43
/ 100
1 month ago
glama

sfgraph

A local, privacy-first knowledge graph for Salesforce orgs. It live-syncs your org to a SQLite + vector index on your machine and exposes 26 MCP tools to Cursor, Claude Code/Desktop, and VS Code, so the AI you already use can reason about Apex, LWC, Flow, Vlocity, OmniStudio, security, and integrations without your code or schema ever leaving your laptop.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies1 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configSFGRAPH_ALLOW_ANY_DBbool (1) unset Bypass the "graph DB must live under data dir" safety check. 1.0
configSFGRAPH_APEX_PARSERstring regex Apex class parser strategy (regex is the default; other values reserved). 1.0
configSFGRAPH_AUTO_RETRY_THRESHOLDint 10 Skip-count threshold above which ingest auto-retries the wedged sources. 1.0
configSFGRAPH_BISECT_MAX_DEPTHint 6 Tooling SOQL adaptive bisection depth cap. 1.0
configSFGRAPH_DATA_POOLint varies Data API pool concurrency. 1.0
configSFGRAPH_DEBUG_INGESTbool (1) unset Verbose ingest logging (per-source counters, dispatch table, etc.). 1.0
configSFGRAPH_DEBUG_POOLSbool (1) unset Print pool-counter snapshots during ingest. 1.0
configSFGRAPH_DETECT_DELETIONS_MAX_DROP_RATIOfloat 0.30 Per-label drop-ratio threshold above which --detect-deletions sweep refuses to act. 1.5
configSFGRAPH_EMBED_MODEL_DIMint model default Embedding model dimensionality override. 1.0
configSFGRAPH_EMBED_MODEL_IDstring model default Embedding model identifier override. 1.0
configSFGRAPH_EMBED_MODEL_PATHpath (auto) Local path to a custom embedding model file. 1.0
configSFGRAPH_GENERIC_WHITELIST_ONLY
configSFGRAPH_INCLUDE_ALL_SOBJECTSbool (1) unset Skip the EntityDefinition.IsCustomizable filter and include every queryable SObject. 1.0
configSFGRAPH_INCLUDE_MANAGEDbool (1) unset Include managed-namespace components globally (Apex body, generic metadata, LWC source). 1.0
configSFGRAPH_INCLUDE_MANAGED_LWCbool (1) unset LWC-only override for managed-namespace inclusion (independent of the global flag). 1.0
configSFGRAPH_INCLUDE_SYSTEM_SOBJECTSbool (1) unset Include platform telemetry SObjects (ApexLog, EventLogFile, etc.). 1.0
configSFGRAPH_LATE_DRAIN_BUDGET_MSint (ms) (impl default) Per-wedge late-yield drain budget — how long the background runner gets to drain late records before being abandoned. 1.5
configSFGRAPH_MAX_BACKGROUND_WEDGESint 4 Cap on simultaneous background wedges per ingest. 1.5
configSFGRAPH_METADATA_POOLint varies Metadata API pool concurrency. 1.0
configSFGRAPH_METADATA_READ_CHUNK_SIZEint 10 metadata.read composite batch size. 1.0
configSFGRAPH_NO_AUTO_RETRYbool (1) unset Disable automatic retry on watchdog wedge / skip cascade. 1.0
configSFGRAPH_NO_LIVENESS_PROBEbool (1) unset Skip the pre-ingest liveness probe. 1.0
configSFGRAPH_SEQUENTIAL_SOURCESbool (1) unset Force serial source execution (debug aid; bypasses the sliding-window merger). 1.0
configSFGRAPH_SKIP_LWCcsv unset Skip specific LWC bundle DeveloperNames (also accepts 1 to skip the source entirely). 1.0
configSFGRAPH_SKIP_SOBJECTcsv unset Skip specific SObjects by QualifiedApiName (escape hatch for describe()-crashing tables). 1.0
configSFGRAPH_SKIP_THRESHOLDint (impl default) Skip-count threshold for ingest-level retry/abort behavior. 1.0
configSFGRAPH_SOURCE_CONCURRENCYint 12 Concurrency of the sliding-window source merger in bulk-retrieve.ts. 1.0
configSFGRAPH_TOOLING_POOLint 5 Tooling API pool concurrency. 1.0
configSFGRAPH_TRAVERSAL_NODE_CAPint (impl default) Cap on nodes visited by dependents / dependencies traversal in the analysis layer. 1.0
configSFGRAPH_WATCHDOG_FIRST_YIELD_MSint (ms) 90000 Per-source first-yield watchdog timeout. 1.5
configSFGRAPH_WATCHDOG_INACTIVITY_MSint (ms) 300000 Per-source inactivity watchdog timeout (5 min). 1.5
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/ryanstark24-sfgraph-poger5)](https://m8ven.ai/mcp/ryanstark24-sfgraph-poger5)
commit: 0cd07b7d70717ba2de8d83dd3daccb4ef99a61c6
code hash: df629a8a2e3f119f0be61fc722d3577db36d1ebe1813945724f63fc9ab9fcc7f
verified: 6/18/2026, 11:26:14 AM
view raw JSON →