Salesforce API Integration

This skill provides complete Salesforce REST API integration, enabling direct interaction with Salesforce CRM data through SOQL queries, record CRUD operations, Bulk API for large datasets, and Composite API for batch requests. It supports standard Salesforce objects and custom objects with proper API naming conventions.

Core Capabilities:

• SOQL query execution with pagination support for large result sets
• Full CRUD operations on Salesforce records (create, read, update, delete)
• Bulk API 2.0 for efficient import/export of large datasets
• Composite and batch requests to optimize API call consumption
• Metadata and schema introspection
• OAuth Bearer token authentication with session management

Significant Advantages:

• Direct, official Salesforce API access without middleware abstraction
• Comprehensive coverage of REST API endpoints including advanced features like Bulk API
• Proper error handling with Salesforce-specific error codes (INVALID_SESSION_ID, MALFORMED_QUERY, etc.)
• Memory persistence for org context and saved queries
• Cross-platform support (Linux, macOS, Windows)

Limitations & Considerations:

• Requires active Salesforce org with API access (Enterprise/Unlimited/Professional with API add-on, or Developer editions)
• Rate limits apply based on Salesforce edition (typically 100k+ calls/day)
• Access token expiry requires refresh handling outside skill scope
• Field-level security and object permissions are enforced by Salesforce, not bypassed
• No real-time event/streaming support (REST API only, no Platform Events or Streaming API)

Ideal Users:

• Salesforce administrators needing ad-hoc data operations
• Developers building integrations requiring direct API access
• Data migration specialists performing bulk imports/exports
• Analysts executing custom SOQL queries beyond standard reports

Security & Risk Assessment:

• Authentication: OAuth 2.0 Bearer tokens stored only in environment variables, never persisted to disk
• Data Transit: All communication over HTTPS to official Salesforce endpoints
• Scope Isolation: Restricted to ~/salesforce-api-integration/ directory, no file system traversal
• Trusted Party: Data sent directly to salesforce.com (T1 enterprise vendor)
• Key Risk: Token exposure in environment variables if system is compromised; users must ensure SF_ACCESS_TOKEN and SF_INSTANCE_URL are properly secured