A free health check for the admin who got handed the org and the owner who pays for it. We read setup data and metadata only, revoke our access as soon as the scan ends, and email every finding in plain language, in the order we would fix them. Page one is a summary for whoever owns the org. No meeting needed to read any of it.
A System Administrator approves it on Salesforce's own screen. The scan takes about a minute.
Salesforce's Health Check gives you a score. This check tells you which integrations stop working on which Salesforce deadline, who can fix each item and in what order, with a link to the Setup page that shows each finding.
Each one comes with its criticality, the Salesforce deadline where there is one, what to do and who can do it, so your own admin or developer can work through it. If you would rather we did the work, email us and we come back with a fixed price and a date.
Setup data and metadata only, never customer records. The only name and email we keep are those of the person who approves the check. The report prints when our access was revoked and what Salesforce answered, and tells you where in Setup to confirm it.
Runs on Enterprise, Unlimited, Performance, Core, Advanced, Max, Agentforce 1, Nonprofit Cloud and Education Cloud orgs, and on Professional or Pro Suite orgs that have the Web Services API add-on. Starter Suite and Free Suite do not expose the API, so the check cannot run there.
Every report is reviewed by Mitesh Jain, founder of Meet The Mind Technologies, a registered Salesforce Consulting Partner.
setup data and metadata, through the Metadata API, the Tooling API and setup objects
The api scope is what Salesforce offers for this work, and it permits writes. We use it to read, we write nothing, and we revoke our access when the scan finishes.
Click Run the free check. A System Administrator has to approve it; if that is not you, forward this page to your admin. Start and approve in the same browser, because a link forwarded halfway through will not start a check.
Salesforce shows its own approval screen for "MTM Org Health Check", with the permission line "Manage user data via APIs (api)". That is Salesforce's wording. Click Allow. The screen appears every time, even for someone who approved it before.
If Salesforce shows an "OAuth Error" page instead, with the code OAUTH_APPROVAL_ERROR_GENERIC, the org blocks apps nobody has installed yet, a Salesforce security change from September 2025. An admin can either give the person running the check the Approve Uninstalled Connected Apps permission through a permission set, or install MTM Org Health Check from Setup, Connected Apps OAuth Usage. Then open the link again. Stuck? Email partners@meethemind.com and we will walk you through it.
The scan usually takes under a minute. When it finishes we revoke our access and record the time and Salesforce's answer.
Mitesh reviews every report before it goes out. Once approved, the report link is emailed to the Salesforce user who approved the check, at the verified email address on their Salesforce user record; if Salesforce has not verified it, Mitesh sends the link by hand after confirming who asked. You get it within one working day. Reply to that email if any finding looks wrong and it is corrected.
If Salesforce answers API_DISABLED_FOR_ORG after Allow, the edition has no API access (Starter, Free Suite, or Professional without the Web Services API add-on). The page says so in plain words and the check stops there.
Only a System Administrator can approve the check. If you are the owner, president or head of operations, forward this page to whoever administers Salesforce and ask them to run it. Page one of the report is written for you, with the admin's fixes behind it. If nobody administers your Salesforce, write to partners@meethemind.com and Mitesh will tell you which login can run it.
Not for: data quality, duplicate records, report accuracy, user adoption or renewal negotiation. Those need records or your contract, and we read neither.
You should not take it on trust. The check reads setup data and metadata only and revokes its access when the scan finishes. The report prints the revoke time and Salesforce's answer, and tells you which Setup page shows our app and how to revoke it yourself, so the proof comes from Salesforce rather than from us. If Salesforce does not confirm the revoke, the report says so plainly and Mitesh follows up. One of the findings is the list of outside apps that still hold access to your org.
When the scan finishes, we ask Salesforce to revoke our token and record the time and Salesforce's answer; the report prints both. After that the app cannot reach your org again unless someone approves it again. Setup, Connected Apps OAuth Usage keeps a line showing that you approved the app. That line is not access, and Revoke removes it.
We do not read your customers' personal data, because we do not read records. We do read setup data that includes Salesforce user IDs and login times, which count as personal data of your staff under UK and EU law, and we keep the name and email of the person who approves the check. The privacy notice and a data processing agreement are covered on the data and privacy page. UK and EU organisations can ask for the DPA to be signed before they approve the check.
Production, because the findings are about what is running. A sandbox has different apps, login history and users. If your policy requires a sandbox first, run it there with the sandbox link, read the report, then run production.
Yes. The same link works as many times as you like. Each run is a fresh check with a new report, so you can see what changed.
Mitesh may email you once to ask whether it was useful, and you can tell us to stop at any time. If you want the fixes done, write to partners@meethemind.com with the fix numbers and we come back with a fixed price and a date. If a finding is wrong, write and it gets corrected.
No. The report tells you what to fix and in what order, so your own team can do it. If you want us to do it, email us with the fixes you care about and we quote a fixed price and a date.
OAuth Error: see step 3 above. API off: Starter Suite and Free Suite have no API, and Professional and Pro Suite need the Web Services API add-on, so the check cannot run there.
A System Administrator approves it on Salesforce's own screen. The scan takes about a minute.