salesforce-mcp-tunnel-drop-vs-cert-error-distinction

Salesforce MCP failures come in two distinct patterns: cert errors (use curl -sk bypass to Streamable HTTP endpoint) vs tunnel connection drops (proxy instability, not cert-related). When multiple MCP tool retries fail with connection drops — not cert errors — the tunnel proxy itself is unstable. Switch to direct Streamable HTTP fallback (POST /mcp with Accept: text/event-stream) after 2-3 consecutive failures to avoid wasted retries.

Related

• salesforce-mcp-tools-absent-from-deferred-list-despite-regis
• salesforce-mcp-registered-but-absent-from-deferred-tools
• salesforce-mcp-session-drop-requires-http-fallback
• salesforce-mcp-session-connection-failure-use-curl
• salesforce-mcp-tools-may-not-appear-despite-permanent-regist
• salesforce-mcp-tunnel-drops-while-container-healthy