Free Salesforce AI Readiness Check

Run your free Salesforce AI Readiness Check in Claude.

Connect a Salesforce sandbox or production org through the hosted Nexus MCP, run the diagnostic prompt, and get a signal-only report before AI agents touch real work.

Set up in ClaudeView sample report

Uses Salesforce OAuth. No Salesforce password is shared with Nexus.

Connector path

Claude connects through Nexus MCP, then Salesforce OAuth.

Use the hosted MCP endpoint in Claude, approve Nexus, connect the Salesforce org you want inspected, and run the diagnostic prompt.

https://mcp.nexus-agency.net/mcpMCP URL

Official Nexus MCP endpoint. Copy it from the field above to avoid typos.

Before you connect Salesforce

The free check runs a signal-only Salesforce AI readiness diagnostic in Claude through the hosted Nexus MCP. It shows whether your org has data, automation, access, and process-context risks before AI agents touch real work.

  • Use sandbox or production: Sandbox is recommended if you want to validate the flow first.
  • OAuth only: No Salesforce password is shared with Nexus.
  • Requested scopes: Salesforce OAuth scopes api refresh_token. api allows Salesforce API access for diagnostic queries. refresh_token allows the connector to keep the connection alive without asking you to reconnect during the retention window.
  • Salesforce changes: The free health check is read-only against Salesforce. It runs SOQL and metadata-read style checks. It does not create, update, delete, deploy, or modify Salesforce records, metadata, automation, users, permissions, or settings.
  • Data retention: Nexus retains the encrypted Salesforce connection/session for up to 30 days after last access, unless you disconnect earlier. The free health check may retain the latest generated diagnostic snapshot for trend comparison. It is not used to build a persistent Org Brain.
  • Token handling: OAuth access and refresh tokens are stored server-side by Nexus as encrypted session data using AES-256-GCM. Tokens are removed from Nexus session storage when the connector is disconnected or when the session expires and cleanup runs. Revoking the Connected App in Salesforce invalidates future token use.
  • Revocation: Remove the connector in Claude and revoke Nexus from Salesforce Connected Apps.
  • Output: Readiness score, category findings, candidate risks, and areas for human review.

Not ready to connect yet? View a sample report first.

Choose your Claude setup

Connect without handing installation to the assistant.

Claude Desktop and claude.ai use the same no-terminal connector flow. Claude Code has a separate one-line command. In both cases, you approve Nexus MCP first and authorize Salesforce separately.

Official MCP URL
https://mcp.nexus-agency.net/mcp

Recommended · no terminal

Claude Desktop or claude.ai

For individual Free, Pro, or Max accounts. The connector is attached to your Claude account, so the same connection is available in supported Claude clients.

  1. Open Connectors

    In Claude Desktop or claude.ai, open Customize → Connectors.

  2. Add the custom connector

    Select + → Add custom connector, paste the official MCP URL above, and select Add.

  3. Connect your account

    Select Connect beside Nexus MCP and complete the browser approval. You never paste a password, client secret, or OAuth callback into Claude.

  4. Enable it for the conversation

    Open the conversation’s + → Connectors menu, enable Nexus MCP, then use the diagnostic prompt below. Nexus will open Salesforce OAuth when the org connection is needed.

Developer setup

Claude Code

Run the explicit first-party Claude CLI command yourself. This keeps MCP installation outside the model’s prompt and makes the trust decision visible.

Terminal command
claude mcp add --transport http nexus-mcp https://mcp.nexus-agency.net/mcp

  1. Add Nexus MCP

    Run the command above in your terminal. No local MCP package or installation script is required.

  2. Authenticate in Claude Code

    Start Claude Code, run /mcp, select nexus-mcp, and complete authentication in the browser.

  3. Connect Salesforce

    Paste the diagnostic prompt below. Nexus MCP will open the Salesforce login when no org is connected.

Organization-managed

Claude Team or Enterprise

An Owner adds the connector once for the organization. Each member still connects and authorizes their own Nexus and Salesforce access.

  1. Owner adds Nexus MCP

    Open Organization Settings → Connectors, select Add → Custom → Web, and paste the official MCP URL.

  2. Member connects

    Open Customize → Connectors, find Nexus MCP with the Custom label, and select Connect.

  3. Member authorizes Salesforce

    Enable Nexus MCP for the conversation and use the diagnostic prompt. Each person approves only the Salesforce access available to their own account.

Why the connector may show a security notice: Until Nexus MCP is listed in Anthropic’s Connectors Directory, Claude labels it as a custom connector and asks you to confirm that you trust the server. Verify that the URL is exactly https://mcp.nexus-agency.net/mcp before approving it.

Prompt for Claude
Nexus MCP
Use Nexus MCP to connect my Salesforce org. If no org is connected, open the Salesforce login flow and wait for me to authorize it.

After the org is connected, run the free Salesforce AI Readiness Check with sf_health_audit using export_format markdown across data_quality, automation, security, and adoption.

Prompt for Claude

Run the free diagnostic.

After Nexus MCP is active, paste this prompt into Claude. It starts Salesforce authorization when needed; it does not install the connector.

The free check returns signals and candidate risks. The paid Blueprint adds human review, prioritization, AI use-case selection, and a cleanup roadmap.

Sample output

See what the free check returns before you connect.

This sample is illustrative. It is not from a customer org. It shows the shape of the report: readiness score, category findings, candidate risks, and areas that need human review.

Example findings

Duplicate account signals

Severity: Medium
Evidence type: SOQL aggregate check
AI impact: An agent may summarize the wrong account history or recommend action from duplicate records.
Needs human review: Confirm merge rules and ownership edge cases.
Blueprint adds: Cleanup sequence and field-level review plan.

Active flow side effects

Severity: High
Evidence type: Metadata-read check
AI impact: Agent-driven record updates may trigger automation that users do not expect.
Needs human review: Identify which flows run on create/update for agent-touched objects.
Blueprint adds: Risk-ranked automation map and test plan.

Broad permission patterns

Severity: Medium
Evidence type: Metadata-read check
AI impact: AI tools inherit access risk when profiles or permission sets expose more data than the task requires.
Needs human review: Match permissions to intended AI use cases.
Blueprint adds: Access review path for the first safe pilot.

Set up in Claude

Sandbox supported. Access details shown before approval.

FAQ

Operational answers for the hosted Nexus MCP, Salesforce OAuth, and the free readiness check.

Is the free check read-only?

Yes. The free health check is read-only against Salesforce. It runs SOQL and metadata-read style checks. It does not create, update, delete, deploy, or modify Salesforce records, metadata, automation, users, permissions, or settings.

Should I use sandbox or production?

Use sandbox first if your team wants to validate the connector flow before touching production. Use production when you want the diagnostic to reflect the live org your AI agents would depend on.

What Salesforce scopes does Nexus request?

Nexus requests api refresh_token. api allows Salesforce API access for diagnostic queries. refresh_token keeps the connection alive during the retention window without asking you to reconnect each time.

Does Nexus store my Salesforce password?

No. Salesforce authentication uses OAuth. Your Salesforce password is not shared with Nexus.

How long does Nexus keep the connection?

Nexus retains the encrypted Salesforce connection/session for up to 30 days after last access, unless you disconnect earlier. Tokens are removed from Nexus session storage when the connector is disconnected or when session cleanup runs.

How do I revoke access?

Remove the connector in Claude and revoke Nexus from Salesforce Connected Apps. Revoking the Connected App in Salesforce invalidates future token use.

Does the free check build an Org Brain?

No. The free check may retain the latest generated diagnostic snapshot for trend comparison. It is not used to build a persistent Org Brain.

Turn readiness signals into Salesforce work.

Use Nexus MCP to get the first read. Use Nexus Agency when the org needs senior review, a ranked cleanup path, and engineering-backed Salesforce delivery from the same operator perspective.

Set up in ClaudeGo to Nexus Agency
  • Signal-only diagnostic first
  • Fixed-scope Blueprint when risk appears
  • Scoped cleanup after the roadmap is clear