--- title: "Salesforce MCP server · Connect AI agents to Salesforce" description: "Connect inference.eu agents to Salesforce Hosted MCP Servers to query and update records with each user's own permissions, sharing rules and field security." canonical: "https://inference.eu/connect/salesforce/" language: "en" --- MCP servers · CRM and sales # Salesforce MCP server: connect AI agents to Salesforce from the EU Salesforce offers Hosted MCP Servers that let agents work with data in your Salesforce org through a set of standard servers, each with its own scope. Admins enable them and decide which are available. inference.eu agents connect with OAuth per user, so every call respects that user's permissions, sharing rules and field-level security. [Contact sales](https://inference.eu/contact/)[What agents can do with it](#tools) 1. 01Authentication: OAuth 2. 02Official server 3. 03EU data centres ## What agents can do with it - 1 ### Read records The SObject Reads server lets agents query and read standard and custom objects such as accounts, contacts, opportunities and cases, within what the signed-in user may see. - 2 ### Create and update records The SObject Mutations server creates and updates records, and the separate SObject Deletes server removes them, so you can give an agent write access without delete access. - 3 ### Analytics and Data 360 Further standard servers cover areas such as Data 360 and CRM Analytics, letting agents query unified customer data and analytics datasets where your org licenses them. ## What Salesforce and its MCP servers are Salesforce, based in San Francisco, makes the CRM used by many large European companies for sales, service and marketing. Each company works in its own Salesforce org, with custom objects, fields and permissions. Salesforce Hosted MCP Servers are run by Salesforce for your org. Rather than one server, there are several standard servers with defined scopes: SObject All, SObject Reads, SObject Mutations and SObject Deletes for record data, plus servers for Data 360, CRM Analytics and other areas. They are disabled by default. An admin enables the ones the organisation wants, which makes it simple to offer read-only access first. ## What agents can do with Salesforce An account agent can prepare for a quarterly review by reading the account, open opportunities, recent cases and contacts, and summarising risks and next steps. After a meeting, it can update the opportunity stage and next step once a person confirms. Service teams can have an agent read a new case, find similar resolved cases and suggest an answer. Sales operations can ask "which opportunities over 50,000 euros have not been updated in 30 days?" and get a list with owners and links. ## Setup and authentication A Salesforce admin enables the hosted MCP servers the organisation wants and configures the connected app or external client app the agent uses. Choosing SObject Reads alone is a sensible first step. Add the Salesforce connector on inference.eu, choose the server, and each user signs in to Salesforce through OAuth. The agent then acts as that user. Tokens are stored encrypted in the EU and used only by the agents you allow. Admins can revoke OAuth tokens and turn servers off in Salesforce Setup at any time. ## Data protection and where the data goes Records are fetched from Salesforce's own hosted MCP servers, so data stays with Salesforce, a US company, as it does for your other Salesforce integrations. Orgs running on Hyperforce in an EU region keep their data stored there. On inference.eu, the model that reads and writes your CRM data runs in EU data centres, and your Salesforce credentials are stored encrypted in the EU. Because Salesforce applies field-level security and sharing to every call, sensitive fields hidden from a user stay hidden from the agent acting for them. ## Approvals and safe use CRM updates trigger flows, assignment rules and notifications, and deletes remove records other teams depend on. Splitting reads, mutations and deletes into separate servers lets you choose exactly what an agent may do. On inference.eu you can let queries run on their own and require a person's approval before an agent creates or updates a record. The approval shows the object, record and fields that will change. For most agents, leave the SObject Deletes server off entirely; if you need it, require approval for every delete. ## Salesforce Vendor Salesforce, Inc. Vendor based in United States Category CRM and sales Authentication OAuth Transport Remote (HTTP) Server [Official server](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/hosted-mcp-servers-overview.html) Documentation [developer.salesforce.com](https://developer.salesforce.com/docs/platform/hosted-mcp-servers/guide/hosted-mcp-servers-overview.html) ## Salesforce: common questions The questions buyers, developers and legal teams ask us most. Something missing? Ask us directly. Yes. Salesforce offers Hosted MCP Servers, run by Salesforce and documented on its developer site. There are several standard servers, such as SObject Reads, Mutations and Deletes, Data 360 and CRM Analytics, which an admin enables for the org. Query and read records, create and update records, delete records, and work with Data 360 and CRM Analytics, depending on which standard servers your admin enables. Every call respects the signed-in user's permissions and sharing rules. Each standard server has a defined scope, so admins can grant exactly the access an agent needs. You might enable SObject Reads for a research agent and add Mutations for an agent that updates opportunities, without ever allowing deletes. Your Salesforce admin enables the hosted MCP servers and configures the app. Add the Salesforce connector on inference.eu, choose the server and sign in through OAuth. Tokens are stored encrypted in the EU and used only by the agents you allow. Yes. The hosted servers act as the signed-in user, so Salesforce applies that user's profile, permission sets, field-level security and sharing rules. Fields and records hidden from the user are hidden from the agent too. No. Hosted MCP servers are disabled by default. An admin must enable each server the organisation wants to use, and can disable it again at any time. Nothing is reachable until that happens. Yes. Enable only the SObject Reads server for that agent. It can then query and read records but has no tools to create, update or delete them, whatever it is asked. Salesforce serves data from its own infrastructure, in an EU region for orgs on Hyperforce in Europe. The model on inference.eu that reads it runs in EU data centres, and your Salesforce credentials are stored encrypted in the EU. [Ask a question](https://inference.eu/contact/) ## Related [All MCP servers](https://inference.eu/connect/#directory) - [HubSpotConnect inference.eu agents to HubSpot's official remote MCP server to search, read and update contacts, companies, deals and tickets in your CRM.CRM and sales](https://inference.eu/connect/hubspot/) - [SlackConnect inference.eu agents to Slack's official MCP server. Search messages and files, read channels and threads, post updates and edit canvases with admin approval.Communication](https://inference.eu/connect/slack/) - [StripeConnect inference.eu agents to Stripe's official MCP server to look up customers and payments, create invoices and payment links, and search Stripe docs.Banking and payments](https://inference.eu/connect/stripe/) ## Move your AI workloads to EU infrastructure Tell us which models you use and roughly how much traffic you have. We reply within one working day with pricing and next steps. - Reply within one working day - Pricing for your volume - DPA ready to sign