← Back to Skills Marketplace
19598
Downloads
8
Stars
0
Active Installs
13
Versions
Install in OpenClaw
/install salesforce-api
Description
Salesforce CRM API integration with managed OAuth. Install only if you need Salesforce CRM administration. Connect with the narrowest Salesforce permissions available, prefer sandbox orgs for destructive or batch work, verify the intended connection ID before each request, and revoke unused connections promptly. This integration can mutate CRM records — approve only specific write actions after checking the exact sObject, record IDs, and consequence. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. The endpoints documented here are the intended surface, not a technical limit — the `maton api` passthrough can reach others the connection permits. Default to read and list calls, and confirm every write or new connection with the user.
Usage Guidance
Install this only if you want an agent to help administer Salesforce. Use OAuth with the narrowest Salesforce permissions available, prefer a sandbox or read-only scope where possible, pin the intended connection ID, and approve writes or deletes only after checking the exact object, record IDs, payload, and consequence.
Capability Assessment
Credentials
The skill needs network access, Bash commands, and access to Salesforce through the Maton gateway; the authority is broad because maton api is a passthrough to any endpoint the Salesforce connection permits, but this breadth is clearly disclosed and tied to the CRM administration purpose.
Install Mechanism
Installation relies on third-party Maton CLI packages via npm or Homebrew, with optional SDK packages; this is expected for the integration but users should install only from the documented Maton package sources.
Instruction Scope
The skill repeatedly instructs the agent to default to read/list calls, verify record IDs and connection targets, treat Salesforce content as untrusted data, and obtain explicit user confirmation before POST, PUT, PATCH, DELETE, connection creation, or destructive/batch actions.
Persistence & Privilege
OAuth tokens or API keys are stored by the Maton CLI/SDK in OS credential storage and config profiles, which is disclosed; the skill also explicitly tells agents not to read, print, export, or persist credentials and contains no background worker or hidden persistence instructions.
Purpose & Capability
The stated purpose is Salesforce CRM API administration, and the documented capabilities cover Salesforce queries, sObject CRUD, composite/batch calls, connection management, and optional SDK/raw HTTP access through Maton; these are purpose-aligned and disclosed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install salesforce-api - After installation, invoke the skill by name or use
/salesforce-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.2
Resolve remaining audit findings: state one consistent endpoint policy instead of conflicting scope claims, qualify the local-execution and high-impact wording, note that locale examples are illustrative, and correct app-specific auth, method and upload-path documentation
v1.2.1
Address security-audit findings: disclose the api passthrough in the access-scope and description text, warn on irreversible connection deletion, add response data-minimization guidance, and correct app-specific auth and request-body notes
v1.2.0
CLI-first rewrite with the Maton SDK examples; clarify that the CLI and SDKs keep separate credential stores, and reword webhook egress warnings
v1.1.0
CLI-first rewrite: the maton CLI with OAuth login is the documented path, every example is a maton command, SDK examples added, and the raw HTTP fallback feeds the key on stdin instead of reading it from the environment
v1.0.8
- Removed the file skill-card.md.
- No other functional or documentation changes in this release.
v1.0.7
- Adds CLI and Homebrew installation instructions for Maton CLI, expanding usage options.
- Updates API examples and references from Salesforce API version v59.0 to v63.0.
- Documents direct CLI commands for common actions (SOQL queries, connections) alongside Python and HTTP examples.
- Clarifies connection management and explicit connection selection, now with CLI examples.
- Improves authentication instructions by including CLI login/interactive login commands.
- No functional/API changes to the underlying integration; documentation update only.
v1.0.6
- Added strong security guidance: treat the API key as secret, rotate if exposed, and revoke unused Salesforce connections promptly.
- Updated description and usage to emphasize least-privilege OAuth, sandbox use for risky actions, and always verifying connection ID before requests.
- Clarified that only supported/documented endpoint paths should be used.
- Instructions now require explicit user confirmation with details before any write or batch operation; added steps to confirm record and intended impact.
- Emphasized defaulting to read-only actions and increased caution on all composite/batch operations.
v1.0.5
- Updated all Maton API endpoints from gateway.maton.ai and ctrl.maton.ai to api.maton.ai for consistency.
- Clarified instructions for specifying a Salesforce connection via the Maton-Connection header, emphasizing its use when multiple connections exist.
- Added a new "Security & Permissions" section requiring explicit user approval before any write operations (create, update, delete).
- Removed LICENSE.txt file.
v1.0.4
- Added a metadata.clawdbot section to SKILL.md, specifying a brain emoji and required environment variable (MATON_API_KEY).
- No functional changes to code or documentation content.
v1.0.3
- No file changes were detected in this version.
- Documentation, API references, code examples, and usage instructions remain unchanged.
- No new features, bug fixes, or enhancements introduced in this release.
v1.0.2
- Added suggestion to use the api-gateway skill for other third party apps in the description.
- Updated all connection management, quick start, and usage examples to use Python scripts instead of curl/bash.
- No changes to the skill logic or API endpoints; documentation improvements only.
v1.0.1
- Base URL instructions clarified to use /salesforce/{native-api-path}, explaining direct mapping to Salesforce endpoints.
- Expanded OAuth connection example response to include fields such as creation_time, last_updated_time, and metadata.
- Instructions now explain explicitly how to specify a Salesforce connection with the Maton-Connection header and clarify default selection.
- Authentication steps updated to mention creating a Maton account if you don't have one.
- Minor improvements for clarity in usage and connection handling instructions.
v1.0.0
Salesforce skill has been redesigned to use managed OAuth and direct REST API integration via Maton.
- Replaced CLI-based workflow with Maton-powered REST API endpoints.
- Managed Salesforce authentication, connections, and environments via Maton control panel.
- Added example code for Python and JavaScript.
- Documented CRUD, SOQL/SOSL query, composite, batch, describe, and admin operations.
- Centralized error handling and streamlined usage with a single API key.
Metadata
Frequently Asked Questions
What is Salesforce?
Salesforce CRM API integration with managed OAuth. Install only if you need Salesforce CRM administration. Connect with the narrowest Salesforce permissions available, prefer sandbox orgs for destructive or batch work, verify the intended connection ID before each request, and revoke unused connections promptly. This integration can mutate CRM records — approve only specific write actions after checking the exact sObject, record IDs, and consequence. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. The endpoints documented here are the intended surface, not a technical limit — the `maton api` passthrough can reach others the connection permits. Default to read and list calls, and confirm every write or new connection with the user. It is an AI Agent Skill for Claude Code / OpenClaw, with 19598 downloads so far.
How do I install Salesforce?
Run "/install salesforce-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Salesforce free?
Yes, Salesforce is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Salesforce support?
Salesforce is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Salesforce?
It is built and maintained by byungkyu (@byungkyu); the current version is v1.2.2.
More Skills