Skip to main content
Salesforce connects to Concord as a Custom MCP connector. Concord talks to Salesforce’s hosted MCP server and authenticates with OAuth 2.1, using an External Client App that you create in your Salesforce org.

Open Connectors

Add a Custom MCP from Settings → Connectors.
The setup has four parts:
  1. Create an External Client App in Salesforce
  2. Configure its OAuth settings
  3. Add the Salesforce credentials to a Custom MCP in Concord
  4. Authorize the connection
You need Salesforce permissions to manage External Client Apps in your org, and the org must have access to Salesforce hosted MCP servers. Salesforce’s own guide, Create an External Client App for MCP, covers the Salesforce side in detail.

​
1. Create an External Client App in Salesforce

1

Open External Client App Manager

In Salesforce, open Setup and search for External Client App Manager, or go to Apps → External Client Apps → External Client App Manager.You can also open it directly, replacing the domain with your org’s My Domain:
2

Create the app

Click New External Client App and name it:

​
2. Configure OAuth

Enable OAuth for the External Client App, then set the callback URL and scopes.
1

Set the callback URL

Use exactly:
2

Add the OAuth scopes

Add both of these scopes:
  • Perform requests at any time (refresh_token, offline_access)
  • Access Salesforce hosted MCP servers (mcp_api)

​
3. Configure the authorization flow

The connection uses Authorization Code with PKCE.
1

Enable the flow

Under Flow Enablement, enable Authorization Code and Credentials Flow.
2

Require PKCE

Under Security, make sure Require Proof Key for Code Exchange (PKCE) extension for Supported Authorization Flows is enabled.
3

Save

Save the External Client App.

​
4. Get the Consumer Key and Secret

Open the Concord External Client App and go to Settings → OAuth Settings → Consumer Key and Secret. Retrieve both values:
  • Consumer Key
  • Consumer Secret
You will enter them in Concord in the next step.

​
5. Create the Custom MCP in Concord

In Concord, go to Settings → Connectors and add a new Custom MCP. Configure it as follows: Make sure Enabled is checked, then click Add connector.
Salesforce requires a pre-registered client, so the Client ID and Client Secret fields are mandatory here. Leaving them empty would make Concord attempt automatic registration, which Salesforce does not support.

​
6. Connect

Once the connector is saved:
1

Open the connector

Open the Salesforce connector in Concord.
2

Start the authorization

Click Connect. Concord discovers the Salesforce authorization server and starts the OAuth flow with PKCE.
3

Authorize in Salesforce

Sign in to Salesforce if prompted, then authorize the Concord application.
When authorization completes, the Salesforce MCP is connected and its tools are available in Concord.

​
Configuration reference

​
Salesforce

​
Concord

  • Create an External Client App for MCP — Salesforce’s official guide
  • External Client App Manager in your org: https://YOUR_SALESFORCE_DOMAIN/lightning/setup/ManageExternalClientApplication/home
Connectors overview