Hi, I'm testing Hosted Salesforce MCP server (Readonly) by connecting it with Claude. I have created an External Client app as per the documentation. In our org we use the recommended "Admin approved users are pre-authorized", so I added a permission set to the app and assigned that to a test user. I can login fine with the test user and do prompts like getUserInfo. However, when I do any SOQL requests I am met with "this sessions is not valid for use with the API". I recognized this error from the Salesforce article about the developer console, where you need to give Use Any API client permisson for the developer console to work. I tried the same for the test user and immediately SOQL queries work. What am I missing? Surely this permission set it not required to connect MCP and do any useful requests? As this permission set goes against any security recommendation. Normally, assigning the Permission Set is enough to authorize the user. Thanks submitted by /u/sysitwp [link] [comments]