Salesforce Headless 360
Headless Salesforce org admin & integration via a discover/describe/dispatch meta-tool surface — users, Apex deploy, platform events, CDC, named credentials — governed by the org security model.
Overview
Headless 360 is Salesforce's hosted MCP server for headless setup and integration. Instead of thousands of per-capability tools, it presents an agent with four meta-tools — discover, describe, dispatch, and dispatch_readonly — that fan out to ~100 skills covering user management, Apex trigger deployment, platform events, Change Data Capture, and named-credential configuration.
Ferentin Integration
Runs on Salesforce infrastructure as a Hosted MCP Server over Streamable HTTP. Every transaction executes as the authenticated user via an External Client App with the mcp_api scope, and respects the full org security model: field-level security, object permissions, sharing rules, profiles, and permission sets. The dispatch / dispatch_readonly split lets policy restrict an agent to read-only operations. This is the admin/DevOps companion to the sobject-* CRM-data hosted servers on the salesforce card.
Capabilities
Security Features
- oauth2 pkce
- field level security
- object permissions
- sharing rules
- permission sets
- jwt access tokens
- per user authorization
- read only dispatch scoping
Authentication
mcp_apirefresh_token