Looking for a Salesforce MCP server?
Connecting an AI assistant to a source and granting a deployed app access are different jobs. This guide covers the app’s access through SpringRoll Connect. Adding SpringRoll to your agent does not by itself authorize that app to read or change Salesforce records.
SpringRoll also has member-linked Salesforce tools in its ChatGPT connection. Those use the linked member’s account and separately approved actions. Keep that authorization distinct from an application environment’s native API grant.
Start with a synthetic Deal Desk
Try the example before connecting an organization. Its records are fictional and its public preview does not query Salesforce. Use it to agree which record fields, operations and audience the real app would need.
For a first read-only version, describe one task: show the deals awaiting review. Ask the Salesforce owner to identify a suitably scoped source account and the exact API operation required. Do not paste a Salesforce token into the coding agent or browser bundle.
Configure, request and review the native API grant
An administrator configures the Salesforce connection in Connect and tests the credentials. A successful connection test does not give every app access. The app owner requests the needed methods and paths for the app and environment; the authorized reviewer decides the grant.
Native access follows the configured Salesforce account’s permissions. An endpoint grant is not field-level response filtering. Review the source account and the endpoint’s returned data, and use the least privilege that supports the task.
Verify the allowed operation and the denied one
Begin with a Salesforce sandbox and synthetic records. Test the permitted request, a method or path outside the grant and the same request after revocation. Record the app environment, grant and observed result without credentials.
Confirm workspace configuration, source permissions and an actual test result before using production records. This walkthrough describes supported implementation; it is not evidence that your Salesforce connection is configured or has passed a live test.