Feature Summary
Salesforce MCP Client lets the Aligned Seller Agent read records from your company's Salesforce account while a seller builds a Room. The Seller Agent uses each person's own Salesforce permissions, so it only reaches records that person can already open in Salesforce. Before anyone on the team can connect, a Salesforce system administrator does a one-time setup: activating Salesforce's read-only MCP server, registering Aligned, and sharing a Consumer Key with the team. Every person who wants to use the connector enters that Consumer Key once when they connect.
Prerequisites
Plan: availability depends on the plan - see the Aligned pricing page.
Role: Anyone in Aligned can connect Salesforce MCP Client for themselves. The one-time registration inside Salesforce requires a Salesforce system administrator.
Technical: A Salesforce account with API access, and the Consumer Key produced by the one-time registration.
How to set up Aligned in Salesforce
A Salesforce system administrator performs these steps once for the whole company. Everyone else can skip to the next section.
In Salesforce, go to Setup, then Integrations, then API Catalog, then MCP Servers.
Find SObject Reads in the list, click its name to open it, and click Activate. It is already listed as a Standard server, so you do not need to add one. Salesforce disables MCP servers by default, and Aligned uses this read-only server. Activation is usually immediate but can take up to two minutes.
In Setup, in the Quick Find box, enter
external client.Select External Client App Manager.
Click New External Client App.
In External Client App Name, enter
Aligned Seller Assist.In API Name, Salesforce fills in a value automatically from the name you entered. Leave it as is.
In Contact Email, enter an email address Salesforce can reach you at.
Leave Distribution State as Local.
Expand API (Enable OAuth Settings).
Check Enable OAuth.
In Callback URL, enter
https://my.teamaligned.com/api/v1/mcpConnectors/callback.In OAuth Scopes, add Access Salesforce hosted MCP servers (mcp_api).
In OAuth Scopes, add Perform requests at any time (refresh_token, offline_access).
Under Security, check Issue JSON Web Token (JWT)-based access tokens for named users.
Leave Require Secret for Web Server Flow and Require Secret for Refresh Token Flow unchecked. Aligned connects with the Consumer Key only and never sends a secret, including on refresh. Leave Require Proof Key for Code Exchange (PKCE) checked - Aligned uses it. Salesforce pre-checks and locks some options; leave those as they are, and leave everything under Flow Enablement unchecked.
Click Create.
Open the Settings tab, expand OAuth Settings, and click the Consumer Key and Secret button.
Verify your identity if Salesforce asks. It emails you a code.
Copy the Consumer Key and share it with everyone in your company who will use Aligned. Salesforce shows a Consumer Secret on the same screen - Aligned does not need it.
Salesforce can take up to 30 minutes to activate a new External Client App. Connections attempted before activation finishes will fail.
With the default External Client App policy, any Salesforce user can authorize the app, and each person's own object, field, and sharing permissions still control what Aligned can read. If your organization restricts the app to preauthorized users, you also need to grant the chosen profile or permission set to everyone who will connect.
Connected Apps are not supported for MCP. The registration must use External Client App Manager.
How to connect Salesforce MCP Client in Aligned
In Aligned, go to Settings.
Open the MCP tab.
Find Salesforce under MCP Client.
Click Connect.
In Consumer key, paste the key you received from your Salesforce system administrator.
Click Connect.
Sign in to Salesforce and approve access.
What clients see
Clients see no indication that Salesforce MCP Client is connected, and nothing is written back to Salesforce. For how the Seller Agent adds content to a Room, see AI Seller Agent.
Salesforce MCP Client vs. the Salesforce integration
Aligned offers two separate Salesforce connections, and they solve different problems.
Salesforce MCP Client | Salesforce integration | |
Best for | Letting the Seller Agent read Salesforce records while building a Room | Syncing Rooms to Salesforce objects and sending activity back to Salesforce |
Key difference | Read-only, per person, using each person's own Salesforce permissions | Account-level and two-way, configured once by an Aligned Admin |
Connecting one does not connect the other. A company can use either, both, or neither.
Limitations
Salesforce MCP Client is read-only. Nothing is written back to Salesforce.
Every person connects individually. Connecting Salesforce MCP Client for yourself does not connect it for anyone else on the team.
Each person enters the Consumer Key themselves. Aligned does not store the Consumer Key at account level.
Sandbox environments are not supported. The registration must be performed in your production Salesforce account.
Salesforce does not currently charge for MCP server usage. Salesforce has said it will give 30 days' notice before usage-based billing through Flex Credits begins. Any such charge would come from Salesforce, not from Aligned.
Aligned cannot detect whether the one-time registration was completed. A failed connection is the first indication that the registration is missing.
Troubleshooting & FAQ
Expected errors and blocks
"Salesforce isn't set up yet"
What this means: Aligned has not been registered in your company's Salesforce account, so Salesforce rejected the connection. The one-time registration described above has not been completed.
How to fix it: If you are a Salesforce system administrator, follow the registration steps above. If you are not, click Copy guide link in the message and send the link to whoever manages Salesforce at your company.
How to avoid it: Having a Consumer Key means the app was registered. Before connecting, confirm with your administrator that SObject Reads is active and that at least 30 minutes have passed since the app was created.
The connection fails and SObject Reads was never activated
What this means: Salesforce disables MCP servers by default. Without SObject Reads active, the External Client App registration is complete but the connection still has nothing to read.
How to fix it: Ask your Salesforce system administrator to activate SObject Reads under Setup, then Integrations, then API Catalog, then MCP Servers.
How to avoid it: Activate SObject Reads before creating the External Client App, as described in the setup steps above.
The connection fails and the Consumer Key is correct
What this means: Your organization may restrict the External Client App to preauthorized users, and your profile or permission set has not been granted access to it.
How to fix it: Ask your Salesforce system administrator to grant your profile or permission set access to the Aligned Seller Assist app.
How to avoid it: If your organization uses preauthorized access, have the administrator grant access to everyone who will connect at the same time as the registration.
The connection fails immediately after the registration was completed
What this means: Salesforce can take up to 30 minutes to activate a new External Client App. Until activation finishes, Salesforce rejects connections even though the registration is correct.
How to fix it: Wait up to 30 minutes from the moment the app was created, then click Connect again.
How to avoid it: Allow 30 minutes between completing the registration in Salesforce and asking the team to connect.
Unexpected errors
Q: Why does my Salesforce connection keep failing even with the right Consumer Key?
A connection that fails repeatedly with a confirmed-correct Consumer Key usually points to a scope or security setting that does not match the registration steps. Ask your Salesforce system administrator to confirm that SObject Reads is active, that both mcp_api and refresh_token are present in OAuth Scopes, that JWT-based access tokens are enabled, and that Require Secret for Web Server Flow and Require Secret for Refresh Token Flow are both unchecked. If the settings are correct and the connection still fails, contact Aligned support with your Salesforce organization ID, which you can find under Setup, Company Information.
FAQ
Q: Where do I get the Consumer Key?
The Consumer Key comes from the one-time registration inside Salesforce. Ask the Salesforce system administrator at your company for it - the same person who manages Salesforce settings. Aligned cannot generate or retrieve it for you.
Q: Do I need to be an Aligned Admin to connect Salesforce MCP Client?
Any Aligned user can connect Salesforce MCP Client for themselves. The role that matters is in Salesforce, not in Aligned - the one-time registration requires a Salesforce system administrator.
Q: Can the Seller Agent see records I cannot see in Salesforce?
The Seller Agent uses your own Salesforce permissions, so it reaches exactly the records you can already open in Salesforce and nothing beyond them.
Q: Does connecting Salesforce MCP Client change my existing Salesforce integration?
Salesforce MCP Client and the Salesforce integration are separate connections with separate settings. Connecting one has no effect on the other.
Q: Does every person on my team need to do the registration in Salesforce?
The registration inside Salesforce happens once for the whole company. Each person then connects in Aligned using the Consumer Key from that registration.
Q: Can I disconnect Salesforce MCP Client?
You can disconnect at any time from Settings → MCP by clicking Disconnect on the Salesforce card. Disconnecting affects only your own connection - everyone else on the team stays connected.
Security & Data Handling
The connection uses OAuth with JSON Web Token (JWT)-based access tokens issued to named users, and Aligned connects with the Consumer Key only - no secret is stored or sent. Each person authorizes separately, so disconnecting one person does not affect anyone else.