Connecting a Salesforce Org
Connect your Salesforce org to MeshMesh
MeshMesh connects to Salesforce using OAuth. You authenticate through your browser — no passwords are stored. We support production orgs, sandbox orgs, and custom domains.
Getting Started
Open the Integrations menu from the sidebar and select Salesforce.
By default, MeshMesh provides a demo org so you can explore the product without connecting your own environment. When you're ready to work with your own data, connect your Salesforce org.
To connect, your Salesforce user needs API permissions at minimum. This is typically enabled by default for most user profiles, but check with your admin if you run into issues.
Click Connect, sign in through the browser, and approve the connection. That's it.
You can connect multiple Salesforce orgs. Each connection is independent — choose which one to use when creating an agent or when the agent asks you for a connection.
If you're connecting a production org and want to explore safely, use Plan Mode when creating agents. In Plan Mode, the agent shows you what it intends to do but doesn't make any changes to your org until you approve.
Additional Scopes
The default connection uses MeshMesh's managed app with standard scopes. If you need additional permissions or want full control over what MeshMesh can access, create your own External Client App.
In Salesforce Setup:
- Go to Setup → External Client Apps
- Click New
- Enable OAuth
- Add scopes — at minimum you need
api,offline_access, andrefresh_token. Add more scopes based on what you want the agent to access. - Under OAuth Settings → Flow Enablement, check Enable Client Credentials Flow
- Under Security, uncheck Require Proof Key for Code Exchange (PKCE) Extension for Supported Authorization Flows
- Set the callback URL to:
http://localhost:1717/OauthRedirect - Save and copy the Client ID and Client Secret
In MeshMesh:
- Open Integrations → Salesforce
- Click Advanced Settings
- Enter your Client ID and Client Secret
- Select the permissions you want to grant
- Click Connect
MeshMesh will now use your External Client App instead of the default one.
Sandbox or Custom Domain
MeshMesh supports sandbox orgs and custom domains (My Domain).
For sandbox orgs: Toggle the Sandbox option before connecting. This directs authentication to test.salesforce.com instead of login.salesforce.com.
For custom domains: Toggle Custom Domain and enter your domain (e.g., yourcompany.my.salesforce.com). MeshMesh will use your custom login page.
Everything else works the same — sign in, approve, and you're connected.
Troubleshooting
"Access Denied" — Your user doesn't have API permissions. Check your profile in Salesforce Setup or ask your admin.
"Session Expired" — Click Reconnect to re-authenticate through the browser.
Connection works but agent fails — The specific feature might not be enabled in your org, or you're missing a required license.