Set up in four steps, fix the common connector errors, and see what each skill needs, asks and gives back.
Your Salesforce data moves only between your org and your own Claude. The Ailace connector gives Claude the steps; Salesforce's own connector reads the data, as you.
Request access on the Claude Skills page. When your access is ready we email your personal connector link and the skills it covers.
Keep the link private. It works like a password, and we can revoke it at once if it leaks.
In Claude (web or desktop) open Customize, then Connectors, then Add custom connector.
Name it Ailace, paste your personal link and select Add. There is nothing to sign in to.
In Claude Code, run this with your link at the end:
claude mcp add --transport http ailace <your personal link>Claude reads Salesforce through Salesforce's own hosted MCP server, signed in as you, so your field security and sharing apply. Your Salesforce admin sets it up once:
1. In Salesforce Setup, open MCP Servers and activate sobject-reads (read only). Copy its server URL.
2. In Setup, open External Client App Manager and create an app. Enable OAuth with both callback URLs below, the scopes mcp_api and refresh_token, offline_access, and tick Require PKCE and JWT-based access tokens.
https://claude.ai/api/mcp/auth_callbackhttps://claude.com/api/mcp/auth_callback3. In Claude add a custom connector named Salesforce with the server URL, and paste the Consumer Key and Consumer Secret into Advanced settings. Then Connect and log in.
Server URL for a production org with My Domain mydomain:
https://api.salesforce.com/platform/mcp/v1/d/mydomain/platform/sobject-readsServer URL for a sandbox (My Domain mydomain, sandbox name sandboxname):
https://api.salesforce.com/platform/mcp/v1/d/mydomain--sandboxname/sandbox/platform/sobject-readsThe connector alone works: just ask, for example "Run an Org X-Ray on my production org". Adding the skills puts them in the / menu and helps Claude pick the right one.
Claude web or desktop: Customize, then Skills, then upload the skill files we send you (one zip per skill).
Claude Code:
claude plugin marketplace add ailacecloud/claude-skillsclaude plugin install ailace-salesforce@ailaceThe errors people meet most, what they mean and how to fix them.
Salesforce does not recognise the Client ID that Claude sent. Check these in order:
1. Sandbox org? Use the sandbox My Domain form of the server URL. The plain URL sends you to login.salesforce.com, which does not know a sandbox app:
https://api.salesforce.com/platform/mcp/v1/d/mydomain--sandboxname/sandbox/platform/sobject-reads2. Just created the External Client App? It can take up to 10 minutes before Salesforce accepts it. Wait, then select Connect again.
3. In Claude's Advanced settings the Client ID is the Consumer Key (it usually starts with 3MVG) and the Client Secret is the Consumer Secret. Swapping them gives this error.
4. Copy the key again without spaces, remove the connector in Claude and add it again.
You reached the right login page, but the External Client App does not allow what Claude asks for. The MCP server asks for exactly two scopes:
1. Access Salesforce hosted MCP servers (mcp_api)
2. Perform requests at any time (refresh_token, offline_access)
Add both under Selected OAuth Scopes, save, wait about 10 minutes, then select Connect again in Claude.
Enter both, one per line:
https://claude.ai/api/mcp/auth_callbackhttps://claude.com/api/mcp/auth_callbackThat is where Salesforce sends you back to Claude after you log in.
Salesforce hosted MCP servers must be available in your org and edition. Search Setup for MCP Servers. If it is missing, ask your Salesforce account team to enable hosted MCP servers, or contact us and we help you check.
In Claude Code you can use the Salesforce CLI and the Salesforce DX MCP server instead.
The Salesforce connector reads the org you logged in to when you connected it. To switch, remove the Salesforce connector in Claude, add it again with the other org's server URL and app, and log in to that org.
Tell the skill which org to use when it asks. Skills that change data are tested in a sandbox first.
The / menu lists skills, not connectors. If you only added the Ailace connector, the skills still work when you ask in plain words, for example "Run an Org X-Ray on my production org".
To see them in /, add the skills: in Claude web or desktop open Customize, then Skills, and upload the skill files we sent (one zip per skill), then make sure each is switched on. In Claude Code install the Ailace plugin. Start a new chat afterwards.
The link is wrong, revoked or past its valid until date. Copy it again from your access email, with nothing missing at the end.
If it still fails, your licence may have ended or been replaced. Email info@ailacecloud.com and we check it and send a new link.
Your link covers only the skills listed in your access email. Ask info@ailacecloud.com to add the skill. The change applies on your next request, with no new link needed.
Each licence can start a set number of skill runs per day (100 by default). The count resets at midnight. Contact us if your team needs more.
Email info@ailacecloud.com. We revoke the old link, which stops it at once, and send you a new one.
On Claude Team and Enterprise plans only an Owner can add connectors. Ask us for a company licence, and your Owner adds its link once in Organization settings, then Connectors, for everyone.
Make sure both connectors (Ailace and Salesforce) are switched on for the chat in the tools menu, then start a new chat. Asking with the skill name helps, for example "Run Trust Guard on production".
Some checks use parts of Salesforce your connector cannot reach, for example the Tooling API for code and automation details, or features your org does not have (Knowledge, CPQ, Campaign Influence, Contracts, Entitlements). The skill skips them instead of guessing and lists them there.
Everything else in the report is still based on your data. Contact us if you want help reaching the missing parts.
Read only skills never change data. Skills marked "Changes data with your approval" only propose changes: Claude shows each batch and applies it only after you say yes. Try them in a sandbox first.
No. Claude runs every query through your own Salesforce connector and keeps the results in your conversation. The Ailace connector only receives the skill name and a run id. We know who is licensed, which skills run and how often.
Skills measure the data in the org you connected. A sandbox or a new org has little data, so scores and lists are short. Run the read only skills against production for a real picture.
Still stuck? Email info@ailacecloud.com with a screenshot of the error, without your link or keys.
Ask in plain English. Claude asks a few questions, runs the checks against your org and returns the finished report. Every skill ends with "What we could not check" when part of your org was out of reach.
For CIO, CTO, Salesforce platform owner
A health score and a ranked technical debt backlog for the whole org: automation, code, access, reports, data quality and limits.
Run an Org X-Ray on our production orgHow messy is our org? Give me the top 10 cleanup itemsFor CISO, CIO, Salesforce admin
Finds risky access before attackers do: unused connected apps, over privileged and dormant admins, guest user exposure and Health Check risks, with fix drafts for an admin to approve.
Run a Trust Guard security review on our production orgWhich admins have not logged in for 90 days?For CIO, CEO, Agentforce sponsor
A green, amber or no go verdict on whether your data and permissions can support an agent for one process, with the fixes and a safe read only first use case.
Are we agent-ready for lead routing? Check our production orgCan an agent handle our case triage safely?For Developers, tech leads, release managers
A senior architect style review of Apex, Lightning web component and Flow changes before they ship, with severity ranked comments and a verdict.
Review my changes before I deployReview the diff against main and tell me if it is safe to shipFor Release managers, CIO
A go, go with conditions or no go memo with a risk list and a rollback plan, before a deployment or a Salesforce seasonal release.
Run Release Ready on our next deployment to productionFor CIO, CFO
Shows who actually uses Salesforce, how many licences you can take back and what that is worth, with messages for managers.
Run an Adoption Pulse on our production org and tell me how many licences we can reclaimFor People ops, CISO, Salesforce admin
Onboards, moves or offboards a Salesforce user correctly: permissions, queues, role, freeze, token revoke and record handover, each change approved step by step with an audit trail.
Offboard this user effective today and hand their records to their managerSet up a new sales rep like their teammateFor CRO, CFO, CEO, sales managers
A risk adjusted forecast, coverage by team and a forecast call agenda with questions for each rep.
Give me a risk adjusted forecast and the questions to ask each rep before our forecast callFor CRO, CIO, sales operations
Finds duplicate Accounts, Contacts or Leads, stale records and empty key fields, then fixes them with your approval, batch by batch.
Run a CRM Clean Sweep on our AccountsFind duplicate Contacts in EMEAFor CEO, CFO
A board and QBR revenue story where every number links back to the Salesforce report or query it came from.
Build our Q3 board pack from SalesforceFor CFO, CRO, deal desk
Finds discount leakage and skipped approvals on this quarter's quotes, and maps your CPQ rules before a Revenue Cloud move.
Run Quote Guard on our production org: where are we leaking discount this quarter?For CMO, CEO
Pipeline and ROI by channel, compared across first touch, last touch and multi touch attribution, with budget recommendations.
Show me campaign ROI by channel for the last 6 months and where to move budgetFor Service leaders, support managers
Sorts every open case, flags SLA risk, suggests the right queue and saves reply drafts and summaries for agents to approve.
Triage our open case backlog and draft replies for the urgent onesFor Customer success, CRO, CEO
A ranked list of renewals at risk, the reasons behind each, and a plan to save them.
Which renewals in the next 120 days are at risk, and how do we save them?For Service leaders, knowledge managers
Turns solved cases into draft knowledge articles and finds articles that have gone stale.
Find our knowledge gaps from closed cases and draft the top 10 articlesWant a skill added to your licence, or a guided first run?
Talk to us →