salesforce.com
Salesforce is a cloud CRM and application platform for managing customer data, workflows, and business applications. Organizations use it to build and run custom apps, automate processes, and integrate with Salesforce data and services.
Salesforce exposes a tenant-scoped GraphQL API, Salesforce-hosted MCP servers, and the `sf` CLI; all documented developer surfaces found require Salesforce OAuth-based authentication.
- Salesforce Hosted MCP Serversdiscovered
- Salesforce GraphQL APIdiscovered
- Salesforce CLIdiscovered
Create an External Client App in Salesforce Setup via Exercise 1: Configure Salesforce MCP Servers or use a custom connected app as described in org login web. Enable OAuth and grant the scopes your integration needs. For hosted MCP access, the docs show the mcp_api scope; for long-lived access they also show refresh_token / offline_access. Use your org My Domain URL like https://<MyDomainName>.my.salesforce.com as the Salesforce instance for authorization flows.
Get an API access token using Salesforce OAuth 2.0. The easiest path in the docs is the quick start in Connect Altair GraphQL Client to Salesforce, which says GraphQL uses OAuth 2.0 and recommends authenticating via Salesforce CLI for quick starts; for production apps, create your own external client app and use an OAuth flow that fits your app. The token is then sent as Authorization: Bearer <access_token>.
$ sf org login webAcquired by the CLI — running sf org login web opens the auth flow and stores the credential.
conventions · 1/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://salesforce.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing