Can I use Salesforce as a CLI?

Yes. KosmoKrator exposes a Salesforce CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose Salesforce through MCP?

Yes. The KosmoKrator MCP gateway can expose selected Salesforce tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are Salesforce credentials stored?

Salesforce credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for Salesforce MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

Salesforce MCP Gateway for AI Agents

Expose Salesforce tools to Claude Code, Cursor, Codex, and other MCP clients through the local KosmoKrator MCP gateway.

18 functions 10 read 8 write Manual OAuth token auth

Submit Salesforce feedback View package source

Salesforce MCP Gateway

Expose Salesforce to MCP clients with `kosmokrator mcp:serve --integration=salesforce`.

If the client has never used KosmoKrator before, install it first, then register this integration as a stdio MCP server. The gateway exposes only the selected integration in the example below.

curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

kosmokrator mcp:gateway:install --integration=salesforce --write=deny --json

{
  "mcpServers": {
    "kosmokrator-salesforce": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=salesforce",
        "--write=deny"
      ]
    }
  }
}

Serve Manually

kosmokrator mcp:serve --integration=salesforce --write=deny

MCP Tool Names

KosmoKrator exposes integration tools through the gateway with stable names:

MCP Tool Names (18 tools)

MCP tool	Source function	Type
`integration__salesforce__salesforce_create_lead`	`salesforce.salesforce_create_lead`	Write `write`
`integration__salesforce__salesforce_get_lead`	`salesforce.salesforce_get_lead`	Read `read`
`integration__salesforce__salesforce_update_lead`	`salesforce.salesforce_update_lead`	Write `write`
`integration__salesforce__salesforce_create_contact`	`salesforce.salesforce_create_contact`	Write `write`
`integration__salesforce__salesforce_get_contact`	`salesforce.salesforce_get_contact`	Read `read`
`integration__salesforce__salesforce_create_account`	`salesforce.salesforce_create_account`	Write `write`
`integration__salesforce__salesforce_get_account`	`salesforce.salesforce_get_account`	Read `read`
`integration__salesforce__salesforce_update_account`	`salesforce.salesforce_update_account`	Write `write`
`integration__salesforce__salesforce_create_opportunity`	`salesforce.salesforce_create_opportunity`	Write `write`
`integration__salesforce__salesforce_get_opportunity`	`salesforce.salesforce_get_opportunity`	Read `read`
`integration__salesforce__salesforce_query`	`salesforce.salesforce_query`	Read `read`
`integration__salesforce__salesforce_search`	`salesforce.salesforce_search`	Read `read`
`integration__salesforce__salesforce_describe_object`	`salesforce.salesforce_describe_object`	Read `read`
`integration__salesforce__salesforce_list_objects`	`salesforce.salesforce_list_objects`	Read `read`
`integration__salesforce__salesforce_create_task`	`salesforce.salesforce_create_task`	Write `write`
`integration__salesforce__salesforce_create_case`	`salesforce.salesforce_create_case`	Write `write`
`integration__salesforce__salesforce_list_recent`	`salesforce.salesforce_list_recent`	Read `read`
`integration__salesforce__salesforce_get_user`	`salesforce.salesforce_get_user`	Read `read`

Write Access

Start with --write=deny for read-only MCP clients. Use --write=ask or --write=allow only when the client and workspace are trusted.