Spojit connects to these servers through a custom MCP server connection, so you add them with Add custom server rather than from the connector catalog. Salesforce maintains them and decides which tools they offer; see Salesforce’s Hosted MCP Servers guide for the current list.
Before you start
Salesforce only accepts MCP clients registered in your org as an External Client App, so a Salesforce admin creates one for Spojit. You also need Spojit’s redirect URI, which the Spojit dialog shows.1
Copy Spojit's redirect URI
In Spojit, go to Connections, click Add custom server, and choose OAuth 2.0. Copy the Redirect URI shown in the form (for example
https://miraxa.spojit.com/api/connectors/oauth/callback). Keep the dialog open, or come back to it later.2
Create the External Client App
In Salesforce Setup, search Quick Find for External Client App Manager and click New External Client App. Fill in the basic information, expand API (Enable OAuth Settings), and select Enable OAuth.
3
Configure OAuth
- Callback URL: paste Spojit’s redirect URI.
- OAuth Scopes: add Access MCP servers (mcp_api) and Perform requests at any time (refresh_token).
- Security: select Issue JSON Web Token (JWT)-based access tokens for named users.
4
Copy the server URL
In Setup, open the hosted MCP servers page, pick the server you want, and copy its Server URL. Production and sandbox URLs differ, so copy it from the org you are connecting.
Server URL
Salesforce server URLs look like this example from Salesforce’s documentation:Connect in Spojit
1
Add a custom server
In Add custom server, enter a Name such as
Salesforce and paste the Server URL.2
Choose Auto authentication
Choose Auto and click Save & connect. Because Salesforce needs your own app, the OAuth 2.0 form opens with the authorization URL, token URL, and scopes already filled in.
3
Enter your app's credentials
Paste the Consumer Key as Client ID and the Consumer Secret as Client Secret. Check the Scopes field contains
mcp_api refresh_token, then click Save & connect.4
Sign in to Salesforce
Salesforce opens its login page. Sign in and allow access. Spojit marks the connection Connected and refreshes the token automatically.
https://login.salesforce.com/services/oauth2/authorize and Token URL https://login.salesforce.com/services/oauth2/token (use test.salesforce.com for a sandbox), with scopes mcp_api refresh_token.
Use it in a workflow
Add a Connector node, pick your Salesforce server under Custom Servers, and choose Agent Mode or Direct Mode. See Use a custom server in a workflow.Troubleshooting
MCP calls fail with INVALID_AUTH_HEADER or INVALID_JWT_FORMAT
MCP calls fail with INVALID_AUTH_HEADER or INVALID_JWT_FORMAT
Turn on Issue JSON Web Token (JWT)-based access tokens for named users in the External Client App, then click Reconnect on the connection.
Salesforce reports a redirect_uri mismatch
Salesforce reports a redirect_uri mismatch
The Callback URL in the External Client App must match Spojit’s Redirect URI exactly.
The connection stops refreshing
The connection stops refreshing
Add the refresh_token scope to the External Client App and to the connection’s Scopes, then reconnect.