Security, Permissions, and Data Handling for the Salesforce MCP Server

Access control isn't a separate layer bolted on top of Salesforce in Claude. It's the same permission model Salesforce already uses. Claude sees only what a given user is authorized to see.

After your data reaches Anthropic through the MCP connection, its handling is governed by your organization's contract with Anthropic, not by Salesforce. Confirm data handling terms directly with Anthropic. Anthropic isn't permitted to use Salesforce intellectual property, including your Salesforce data and business logic accessed via MCP, without permission.