Built by PennyAn AI studioRun the free scan

Guide

How to export your metadata

Pick one of three routes. Each uses the same package.xml manifest and ends with a ZIP or folder you drop into the toolkit.

Download package.xml Go to the scanner

Good to know. A sandbox works as well as production, and reading metadata changes nothing in your org. You need a user with the "Modify All Data" or "Modify Metadata" permission (or API access to the metadata). The toolkit reads your ZIP in your browser; nothing is uploaded for the free scan.

What the package.xml retrieves

Workflow (rules, field updates, time triggers), Flow (incl. Process Builders), ApexTrigger, CustomObject (with fields, record types and validation rules inside each object), Layout, PermissionSet and Profile. The wildcard (*) retrieves every component of a type, except that CustomObject * returns custom objects only, so common standard objects (Account, Contact, Lead, Opportunity, Case and others) are listed by name. Add any other standard objects you use. Edit the <version> if your org needs a different API version.

Show package.xml

Route A: Workbench (no install, no code)

  1. Open workbench.developerforce.com, choose Production or Sandbox, accept the terms and log in.
  2. Go to Migration → Retrieve.
  3. Under Unpackaged Manifest, choose the package.xml you downloaded. Tick Single Package, then click Next and Retrieve.
  4. When it finishes, click Download ZIP File and drop that ZIP into the scanner.

Workbench is a long-standing community tool hosted by Salesforce but not officially supported by Salesforce. If your company blocks it, use route B or C.

Route B: VS Code + Salesforce Extension Pack

  1. Install VS Code, the Salesforce Extension Pack and the Salesforce CLI.
  2. Command Palette → SFDX: Create Project with Manifest, then SFDX: Authorize an Org.
  3. Replace manifest/package.xml with the downloaded file.
  4. Right-click manifest/package.xml → SFDX: Retrieve Source in Manifest from Org (Salesforce docs, manifest docs).
  5. Zip the force-app folder (right-click → Compress on Mac, Send to → Compressed folder on Windows) and drop the ZIP into the scanner.

Route C: Salesforce CLI (sf)

From inside a Salesforce DX project (sf project generate --name toolkit creates one):

sf org login web --alias myorg            # add --instance-url https://test.salesforce.com for a sandbox
sf project retrieve start --manifest package.xml --target-org myorg
zip -r metadata.zip force-app

Or retrieve straight to a metadata-format ZIP:

sf project retrieve start --manifest package.xml --target-metadata-dir retrieved --target-org myorg
# → retrieved/unpackaged.zip, drop it into the scanner

Sources: sf project retrieve start reference, Metadata API guide: retrieve with package.xml. Checked October 2026.