Skip to main content
No longer maintained. This Runlayer-built connector is deprecated and will not receive further updates. Use Salesforce’s official hosted MCP servers instead. See the Salesforce hosted MCP guide.
Connect your AI assistant to Salesforce for CRM data queries, record management, and schema exploration. Uses Salesforce OAuth for authentication.

​
Available Tools

​
Setup

1

Create a Connected App in Salesforce

  1. In Salesforce Setup, go to App Manager (or External Client App Manager)
  2. Click New Connected App (or New External Client App)
  3. Fill in:
    • Connected App Name: Runlayer MCP
    • Contact Email: your email
  4. Under OAuth Settings:
    • Enable OAuth Settings: checked
    • Callback URL: https://<your-tenant>.runlayer.com/oauth/callback
    • Selected OAuth Scopes: Full access (full) and Perform requests at any time (refresh_token, offline_access)
  5. Click Save
It may take up to 10 minutes for the Connected App to propagate in Salesforce.
2

Get Credentials

  1. After saving, go to the Connected App’s detail page
  2. Copy the Consumer Key (Client ID) and Consumer Secret (Client Secret)
3

Add Server in Runlayer

  1. In Runlayer, go to My connectors, find Salesforce, and click Add connector
  2. Check Custom OAuth credentials
  3. Enter your Client ID and Client Secret
  4. If connecting to a sandbox org, set Login URL to https://test.salesforce.com
  5. Click Deploy Server
4

Authorize

  1. Click Connect on the server page
  2. Log in with your Salesforce credentials and click Allow
Each user authorizes with their own Salesforce credentials. Queries and operations run with that user’s permissions and field-level security.

​
Configuration Reference

Required: Optional:

​
Troubleshooting

Verify the callback URL in your Connected App matches exactly: https://<your-tenant>.runlayer.com/oauth/callback (no trailing slash for Salesforce).
The Connected App must be created in the same org you are authenticating against. External Client Apps do not support cross-org OAuth flows.
Salesforce Connected Apps can take up to 10 minutes to propagate. Wait and retry the authorization.
Your Salesforce access token has expired (tokens last ~2 hours). Reconnect in Runlayer to get a fresh token. If you have refresh_token scope enabled, this should happen automatically.
In the External Client App Manager, the Consumer Secret is gated behind a user permission. If you only see the Consumer Key, your user is missing the required permission on the External Client App.Grant your user the Create, edit, and delete External Client Apps permission (and View External Client App Consumer Secrets in Metadata if you also need metadata access), then revisit the app’s detail page and click Manage Consumer Details to reveal both the key and secret. See the Salesforce help article on External Client App user permissions for the full list.