Skip to content

Connect OpenClaw to Salesforce

Connect OpenClaw to Salesforce through ApexGenius. Query authorized records and inspect schema, Apex and Flows using the tools you enable.

7 days free · No card required

How to connect Salesforce to OpenClaw

FirstConnect Salesforce to ApexGenius

ThenConnect ApexGenius to OpenClaw

Watch the connection

13-second loop · Silent, with captions

Read the steps Follow along at your own pace

1. Create your account

ApexGenius signup page with Continue with Google and the email form.
Create your account. Open apexgenius.ai/signup and continue with Google or your email.

2. Choose Salesforce

ApexGenius Start with Salesforce selected, the Production and Sandbox choice, and the Connect Salesforce button.
Choose Salesforce. On Start, pick Salesforce, choose Production or Sandbox, then click Connect Salesforce.

3. Allow access

The Salesforce Allow Access screen listing what ApexGenius is asking for, with Deny and Allow buttons.
Allow access. Salesforce opens its sign in page. Sign in there and click Allow.

4. Copy the MCP address

ApexGenius Start with the API key tile selected and Manual setup open, showing the MCP address to copy.
Copy the MCP address. On Start, pick API key, open Manual setup, and copy the MCP address.

5. Approve access

ApexGeniusapexgenius.ai/authorizeFull size (opens in a new tab)
The ApexGenius authorization screen for OpenClaw: the apps it can use, the Read only, Full access, and Custom choices, and the Approve button.
Approve access. ApexGenius opens its approval page. Review the access, then approve.

In OpenClaw: Add ApexGenius as a remote MCP server in your OpenClaw configuration using the hosted HTTP URL, then complete the authorization in your browser.

Additional reference: the Salesforce setup guide.

Start free

What OpenClaw can do in Salesforce

21 operations. Read looks things up and changes nothing. Write changes Salesforce and runs only when that tool is enabled.

Read11 operations

Looks things up. Changes nothing.

Connection context

  • list_projectsList accessible Salesforce connections and their environment details.

Records and schema

  • query_soqlRun SOQL and return selected Salesforce fields.
  • get_recordRetrieve one record by object type and ID.
  • list_objectsList accessible Salesforce objects.
  • describe_objectReturn fields, types, picklists, relationships, and permissions.
  • search_recordsSearch records across Salesforce objects.

Staging and documentation

  • read_fileRead one staged component or documentation file.
  • list_filesList staged or documentation files with an optional folder or pattern filter.
  • grepSearch staged file names or contents.

Live metadata and deployment

  • check_deploy_statusRead deployment status, component results, and test details.
  • list_live_metadataList live components of one metadata type in the selected org.

Write10 operations

Changes Salesforce. Runs only when enabled.

Records and schema

  • create_recordCreate one Salesforce record.
  • update_recordUpdate selected fields on one Salesforce record.
  • delete_recordDelete one Salesforce record by ID.

Apex runtime

  • execute_anonymous_apexExecute supplied anonymous Apex, which can change or delete data.

Staging and documentation

  • write_fileCreate or overwrite a Salesforce metadata component or Markdown document in private staging.
  • edit_fileReplace exact matching content in a staged Salesforce metadata component or document.
  • delete_filePermanently remove one staged component or documentation file.

Live metadata and deployment

  • deployDeploy selected staged files with the requested Salesforce test level.
  • cancel_deployCancel an in-progress Salesforce deployment.
  • get_live_componentPull one live component into the private staging workspace.

You choose what OpenClaw can use

When you approve OpenClaw, pick Full access, Read only, or Custom. Read only allows the Read operations and nothing else. Custom picks apps and tools one by one.

Limits in Salesforce

  • · The selected Salesforce connection remains visible in the gateway workspace.
  • · Tool availability is resolved for the current connection and account context.
  • · Supported Salesforce write activity is recorded for review.
  • · Turn a tool off to block calls. Enabled tools run when called.

What it looks like in OpenClaw

An illustrative read-only request and response. Your results come from the account and dates you choose.

How the route works
OpenClaw
OpenClawApexGenius MCP route
Which opportunities over 50k are closing this month and who owns them?
ApexGenius
Working with ApexGenius1 tool search · 2 reads
RequestOpen opportunities
Account scopeAuthorized connections checked
apex_search_toolsSalesforce records · Find the Salesforce read pathComplete
Salesforceapex_call_read_toolquery_soql · Query opportunities closing this monthComplete
Salesforceapex_call_read_toolquery_soql · Read owner namesComplete
OpenClaw

Six opportunities over 50k close this month. Four belong to Priya Shah, two to Marcus Lee. The largest is Acme Renewal at 180k, stage Negotiation. Nothing was changed.

Read-only route
OpenClaw

Try asking

“Which opportunities over 50k are closing this month and who owns them?”

“Describe the Case object, including picklists and required fields.”

“Which validation rules on Opportunity changed most recently?”

“Pull the Account trigger and explain what it changes.”

Questions people ask first

Does OpenClaw need anything installed for this?

No. ApexGenius is a hosted remote MCP server. OpenClaw connects over HTTP and you authorize in the browser, so nothing extra runs on your machine.

Can OpenClaw change records or deploy on its own?

Only if you leave those operations on. Delete, anonymous Apex, and deploy are marked destructive, so they are easy to find and switch off.

Do I need my own Salesforce connected app?

No. You sign in with Salesforce OAuth and ApexGenius holds the authorization for the connection, refreshing it as Salesforce requires.

Can I connect production and a sandbox at the same time?

Yes. Each org is its own Salesforce connection, and an AI agent can be scoped to one of them, both, or neither.

Can an agent delete records or deploy without me?

The operation must be enabled in the access you authorize. Choose Read only to exclude writes. Delete, anonymous Apex, and deploy carry risk labels; confirmation behavior depends on the tool and AI client, with no universal server-side human-approval guarantee.

Is my Salesforce data stored by ApexGenius?

The ordinary MCP path does not intentionally retain record results. Operational, connection, credential, usage, and audit data is retained so activity can be reviewed.

Which AI agents can use this connection?

Codex starts in Plugins in the ChatGPT desktop app. Claude, Claude Code, Cursor, VS Code, and ChatGPT Work each have their own setup guide. Authorize the saved Salesforce connection separately for each AI client; availability and controls vary.

Connect Salesforce to OpenClaw today

Start free

7 days free. No card required. Disconnect any time.