Skip to main content

Set up the Salesforce Data 360 MCP server

The Salesforce Data 360 MCP server gives AI agents access to the Data 360 Connect API, covering unified customer profiles, segments, activations, data streams, identity resolution, calculated insights, and semantic search indexes. This guide covers enabling the server in your Salesforce org, creating an External Client App for OAuth, and connecting it to MintMCP from the recommended server catalog.

Prerequisites​

  • A MintMCP admin account
  • A Salesforce org with a Data 360 license where you have Administrator access
  • The "Customize Application" permission in Salesforce

Activate the Data 360 MCP server​

The Data 360 server must be activated in your org before any MCP client can connect to it.

  1. In Setup, type MCP Servers in the Quick Find box and select MCP Servers under API Catalog.
  2. Find the Data 360 server in the list and toggle it on.

Activation takes up to two minutes.

Create an External Client App​

Salesforce requires an External Client App for MCP authentication. Do not use a Connected App.

  1. In Setup, type external client in the Quick Find box and select External Client App Manager.

  2. Click New External Client App.

  3. Fill in the Basic Information section with an app name (for example, "MintMCP").

  4. Expand API (Enable OAuth Settings) and check Enable OAuth.

  5. In the Callback URL field, enter:

    https://app.mintmcp.com/oauth/callback

  6. Under Selected OAuth Scopes, add both required scopes:

    ScopeDescription
    mcp_apiAccess MCP servers
    refresh_tokenPerform requests at any time

  7. Under security settings:

    • Select Issue JSON Web Token (JWT)-based access tokens for named users
    • Select Require Proof Key for Code Exchange (PKCE) extension
    • Deselect all other options

  8. Click Create.

Allow up to 30 minutes for the External Client App to become active before connecting.

Copy the Consumer Key​

  1. In External Client App Manager, open the app you just created.
  2. Go to Settings > Consumer Key and Secret.
  3. Copy the Consumer Key (your OAuth Client ID). You'll need it in the next step. No client secret is needed.

Grant Data 360 permissions to users​

Users who need to access the Data 360 MCP server must have at least one of these permissions assigned via a Salesforce permission set:

PermissionAccess level
View Data 360Read-only: query profiles, segments, and insights
Manage Data 360Full access: configure data streams, activations, and mappings

For steps on assigning Data 360 permission sets, see Data 360 Standard Permission Sets in Salesforce Help. For help configuring permissions in your org, contact Salesforce support.

Add Salesforce Data 360 to MintMCP​

Salesforce Data 360 is listed in the MintMCP recommended server catalog. Because Salesforce does not support dynamic client registration for this server, you supply the Consumer Key you created above.

  1. In MintMCP, go to MCP store and open the Recommended servers tab.
  2. Select Salesforce Data 360 to open the configuration panel.
  3. Open OAuth Client Advanced Settings and paste the Consumer Key in the Client ID field. Leave the Client Secret field empty.
  4. Click Install.

Each user authenticates through Salesforce OAuth on first use, so all tool calls run under their individual Salesforce identity and are limited by their Data 360 permissions.

Security considerations​

  • Each user authenticates individually through Salesforce OAuth, so tool calls are attributed to their Salesforce identity and bounded by their Data 360 permission set.
  • The Consumer Key alone authorizes OAuth access to your External Client App, so store it securely and restrict who can view it in MintMCP.
  • Data 360 operations count against your org's API quota. Monitor usage in Salesforce Setup under API Usage and Limits.
  • Users without View Data 360 or Manage Data 360 receive authorization errors when they connect, so confirm permission set assignments before rolling out access.

Next steps​