Step 3: Connect Claude

In this step, you'll add the Salesforce Hosted MCP server to Claude, authenticate with Salesforce, and test a live record query.

TIP

Claude is available in multiple surfaces, including Claude web, Claude Desktop, and Claude Code. This quick start uses the Claude connector setup flow. Salesforce also has a deeper Claude walkthrough in the Salesforce Developers blog.

Start a new Claude connector

1. Open Claude.

2. In the left sidebar, click Customize.

3. Click Connectors.

4. Click +.

5. Click Add custom connector.

   

6. Enter:

   Field	Value
   Name	Salesforce SObject Read
   Description	Read Salesforce records through Headless 360

Add the Salesforce server URL

1. For Server URL, enter the Salesforce Hosted MCP sobject-reads endpoint.

   For Developer Edition and other production orgs, use:

   https://api.salesforce.com/platform/mcp/v1/platform/sobject-reads

   For sandbox or scratch orgs, add /sandbox/ before the server name:

   https://api.salesforce.com/platform/mcp/v1/sandbox/platform/sobject-reads

2. Confirm the server name portion is the server you activated in Salesforce.

   Server	Server name in URL
   SObject reads	platform/sobject-reads
   SObject all	platform/sobject-all
   Salesforce API context	platform/salesforce-api-context
   Metadata experts	platform/metadata-experts

Add the OAuth client

1. Open Advanced settings.

2. Paste the Consumer Key from the external client app into OAuth Client ID.

   

3. Click Add.

TIP

For Claude connector setup, the Consumer Key is the OAuth Client ID. You do not need to paste the Consumer Secret in this flow unless Claude explicitly asks for it in your environment.

Connect and authorize

1. Click Connect next to the connector you created.

   

2. Claude redirects you to the Salesforce org that contains the external client app from Step 2.

3. Log in and approve access if Salesforce prompts you.

4. Return to Claude when the OAuth flow completes.

TIP

If you are already logged in to the org that contains the external client app, Salesforce may skip the user challenge and proceed directly to Claude with an access token.

Test the connector

Start a new Claude chat and ask:

List the first 10 Account records you can access in Salesforce. Show the name, type, industry, and annual revenue when available.

Claude should ask permission to use the Salesforce connector or show a tool call before it answers.

Then ask a follow-up:

Which two accounts look most important based on the fields available? Explain your reasoning from Salesforce data only.

The answer should be grounded in records returned from Salesforce. If Claude answers without calling the connector, ask it to use the Salesforce SObject Read connector explicitly.

Troubleshoot common issues

Symptom	What to check
OAuth fails with invalid_client_id	Wait for the external client app to finish propagating, then retry.
OAuth redirects fail	Confirm the app includes Claude's callback URL: https://claude.ai/api/mcp/auth_callback.
MCP calls fail with JWT errors	Confirm Issue JSON Web Token (JWT)-based access tokens for named users is enabled.
Claude cannot see Account records	Confirm the logged-in Salesforce user has Account object and field access.
Claude sees fewer fields than expected	Check field-level security for the logged-in Salesforce user.

Summary

You connected Claude to Headless 360 through the Salesforce Hosted MCP sobject-reads server. Claude is now authenticating through Salesforce and using the logged-in user's Salesforce permissions.