Salesforce Metadata MCP Server
salesforce-metadata-mcp
npm
v3.0.0
Published by semwalajay83-sem — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The only Salesforce MCP with Agentforce, OmniStudio & DevOps Center tools — 219 tools total: objects, flows, Apex (create + read), schema describe, debug logs, permissions, reports, Experience Cloud, Einstein AI.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 2
high Tool "sf_run_code_scanner" exposes command/code executionMTC-CAP-001
Tool "sf_run_code_scanner" appears to run shell commands or evaluate code (keyword "run_code" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool sf_run_code_scanner
low Mutating tool "sf_run_code_scanner" declares no destructiveHintMTC-CAP-005
Tool "sf_run_code_scanner" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool sf_run_code_scanner
Tools 200
Each tool and what it can reach — statically extracted from the published source.
sf_create_email_alertnetwork egresssf_create_messaging_channelnetwork egresssf_get_event_logsnetwork egresssf_run_code_scannerruns code / shellsf_send_emailnetwork egresshello_worldno sensitive capabilitysf_activate_flexcardno sensitive capabilitysf_activate_flowno sensitive capabilitysf_activate_integration_procedureno sensitive capabilitysf_activate_omniscriptno sensitive capability
Show 190 more tools ↓
sf_add_picklist_valuesno sensitive capabilitysf_add_to_change_setno sensitive capabilitysf_assign_layout_to_record_typeno sensitive capabilitysf_assign_presence_statusno sensitive capabilitysf_assign_queue_memberno sensitive capabilitysf_assign_skill_to_agentno sensitive capabilitysf_assign_territory_to_userno sensitive capabilitysf_bulk_delete_recordsno sensitive capabilitysf_bulk_import_recordsno sensitive capabilitysf_bulk_insert_recordsno sensitive capabilitysf_bulk_update_recordsno sensitive capabilitysf_check_code_coverageno sensitive capabilitysf_check_deploy_statusno sensitive capabilitysf_check_devops_commit_statusno sensitive capabilitysf_checkout_devops_work_itemno sensitive capabilitysf_commit_devops_work_itemno sensitive capabilitysf_create_agentno sensitive capabilitysf_create_agent_actionno sensitive capabilitysf_create_agent_plannerno sensitive capabilitysf_create_agent_topicno sensitive capabilitysf_create_apex_classno sensitive capabilitysf_create_apex_email_serviceno sensitive capabilitysf_create_apex_test_classno sensitive capabilitysf_create_apex_triggerno sensitive capabilitysf_create_approval_processno sensitive capabilitysf_create_assignment_ruleno sensitive capabilitysf_create_aura_appno sensitive capabilitysf_create_aura_componentno sensitive capabilitysf_create_aura_eventno sensitive capabilitysf_create_auth_providerno sensitive capabilitysf_create_auto_response_ruleno sensitive capabilitysf_create_bot_routingno sensitive capabilitysf_create_business_hoursno sensitive capabilitysf_create_business_processno sensitive capabilitysf_create_calculation_matrixno sensitive capabilitysf_create_calculation_procedureno sensitive capabilitysf_create_chat_buttonno sensitive capabilitysf_create_connected_appno sensitive capabilitysf_create_connected_app_oauth_policyno sensitive capabilitysf_create_csp_settingno sensitive capabilitysf_create_custom_applicationno sensitive capabilitysf_create_custom_buttonno sensitive capabilitysf_create_custom_fieldno sensitive capabilitysf_create_custom_labelno sensitive capabilitysf_create_custom_metadata_recordno sensitive capabilitysf_create_custom_metadata_typeno sensitive capabilitysf_create_custom_objectno sensitive capabilitysf_create_custom_settingno sensitive capabilitysf_create_custom_tabno sensitive capabilitysf_create_data_categoryno sensitive capabilitysf_create_dataraptorno sensitive capabilitysf_create_devops_pull_requestno sensitive capabilitysf_create_document_generationno sensitive capabilitysf_create_duplicate_ruleno sensitive capabilitysf_create_einstein_botno sensitive capabilitysf_create_einstein_predictionno sensitive capabilitysf_create_embedded_serviceno sensitive capabilitysf_create_entitlement_processno sensitive capabilitysf_create_escalation_ruleno sensitive capabilitysf_create_experience_pageno sensitive capabilitysf_create_experience_siteno sensitive capabilitysf_create_external_client_appno sensitive capabilitysf_create_external_data_sourceno sensitive capabilitysf_create_external_id_fieldno sensitive capabilitysf_create_external_objectno sensitive capabilitysf_create_field_dependencyno sensitive capabilitysf_create_field_setno sensitive capabilitysf_create_field_updateno sensitive capabilitysf_create_flexcardno sensitive capabilitysf_create_flexipageno sensitive capabilitysf_create_flowno sensitive capabilitysf_create_flow_from_xmlno sensitive capabilitysf_create_forecast_hierarchyno sensitive capabilitysf_create_formula_fieldno sensitive capabilitysf_create_global_actionno sensitive capabilitysf_create_global_value_setno sensitive capabilitysf_create_holidayno sensitive capabilitysf_create_integration_procedureno sensitive capabilitysf_create_knowledge_article_typeno sensitive capabilitysf_create_letterheadno sensitive capabilitysf_create_lwcno sensitive capabilitysf_create_lwc_from_requirementsno sensitive capabilitysf_create_lwc_jest_testno sensitive capabilitysf_create_matching_ruleno sensitive capabilitysf_create_mcp_serverno sensitive capabilitysf_create_mcp_toolno sensitive capabilitysf_create_milestoneno sensitive capabilitysf_create_next_best_actionno sensitive capabilitysf_create_notification_typeno sensitive capabilitysf_create_omniscriptno sensitive capabilitysf_create_outbound_change_setno sensitive capabilitysf_create_outbound_messageno sensitive capabilitysf_create_packageno sensitive capabilitysf_create_package_versionno sensitive capabilitysf_create_page_layoutno sensitive capabilitysf_create_path_assistantno sensitive capabilitysf_create_platform_eventno sensitive capabilitysf_create_platform_event_triggerno sensitive capabilitysf_create_presence_configurationno sensitive capabilitysf_create_presence_statusno sensitive capabilitysf_create_price_bookno sensitive capabilitysf_create_productno sensitive capabilitysf_create_public_groupno sensitive capabilitysf_create_queue_routing_configno sensitive capabilitysf_create_quick_actionno sensitive capabilitysf_create_recordno sensitive capabilitysf_create_record_typeno sensitive capabilitysf_create_remote_site_settingno sensitive capabilitysf_create_reportno sensitive capabilitysf_create_report_folderno sensitive capabilitysf_create_routing_configurationno sensitive capabilitysf_create_saml_sso_configno sensitive capabilitysf_create_scheduled_flowno sensitive capabilitysf_create_scheduled_jobno sensitive capabilitysf_create_scratch_orgno sensitive capabilitysf_create_search_layoutno sensitive capabilitysf_create_service_channelno sensitive capabilitysf_create_service_territoryno sensitive capabilitysf_create_sharing_ruleno sensitive capabilitysf_create_skillno sensitive capabilitysf_create_territoryno sensitive capabilitysf_create_userno sensitive capabilitysf_create_user_role_hierarchyno sensitive capabilitysf_create_validation_ruleno sensitive capabilitysf_create_work_typeno sensitive capabilitysf_create_workflow_field_updateno sensitive capabilitysf_create_workflow_ruleno sensitive capabilitysf_deactivate_flowno sensitive capabilitysf_delete_metadatano sensitive capabilitysf_delete_recordno sensitive capabilitysf_delete_scratch_orgno sensitive capabilitysf_deploy_metadatano sensitive capabilitysf_describe_objectno sensitive capabilitysf_detect_devops_merge_conflictno sensitive capabilitysf_devops_create_work_itemno sensitive capabilitysf_devops_promote_work_itemno sensitive capabilitysf_disable_debug_logsno sensitive capabilitysf_enable_debug_logsno sensitive capabilitysf_execute_anonymous_apexno sensitive capabilitysf_explore_slds_blueprintsno sensitive capabilitysf_export_omnistudio_componentno sensitive capabilitysf_export_recordsno sensitive capabilitysf_freeze_userno sensitive capabilitysf_get_apex_classno sensitive capabilitysf_get_apex_test_resultsno sensitive capabilitysf_get_apex_triggerno sensitive capabilitysf_get_dataraptorno sensitive capabilitysf_get_debug_log_bodyno sensitive capabilitysf_get_debug_logsno sensitive capabilitysf_get_deployment_historyno sensitive capabilitysf_get_field_historyno sensitive capabilitysf_get_flexcardno sensitive capabilitysf_get_flow_errorsno sensitive capabilitysf_get_integration_procedureno sensitive capabilitysf_get_login_historyno sensitive capabilitysf_get_metadata_dependenciesno sensitive capabilitysf_get_omniscriptno sensitive capabilitysf_get_org_limitsno sensitive capabilitysf_get_recordno sensitive capabilitysf_get_setup_audit_trailno sensitive capabilitysf_guide_lwc_accessibilityno sensitive capabilitysf_import_omnistudio_componentno sensitive capabilitysf_install_packageno sensitive capabilitysf_list_devops_projectsno sensitive capabilitysf_list_devops_work_itemsno sensitive capabilitysf_list_flow_versionsno sensitive capabilitysf_list_mcp_toolsno sensitive capabilitysf_list_objectsno sensitive capabilitysf_migrate_aura_to_lwcno sensitive capabilitysf_promote_devops_work_itemno sensitive capabilitysf_query_recordsno sensitive capabilitysf_reset_user_passwordno sensitive capabilitysf_resolve_devops_merge_conflictno sensitive capabilitysf_retrieve_metadatano sensitive capabilitysf_run_apex_testsno sensitive capabilitysf_scan_apex_antipatternsno sensitive capabilitysf_search_recordsno sensitive capabilitysf_translate_custom_labelno sensitive capabilitysf_translate_field_labelno sensitive capabilitysf_uninstall_packageno sensitive capabilitysf_update_custom_fieldno sensitive capabilitysf_update_custom_objectno sensitive capabilitysf_update_dashboardno sensitive capabilitysf_update_flexcardno sensitive capabilitysf_update_integration_procedureno sensitive capabilitysf_update_lwcno sensitive capabilitysf_update_omniscriptno sensitive capabilitysf_update_recordno sensitive capabilitysf_update_userno sensitive capabilitysf_upsert_recordno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 7
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v3.0.0 latest |
A 93/100 | 2 | 1.13.0 | 2026-09-07 |
v2.12.0 |
A 93/100 | 2 | 1.13.0 | 2026-09-01 |
v2.11.2 |
A 93/100 | 2 | 1.12.1 | 2026-08-10 |
v2.8.7 |
B 87/100 | 4 | 1.12.1 | 2026-08-06 |
v2.8.0 |
B 87/100 | 4 | 1.12.1 | 2026-07-31 |
Show 2 more versions ↓
v2.7.0 |
B 87/100 | 2 | 1.12.1 | 2026-07-29 |
v2.6.7 |
A 94/100 | 2 | 1.5.0 | 2026-07-22 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan salesforce-metadata-mcp --onlineMore in Business & CRM
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
MCP server for B2C Commerce developer experience tools
Search, compare and contact real-world companies through a public MCP business directory.
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.