---
schema_version: "1"
id: a2cbce73305101b4a716922ee57713da7b6f29b92264848f31fa8ed82ebeee84
title: Security, Permissions, and Data Handling for the Salesforce MCP Server
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ai/264-0-0/security_permissions_and_data_handling.md
canonical_url: https://help.salesforce.com/s/articleView?id=ai.security_permissions_and_data_handling.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: cada3933e8195a5f09244b2317de85fcdcefa3281ad527b963ec00408ed62660
description: Access control isn't a separate layer bolted on top of Salesforce in Claude. It's the same permission model Salesforce already uses. Claude sees only what a given user is authorized to see.
products:
  - Salesforce Platform
release: "264"
---
# Security, Permissions, and Data Handling for the Salesforce MCP Server

Access control isn't a separate layer bolted on top of Salesforce in Claude. It's the same permission model Salesforce already uses. Claude sees only what a given user is authorized to see.

After your data reaches Anthropic through the MCP connection, its handling is governed by your organization's contract with Anthropic, not by Salesforce. Confirm data handling terms directly with Anthropic. Anthropic isn't permitted to use Salesforce intellectual property, including your Salesforce data and business logic accessed via MCP, without permission.