Admin Toolkit for Salesforce

One Toolkit, Focused Workspaces

The popup Apps tab is the main entry point for the toolkit's Salesforce workspaces.

Administrator and Developer Tools

• Search Salesforce metadata by label, name, API name, object, developer name, and matching snippets.
• Compare metadata from two signed-in Salesforce orgs, filter differing files, and inspect actual source changes side by side.
• Retrieve source from an outbound change set discovered in Salesforce Setup, and classify each retrieved file against another signed-in org as Same, Different, Missing from target, or Unsupported.
• Open supported metadata records directly in Salesforce Setup.
• Send user-initiated Salesforce REST API requests and inspect JSON responses.
• Execute anonymous Apex and review compile, execution, and debug output.
• Export SOQL, SOSL, GraphQL, and report results as available CSV or JSON output.
• Browse Salesforce document folders, preview supported files, and download selected folders and files as ZIP.
• Trace object and field permissions to the profiles, permission sets, and permission set groups that grant them.
• Inspect setup audit trail, API limits, login history, event log files, org summaries, and user summaries.
• Review the Winter ’27 release notes against your own org and keep your decisions between visits.
• Use the built-in English and Japanese manual for end-user guidance.

How It Works

• The extension runs in Chrome and uses the active Salesforce session.
• Salesforce user and organization identity fields are used to identify the active session and org.
• Browser API requests containing Salesforce data, identity data, authentication information, and user-entered requests are sent only to the selected Salesforce org, not to developer-operated servers. The one exception is Org Review reading the public Salesforce Trust status for the org's instance from api.status.salesforce.com; that request carries no credentials and no org data, only the instance name.
• Org comparison reads the current workspace and the selected comparison org over that org's existing signed-in Salesforce session. Its Pull and Deploy actions are read-only previews in this release.
• The toolkit reads far more than it writes. It has exactly two write paths: SheetD record updates, and Org Review's cleanup workflow deleting one permission set assignment — and that one runs only in a sandbox org. It refuses in production, requires a preview less than five minutes old and a typed confirmation equal to the assignment Id, re-reads and compares the assignment immediately before sending, and journals the outcome locally first.
• Workspace preferences, search data, pending edits, recent/favorite tools, sanitized operation history, and bounded SheetD update receipts may be stored locally in Chrome browser storage on the user's device. SheetD workbooks are not persisted. Org Review keeps a bounded per-org record — the last run's redacted summary, a change-detection baseline, cleanup tasks, and a sandbox action log holding record Ids, timestamps, and outcomes only. The rendered report is rebuilt on each run rather than stored.
• Operation history is limited to the most recent 100 entries and excludes session tokens and authorization headers. Feature-specific saved data can be cleared where the extension offers that control, and removing the extension clears its Chrome-managed local storage.
• The extension does not include analytics, telemetry, advertising, affiliate links, or remotely hosted JavaScript or WebAssembly.
• Extension JavaScript, HTML, CSS, and third-party spreadsheet code are packaged with the extension. Salesforce responses are treated as data and are not executed as code.

Read the full Privacy Policy.

Permissions

• cookies: reads Salesforce session cookies so the toolkit can connect to the org where the user is already signed in.
• storage: saves local workspace preferences, data, UI settings, and pending edits.
• Salesforce host access: permits requests to Salesforce org, Setup, Experience Cloud, Visualforce, and Salesforce Sites domains used by the active org.

Install

Install Admin Toolkit for Salesforce from the Chrome Web Store. For local development:

1. Open chrome://extensions.
2. Enable Developer mode.
3. Choose Load unpacked.
4. Select the extension source folder.
5. Open a Salesforce tab and launch the extension.

Next Release

Version 0.10.0 is a validated release candidate awaiting Chrome Web Store upload. The minor version moves from 0.9.x because this release adds capability rather than only branding. Org Review grows from a single report into a composed review pipeline: new read-only collectors cover Apex, Health Check, certificates, login and session policy, OAuth and connected-app exposure, sharing defaults, async operations, and an evidence-based permission sweep, feeding a baseline, an impact view, and a cleanup workflow. A new Winter ’27 release review page catalogues the release notes with its own review UI. The product mark is now the Three Tone Fan identity in Admin Toolkit indigo.

This release also adds the extension’s second write path, and it is deliberately narrow: Org Review’s cleanup can delete one permission set assignment, only in a sandbox org, only after a recent preview and a typed confirmation matching the assignment Id. The permission set is unchanged — still cookies and storage with the same Salesforce host allowlist — and no telemetry, analytics, remote code, or developer-operated backend was introduced.

Version 0.9.1, which preceded it, added Org Differences as a standalone popup app and taught Metadata Admin’s Outbound Change Sets panel to retrieve source directly from a change set discovered in Salesforce Setup and classify every retrieved file against another signed-in org.

Support

Read the user manual with screenshots.