IntegrationsSalesforce
Meetext connects each customer's Salesforce org through Connected App OAuth, keeps its instance URL and credentials scoped to that environment, and validates the deployment with a real capability. The customer's object permissions, field-level security and change process remain in force, with sandbox and production addressing handled explicitly.
Your AI, MCP server or API
Their workspace and approved access
Their entitled capabilities and version
Validation, health and the next action
Available today
Ready for customer deployments with customer-scoped authorization, validation and lifecycle management.
What a forward deployed engineer does by hand today.
A managed or unmanaged package, or a Connected App, installed into a sandbox first and then promoted to production through the customer's own change process. There is no version of this that takes an afternoon.
The person whose calendar decides your go-live date.
A Salesforce administrator, and usually a change advisory board as well. In regulated industries the sandbox-to-production promotion is a scheduled event, not a request.
Whose identity the product acts as, and where that grant lives.
OAuth 2.0 against the customer's org, with the JWT bearer flow for server-to-server. Connected App policies, IP restrictions and permitted-users settings all decide whether a grant works, and all of them are the customer's.
The repeatable half, turned into software.
The Connected App OAuth flow, with sandbox and production as separate environments, recording the org's instance url because every call must go there, per-environment credential storage, and validation that runs a real query and checks the fields came back. Field level security hides data by omitting it rather than failing, so a check that only counted rows would call a broken deployment healthy.
The half that is theirs and should stay theirs.
The org. Its objects, its sharing rules, its profiles, its change process, and the decision about what a package is allowed to read.
How capabilities map onto what the platform will let you do.
Object and field level security, permission sets, sharing rules. A capability that reads an Opportunity is not one permission, it is a profile, a permission set and a sharing model that has to agree.
What has to execute before anyone is told it works.
Executing against a sandbox, then against production, and treating those as different environments rather than the same one twice.
Rotation, expiry, revocation, and who notices first.
Refresh tokens with org-level revocation. Connected App policy changes can invalidate a grant without anything failing until the next call.
What happens to this customer when you ship version four.
Package versions and org state are separate axes, and an upgrade can succeed while leaving the org in a configuration the new version does not expect. This is precisely the problem the deployment control plane exists to model.
What actually goes wrong, named rather than generalised.
Field level security silently returning nothing rather than an error. Governor limits under load. A sandbox refresh wiping configuration. A validation rule written in 2019 rejecting a record the integration creates.
How you learn it broke without the customer telling you.
The three layers, with the org's daily API allowance watched. That allowance is shared with everything else the customer runs, so exhausting it degrades Salesforce as a named dependency rather than reporting your product as broken.
Ready for customer deployments with customer-scoped authorization, validation and lifecycle management.
Available for customer deployments, with customer-scoped authorization, validation and lifecycle management.
Connect a source, approve what ships and send your customer an install link. 2 customer environments free. No card required.
