Loading

Salesforce Hosted MCP Servers Is Not Compatible with API Access Control (External Client App)

Publish Date: May 11, 2026
Description

Root Cause / Explanation

When API Access Control is enabled in a Salesforce org, MCP servers are able to authenticate successfully but any calls using query tools are blocked. This is a known compatibility gap between the two features.

Resolution

Workaround :

  1. Disable API Access Control
  2. Or Provide "Use any API Client" permission.

NOTE : Disabling API Access Control or assigning "Use any API Client" permission allows MCP servers to function, but this removes a critical security control and is not recommended for production orgs with strict API access policies. 

Knowledge Article Number

005321985

 
Loading
Salesforce Help | Article