MCP-Connected Agent

• Always 1

  Only two tools are visible to the assistant.

• Always 2

  The integration user cannot update or delete any record.

• Always 3

  Priority, length and rate checks block bad calls.

• Always 4

  Cases carry Origin "External Assistant".

• Least privilege. The server publishes two tools. No update, delete or open query tools.
• Rate limit: reject more than 20 write calls per caller per hour.
• Return only the five Account fields listed. No revenue or contact details.
• It may only create a Case and must refuse any other request.

Runs on Salesforce with hosted MCP servers, Service Cloud for Case, Agentforce only if the agent tool is added. Confirm editions and licenses with your Salesforce account team.

Salesforce products

Salesforce with hosted MCP serversService Cloud for Case

Editions and licenses

Agentforce must be enabled in your org. Confirm editions and licenses with your Salesforce account team; we check them in the first workshop.

Agent type

Hosted MCP server

From you

Hosted MCP servers available in the org. · An external assistant that supports MCP. · Service Cloud for Case. · The names of allowed callers.

Language

English. The agent writes in your locale and follows your wording settings.

Where it runs

Inside your Salesforce org. Records are read and written through the agent’s approved actions only.

Not included

Write tools for Opportunities, Leads or Accounts. · Delete or bulk tools. · Data Cloud queries over MCP. · Building the external assistant.

Designed in full before a line is built, with 8 scripted test conversations. The numbers become verified results when the agent is delivered.

• Deployable sourceThe agent, its actions, objects and screens as Salesforce metadata, in your repository.
• Solution designA Solution Design Document with UML: architecture, data model, sequence and security.
• Test suiteApex tests on every action, plus scripted conversations replayed before every release.
• Least-privilege accessIts own permission sets, so the agent and your staff see only what the job needs.
• Runbook and handoverHow to run it, change its rules and roll back, with a walkthrough for your team.

• Least-privilege access

  It runs as its own user with a permission set written for this agent, so it can reach only what the job needs.

• Changes only through approved actions

  The agent cannot edit records freely. Every change goes through one of its 4 actions, each with one job.

• People make the big calls

  Least privilege. The server publishes two tools. No update, delete or open query tools.

• Runs inside Salesforce

  Agentforce runs on the Salesforce platform and its Einstein Trust Layer. Confirm which Trust Layer features apply to agents in your org with your Salesforce account team.

• Every change is on the record

  What the agent does lands as normal Salesforce records with their full history, so you can see who changed what and when.

• The review is free

  A 60-minute call with an architect about the MCP-Connected Agent and your org, with a written plan you keep.

• A fixed-scope proposal first

  Before any work starts you get a written proposal with milestones. You approve it, or you do not.

• Timing follows scope

  How long it takes depends on your setup and your rules. The proposal states the milestones up front.

• Or inside a monthly plan

  Agents can be built and run through one of our monthly delivery plans, alongside your other Salesforce work.

Salesforce licenses, including Agentforce, are bought from Salesforce and are not part of our fee. See our plans and pricing →

• One-page brief (PDF)

  What it does, the rules it follows and what you need, on one page you can forward.

  Get the brief →

• Slide deck (PDF, 6 slides)

  For your team or steering group: the problem, what it does, the rules it follows and how we deliver it.

  Get the slides →

• Talk to an architect

  A free 60-minute session on how it would work in your org, with your processes, your data and your rules.

  Book a session →

• The whole library

  Every agent we offer, by business area.

  Browse agents →

Further reading from our architects

• Claudeforce: what actually changes for the people who run the orgSalesforce and Anthropic announced Claudeforce on 26 August 2026. What the sources actually state, what nobody has published yet, and what to do in your org before the beta reaches you.
• Personalisation with an agent in the loopWhere generated marketing content needs a human gate, and why the answer follows from how reversible the channel is rather than from how good the model has become.
• Marketing automation that does not become unmaintainableWhy marketing estates become untouchable rather than broken, and the governance that prevents it: naming, ownership, parameterisation, centralised suppression and a retirement policy.

• What does the MCP-Connected Agent do?

  The MCP-Connected Agent publishes two governed Salesforce tools on a Salesforce hosted MCP server so an outside AI assistant can look up an account and create a support case, and nothing else. It shows how to let an external assistant act in Salesforce without broad API access.

• Which Salesforce products does it run on?

  Salesforce with hosted MCP servers, Service Cloud for Case, Agentforce only if the agent tool is added. Confirm editions and licenses with your Salesforce account team.

• Where do people use it?

  External assistant over MCP, Slack confirmation post.

• What does it not do?

  Write tools for Opportunities, Leads or Accounts; Delete or bulk tools; Data Cloud queries over MCP; Building the external assistant.

• Is there a demo?

  Not yet. This agent is in our build program and is coming soon. We can scope it for your org now, and show you the agents that are already live.