Is Salesforce AgentForce CKG MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
No critical or high findings in the latest scan.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
no findings
- Code scan13 source files scanned25/25
- Live reliabilityremote reachable in 866ms20/20
- Tool poisoning10 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Salesforce AgentForce CKG does
- MINDMIND knowledge-graph memory for agents. 44 tools: CRM, Life, MoneyMIND, Budget, Sheets, Email, Sign.not reviewedGrowingB
- sf-intelligence — Salesforce org intelligence for AI agentsOffline, read-only MCP knowledge base for one Salesforce org's metadata, deps & impact.not reviewedGrowingA
- Salesforce MetadataThe only Salesforce MCP with Agentforce, OmniStudio & DevOps Center tools — 228 total.not reviewedGrowingB