How can we secure Salesforce hosted MCP server that it has less record access provided to Claude users - based on record fields such as country or product line, similar to attribute based access control - than if they were logging into Salesforce from a browser?
We do not want to change the record sharing and access rules in Salesforce for logged in users but want to restrict it for Claude or other AI tool users.
What options would you recommend?
The cleanest way to avoid touching Salesforce sharing rules is enforcing access at the MCP layer. Browser users hit Salesforce normally, AI agent traffic goes through a separate policy layer that redacts fields based on country, product line, whatever attributes you need, before the data reaches the agent.
We do this at DataGrout if it's useful to look at.
