zendesk) is wrapped in
<untrusted-content source="...">envelopes with close-tag breakout escaping, so an LLM host can recognise and refuse instruction-injection attempts. - Workspace sandboxing. File-uploading connectors (nano-banana, pandadoc, elevenlabs) constrain reads to
MCP_WORKSPACE_PATH(oros.tmpdir()) with canonical-prefix containment that handles symlinked roots like/tmp→/private/tmp. - Secure-by-default writes. Production-impacting writes (QuickBooks invoices/bills/customers/vendors) require an explicit
QB_ALLOW_PROD_WRITES=1opt-in env var; outreach prospect-enrolment and mixmax sequence-recipient tools carrydestructiveHint: trueso hosts surface confirmation prompts. - SSRF & path traversal. Download connectors (napkin, runway) enforce host allow-lists, manual-redirect handling, and symlink-safe write paths under a configurable root.
- Loopback OAuth bind. Connectors with local OAuth callback servers (salesforce, outreach) hard-code 127.0.0.1, ignoring any
MCP_OAUTH_BIND_HOSToverride. - E.164 validation. Outbound phone-call tools (retell-ai) reject non-E.164 numbers before any upstream API call.
For per-connector security notes, see each connector's README.
To report a vulnerability, please see SECURITY.md.
The Mindstone open-source family
This repo is one of several open-source projects from Mindstone:
- Rebel — the AI workspace desktop app that ships these connectors out of the box (source release in progress).
- Super-MCP — a proxy MCP router that loads only the tools you actually need, saving your context window.
- rebel-system — the public Rebel system: skills, prompts, operators, help docs, and templates.
- meeting-note-recorder — meeting detection, recording, and live transcripts (the Rebel note-taker).
Licence
Each connector is licensed under FSL-1.1-MIT — see the LICENSE file in each connector directory for details.
Featured
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →Configuration
SALESFORCE_CLIENT_ID*Salesforce Connected App client ID (recommended path)
SALESFORCE_CLIENT_SECRET*secretSalesforce Connected App client secret (recommended path)
SALESFORCE_SANDBOXSet to true for sandbox environments
SALESFORCE_ACCESS_TOKENsecretStatic access token (alternative to OAuth)
SALESFORCE_INSTANCE_URLSalesforce instance URL (required for manual token mode)
SALESFORCE_CONFIG_DIRdefault: ~/.mcp/salesforceCustom config directory
SALESFORCE_OAUTH_PORTdefault: 0OAuth callback port (0 = OS-assigned)
SALESFORCE_OAUTH_SCOPESSpace-separated OAuth scopes
Categories
Registryactive
Package@mindstone/mcp-server-salesforce
TransportSTDIO
AuthRequired
UpdatedMay 21, 2026
