Salesforce Connected Apps & External Client Apps skill for Claude Code.
This skill helps you create and manage:
- Connected Apps: Traditional OAuth-enabled applications for Salesforce integration
- External Client Apps (ECAs): Modern, security-first applications with enhanced controls (API 61.0+)
| Feature | Description |
|---|---|
| App Generation | Create Connected Apps or ECAs from requirements |
| Security Scoring | 120-point validation across 6 categories |
| Template Library | Pre-built templates for common OAuth flows |
| Migration Support | Guidance for Connected App → ECA migration |
| Best Practices | Built-in security recommendations |
Use the sf-connected-apps skill to create a Connected App named "MyIntegration"
with API and RefreshToken scopes for server-to-server integration.
Use the sf-connected-apps skill to create an External Client App named
"MobileApp" for a mobile application with PKCE enabled.
Use the sf-connected-apps skill to review and score my existing Connected Apps
for security best practices.
| Category | Points | Focus |
|---|---|---|
| Security | 30 | PKCE, rotation, certificates |
| OAuth Configuration | 25 | Callbacks, flows, tokens |
| Metadata Compliance | 20 | Required fields, API version |
| Best Practices | 20 | Minimal scopes, admin approval |
| Scopes | 15 | Least privilege principle |
| Documentation | 10 | Description, contact info |
- Simple, single-org integration
- Legacy system compatibility needed
- Quick setup is priority
- No cross-org deployment needs
- Multi-org or ISV distribution
- Automated secret rotation required
- Enhanced audit logging needed
- Full metadata compliance required
- Packaging in 2GP
sf-connected-apps/
├── skills/
│ └── sf-connected-apps/
│ └── SKILL.md # Main skill definition
├── templates/
│ ├── connected-app-basic.xml
│ ├── connected-app-oauth.xml
│ ├── connected-app-jwt.xml
│ ├── connected-app-canvas.xml
│ ├── external-client-app.xml
│ ├── eca-global-oauth.xml
│ ├── eca-oauth-settings.xml
│ └── eca-policies.xml
├── examples/
│ └── example-usage.md
├── docs/
│ ├── oauth-flows.md
│ ├── security-checklist.md
│ └── migration-guide.md
└── README.md
- sf-deploy: For deploying apps to orgs
- sf-metadata: For creating related metadata (Named Credentials)
MIT License. See LICENSE file.
Copyright (c) 2024-2025 Jag Valaiyapathy