Sf Cli.
All posts.
CLI vs MCP vs Purpose-Built Tools, and Skills vs Agents: Claude Code, Copilot and Agentforce Vibes Compared
How CLI, MCP and purpose-built tools compare on token cost, what skills and agents are, whether agents can use skills, and how Claude Code and Copilot differ.
Salesforce in Claude: Token Cost of OrgPulse vs DX MCP vs the sf CLI
We asked Claude three Salesforce admin questions through OrgPulse, the DX MCP Server and the sf CLI on three models, and measured tokens, cost and accuracy.
Archaeological Specs: Using AI Agents Safely on a Salesforce Org You Didn't Build
Before an AI agent changes an org you didn't build, map what it does now: retrieve metadata, trace dependencies, write an as-is spec and pin it with tests.
Salesforce Security Audit Tools Compared: Health Check, Code Analyzer, AuraInspector, Org Check and sf-audit
Salesforce Health Check scores settings, not exposure. What Code Analyzer, AuraInspector, Org Check, Security Center and sf-audit each cover, and what to use.
Salesforce Attack Chain Correlation: Five New Chains and the Blind Spot That Hid Them
sf-audit's attack chain model could not see half its own checks. Fixing the capability grants unlocked five new Salesforce attack chains, taking it to sixteen.
Which Salesforce Objects Are Actually Coupled? Mapping Cross-Object Processes from Flows and Apex
Schema Builder shows declared relationships. It does not show that a Flow on Case writes Task. Here is how to map behavioural coupling from Flows and Apex.
Apex Test Data and CI Tooling: What to Use and What It Costs
Test data factories rot, Test.loadData drifts, and a coverage gate on its own proves nothing. How to pick a data approach and wire tests into a pipeline.
Salesforce Outage Recovery After Incident 20004433: What Fails Silently Once the Status Page Turns Green
Salesforce incident 20004433 hit core services on 16 September 2026. The sf CLI queries that find the async work that failed quietly while you waited.
OmniStudio Clean Metadata Deployment: Components Finally Deploy Like Normal Metadata
Winter '27 lets OmniStudio components deploy through sf CLI, change sets and packages like any other metadata. The catch is which runtime you are on now.
Why Filtering Salesforce Event Logs by IP Misses Most of the Incident
Salesforce splits one actor's activity across event types with different identifying fields. Why IP filtering misses the SOQL, and how to correlate safely.
Deployable Permission Sets for a Salesforce Delivery Team: Metadata, the CI User, and OmniStudio
Permission set XML you can deploy, how to get the right permission API names out of your own org, and how to scope the CI user and OmniStudio builder roles.
Audit Your Agentforce Footprint: Every Agent, Agent User, and Permission in One Pass
Inventory every Agentforce agent, agent user, and permission with sf CLI and SOQL: the exact queries to see what your agents can touch, and from where.
Free Salesforce Event Monitoring: Build a Security Baseline from EventLogFile Without Shield
Salesforce gives Enterprise, Unlimited and Performance orgs free EventLogFile logs, but only for a day. How to capture them into a baseline without Shield.
Fixing 'Could Not Infer a Metadata Type' in the Salesforce CLI
The Salesforce CLI error 'Could not infer a metadata type' has one message and several causes. A decision tree to find which one you hit, and the fix for each.
Salesforce Guest User Exposure: How sf-audit Grades It by Real Reachability
sf-audit now grades Salesforce guest user exposure by real UI API reachability, not just the sharing model, and adds six new external-facing security checks.
sf-audit vs sf-cli-security-audit: Two Salesforce Security CLIs Compared
Two sf CLI plugins audit Salesforce security from the terminal. One is opinionated, broad and open source; the other configurable and focused. How to pick.
Salesforce Attack Chain Detection: When Five Medium Findings Are One Critical Problem
Isolated Salesforce security findings look survivable. Attack chain detection correlates them into named multi-step scenarios, each mapped to real controls.
Org-Dependent Packages: How to Edit in a Sandbox, Pull Changes, and Create a Merge Request
The complete workflow for org-dependent Salesforce packages: make changes in a sandbox, retrieve them with sf CLI, commit to git, and open a merge request. Step by step.
Deploying Salesforce Metadata with sf CLI: From Sandbox to Production
Deploy Salesforce metadata from your local project back to a sandbox or production org using sf CLI, including check-only deploys, reading results, and what to do when deploy fails.
Fetching CRM Analytics & Einstein Discovery Metadata with sf CLI: WaveDashboard, WaveRecipe, DiscoveryStory
How to retrieve CRM Analytics (Wave) and Einstein Discovery metadata from Salesforce using sf CLI, including what can and cannot be retrieved via the Metadata API.
Fetching OmniStudio Metadata with sf CLI: OmniScript, DataRaptor, FlexCard, Integration Procedure
How to retrieve OmniScript, DataRaptor (OmniDataTransform), FlexCard (OmniUiCard), and Integration Procedure metadata from Salesforce using sf CLI, with standard runtime requirements and deployment caveats.
Fetching Code Metadata from Salesforce with sf CLI: ApexClass, ApexTrigger, LWC, Aura
How to retrieve ApexClass, ApexTrigger, LightningComponentBundle, and AuraDefinitionBundle metadata from Salesforce using sf CLI, for admins who oversee developers or need to deploy code.
Fetching Security Metadata from Salesforce with sf CLI: Profile, PermissionSet, Role
How to retrieve Profile, PermissionSet, PermissionSetGroup, MutingPermissionSet, and Role metadata from Salesforce using sf CLI, including partial retrieval patterns for large Profile XML.
Fetching Automation Metadata from Salesforce with sf CLI: Flow, WorkflowRule, ApprovalProcess
How to retrieve Flow, WorkflowRule, ProcessBuilder, and ApprovalProcess metadata from Salesforce using sf CLI, with source format, MDAPI format, and package.xml examples.
Fetching Custom Configuration Metadata from Salesforce with sf CLI
How to retrieve CustomObject, CustomField, Layout, FlexiPage, RecordType, and CompactLayout metadata from Salesforce using sf CLI: source format, MDAPI format, and package.xml.
Connecting sf CLI to Your Salesforce Org: sf org login web Complete Guide
How to connect sf CLI to your Salesforce org using sf org login web. Covers sandbox vs production login, org aliases, and verifying your connection.
Setting Up Your Environment: Terminal, sf CLI, and Git for Salesforce Admins
Step-by-step guide to setting up your terminal, sf CLI, and git on Windows or macOS: everything a Salesforce admin needs before working with metadata.