Using Claude Code for Salesforce? Don’t miss these security and governance gaps
Gearset's blog post lists governance and security gaps for teams using Claude Code, Cursor or Codex to build on Salesforce. The gaps include over-broad local permissions, prompt injection, changes that bypass testing and review, inconsistent team standards, and unplanned maintenance. The post recommends running agents in a container, using least-privilege integration users, restricting MCP toolsets, and routing all AI-generated changes through a CI/CD pipeline.
What changes for platform teams
Platform teams that let agents reach Salesforce orgs through MCP should scope credentials to least privilege, restrict enabled MCP toolsets, and require AI-generated changes to pass the same pipeline checks as human changes. The post's recommendations are general, and it promotes Gearset's own product as the solution.
Read the original at Gearset Blog ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules