56
grade D
3 days ago
glama
Salesforce Metadata-Aware RAG MCP
Enables AI copilots to understand and query Salesforce org configurations through intelligent metadata chunking and semantic search. Provides access to Apex classes, custom objects, flows, layouts, and other metadata with hybrid vector and keyword search capabilities.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 7 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 3 credentials: SF_CLIENT_SECRET, SF_PASSWORD, SF_SECURITY_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
HOSTconfig
LOG_LEVEL— "": "error"config
PORT— Server port (default: 3000)config
SF_AUTH_METHODconfig
SF_CLIENT_ID🔐 secret
SF_CLIENT_SECRETconfig
SF_LOGIN_URL— "https://test.salesforce.com" # Use for sandbox🔐 secret
SF_PASSWORD— "your_password"config
SF_PRIVATE_KEY_PATH🔐 secret
SF_SECURITY_TOKEN— "your_security_token"config
SF_USERNAME— "your_username@company.com"// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/eddywebs-sfdxmcp-8hng5d)commit: e0f19e42e9c7d8ada13eae32c7d2c7664edf5955
code hash: 73c51068c419eeac7fc712935d9522516cca36c6d0158713076e1e981e12ccf8
verified: 4/18/2026, 6:46:57 PM