integration-salesforce

Connect Salesforce to a self-hosted Hermes Agent over SSH with OAuth or REST credentials.

13|1|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/paarths-collab/hstack --skill integration-salesforce
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: integration-salesforce
Source: https://github.com/paarths-collab/hstack/tree/main/skills/integration-salesforce
Command: npx skills add https://github.com/paarths-collab/hstack --skill integration-salesforce

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes the manual work of connecting Salesforce to a self-hosted Hermes Agent, so an AI coding agent can wire the CRM into a remote VPS safely and repeatably.

Core Features & Use Cases

  • Two legitimate connection paths: choose hosted MCP with OAuth + PKCE for the official browser-consent flow, or use headless REST with Client Credentials when unattended access is required.
  • SSH-first automation: performs secret writing, MCP registration, gateway reloads, and verification on the VPS instead of relying on local manual setup.
  • Safety and reliability: checks org type, validates required credentials, enforces idempotency, and includes rollback steps for failure recovery.
  • Use case: an operator wants to let Claude Code, Codex, Cursor, Gemini CLI, or Hermes itself access Salesforce records and actions without rebuilding the integration from scratch.

Quick Start

Ask the agent to connect Salesforce to your Hermes VPS using the appropriate auth path, then provide the VPS access details, Salesforce org information, and External Client App credentials.

Frequently Asked Questions about integration-salesforce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect Salesforce to a self-hosted Hermes Agent over SSH?

Salesforce connects to a self-hosted Hermes Agent over SSH by writing secrets, registering the MCP, and reloading the gateway directly on the VPS. This removes manual local setup and enables remote CRM access.

What is the best way to authenticate an AI coding agent for Salesforce CRM integration?

Salesforce CRM integration supports two authentication paths: hosted MCP with OAuth PKCE for browser-consent flows, or headless REST with Client Credentials for unattended access. Both paths enforce idempotent secret handling.

Can I use Client Credentials to wire Salesforce org-specific endpoints on a remote VPS?

Yes, you can use headless REST with Client Credentials to wire Salesforce org-specific endpoints on a remote VPS. This path is designed for unattended access without requiring manual browser consent during setup.

Does Salesforce MCP integration support rollback for failure recovery during gateway reloads?

Yes, Salesforce MCP integration includes rollback-safe validation and failure recovery steps during gateway reloads. It validates required credentials, checks org type, and enforces idempotency to ensure reliable connection setup.

Why do I need OAuth PKCE for connecting Salesforce to an AI coding agent?

OAuth PKCE is required for the hosted MCP path to securely connect Salesforce to an AI coding agent via the official browser-consent flow. It ensures authenticated tool use when operators prefer interactive authorization.

What Salesforce credentials are needed to deploy access for AI coding agents on Hermes?

Deploying Salesforce access for AI coding agents requires External Client App credentials, Salesforce org information, and VPS access details. The integration validates these required credentials and checks the org type before proceeding.