What can AI agents do with Salesforce through Ferentin?

Through Ferentin, agents can use Salesforce for soql queries, sosl search, sobject crud, relationship traversal, schema discovery, user context, prompt templates and org security enforcement. Every call is checked against your Ferentin policies first.

How does Ferentin secure Salesforce access?

Requests through the Salesforce integration are covered by OAuth 2.0 PKCE, field level security, object permissions, sharing rules, jwt access tokens and per user authorization. These controls are applied by Ferentin, not by Salesforce, so they hold across every connected agent.

What permissions does the Salesforce integration require?

The Salesforce integration requests 2 OAuth 2.0 scopes: mcp_api; refresh_token

How do I connect Salesforce to Ferentin?

Open the Ferentin admin console, add Salesforce as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.

Is the Salesforce integration generally available?

The Salesforce integration is currently beta on Ferentin.

MCP Servers

Salesforce

Beta

CRM platform with full SObject CRUD, SOQL/SOSL queries, schema discovery, and relationship traversal — all governed by org security model.

MCP ServersCRMSalesService

Configure Setup guide

How it works

Every agent request passes through Ferentin policy before it reaches Salesforce.

AI agentAsks for something
Ferentin policies
- OAuth 2.0 PKCE
- Field level security
- Object permissions
- Sharing rules
Salesforce MCP serverAuthorized connection
Governed resultMasked, logged, returned

What you can do with Salesforce

Soql queries
Sosl search
Sobject crud
Relationship traversal
Schema discovery
User context
Prompt templates
Org security enforcement

Overview

Salesforce is the world's leading CRM platform, providing sales, service, marketing, and commerce capabilities. It supports custom objects, workflow automation via Flows and Apex, analytics via Tableau, and a comprehensive REST API for data access.

Website Developer docs

Ferentin integration

Salesforce Hosted MCP Servers run on Salesforce infrastructure and expose 9 tools for the sobject-all server — SOQL/SOSL queries, SObject CRUD, relationship traversal, schema discovery, and user context. All operations enforce per-user OAuth 2.0 with PKCE and respect the org security model including field-level security, object permissions, and sharing rules. 8 hosted servers available for different access patterns: sobject-all, sobject-reads, sobject-mutations, sobject-deletes, data-cloud-queries, metadata-experts, salesforce-api-context, and engagement-interaction.

Setting it up

5 steps

Salesforce MCP Server configuration overview

Configure Salesforce instance basic information

Configure OAuth2 credentials from your Salesforce External Client App

Review the 9 available Salesforce tools (SOQL, SOSL, SObject CRUD, schema discovery)

Built-in prompts for account briefings and revenue reconciliation

Connection details

Status: Beta
Integration type: Remote MCP server
Authentication: OAuth 2.0
Hosting: Vendor-hosted endpoint
Required scopes: 2
Data actions: Read only
MCP tools: 11

Configure Setup guide

Permissions2 scopes

mcp_api
refresh_token

Security controls6

OAuth 2.0 PKCE
Field level security
Object permissions
Sharing rules
Jwt access tokens
Per user authorization

Technical details

Vendor: Salesforce
Endpoint: api.salesforce.com

Default URL connects to the sobject-all server (full CRUD: query, search, create, update, relationship traversal). Change the server name in the URL to use a different server.
Available servers: sobject-all (11 tools), sobject-reads (6 tools), sobject-mutations (9 tools), sobject-deletes (8 tools), data-cloud-queries (2 tools), metadata-experts (1 tool), salesforce-api-context (6 tools), engagement-interaction (3 tools)
Each server must be activated individually in Setup > MCP Servers before it can be used
All operations respect your Salesforce org security model: field-level security, object permissions, sharing rules, and user profiles
Only mcp_api and refresh_token scopes are required — do not add api, sfap_api, or einstein_gpt_api
If your org uses a custom domain (My Domain), you may need to override the OAuth authorization URL to https://<your-domain>.my.salesforce.com/services/oauth2/authorize

Frequently asked about Salesforce

What can AI agents do with Salesforce through Ferentin?: Through Ferentin, agents can use Salesforce for soql queries, sosl search, sobject crud, relationship traversal, schema discovery, user context, prompt templates and org security enforcement. Every call is checked against your Ferentin policies first.
How does Ferentin secure Salesforce access?: Requests through the Salesforce integration are covered by OAuth 2.0 PKCE, field level security, object permissions, sharing rules, jwt access tokens and per user authorization. These controls are applied by Ferentin, not by Salesforce, so they hold across every connected agent.
What permissions does the Salesforce integration require?: The Salesforce integration requests 2 OAuth 2.0 scopes: mcp_api; refresh_token
How do I connect Salesforce to Ferentin?: Open the Ferentin admin console, add Salesforce as a new connection and authenticate with OAuth 2.0. You then choose which permissions and which tools your agents may use, and the connection goes live for everyone covered by your policies.
Is the Salesforce integration generally available?: The Salesforce integration is currently beta on Ferentin.