salesforce-meta-tool-identity-propagation

ozgurkarahan/salesforce-meta-tool-identity-propagation
★ 4 stars Python AI/LLM Updated 8d ago
Salesforce Meta Tool (MCP Server) with end-to-end identity propagation via On-Behalf-Of (JWT Bearer) flow through Azure AI Foundry and APIM
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "salesforce-meta-tool": {
      "command": "uvx",
      "args": [
        "salesforce-meta-tool-identity-propagation"
      ]
    }
  }
}

Or install with pip: pip install salesforce-meta-tool-identity-propagation

README Excerpt

**One sign-on. Seven tools. Your entire Salesforce org, with the user's own identity enforced end-to-end.** > **📖 Identity Propagation series** — this repo is part of a series on end-to-end user identity propagation for AI agents: no service accounts in the data path, every action traceable to a real user. Read the story: [From Theory to Production: Salesforce Meta-Tool & Identity Propagation](https://www.linkedin.com/pulse/from-theory-production-salesforce-meta-tools-identity-ozgur-karahan-ch30

Tools (15)

AZURE_LOCATIONCOGNITIVE_ACCOUNT_SUFFIXIDENTITY_CLAIM_NAMESF_CONNECTED_APP_CLIENT_IDSF_INSTANCE_URLSF_JWT_BEARER_CERT_NAMESF_JWT_BEARER_CERT_THUMBPRINTSF_SERVICE_ACCOUNT_USERNAMEdescribe_objectlist_objectsprocess_approvalsearch_recordssoql_querywhoamiwrite_record

Topics

azure-ai-foundryazure-api-managementbicepentra-ididentity-propagationjwt-bearermcpmodel-context-protocolon-behalf-ofsalesforce