Salesforce Agentforce

Enterprise AI agent platform

Salesforce Agentforce is a Salesforce-native platform for building, configuring, deploying, and managing autonomous AI agents. Agents can use Salesforce and connected business data, follow instructions and business rules, retrieve knowledge, create action plans, execute configured actions, update records, support customers and employees, and escalate work to human teams. Agentforce includes low-code and no-code tools such as Agentforce Builder and can connect to Flows, Prompt Builder, Apex, MuleSoft APIs, AgentExchange, and MCP-enabled services. ([salesforce.com](https://www.salesforce.com/agentforce/?bc=OTH&utm_source=openai))

Company Salesforce
Free plan Yes
Paid plans from $2 per conversation
Ease of use Moderate

What you can do with Salesforce Agentforce

Key features
✓
Build custom AI agents

Create or customize agents with Agentforce Builder using natural-language instructions, subagents, topics, and configurable actions

✓
Ground agents in business data

Connect agents to Salesforce records, Data 360, knowledge sources, metadata, and configured external information

✓
Execute business actions

Allow agents to run flows, invoke Apex or APIs, update records, create plans, and complete operational tasks

✓
Deploy across channels

Publish agents to Salesforce interfaces, mobile, Slack, websites, messaging platforms, email, and voice channels

✓
Support customers and employees

Use purpose-built agents for service, sales, field service, employee support, marketing, and other business functions

✓
Escalate to human teams

Transfer complex or sensitive interactions to representatives with relevant conversation context

✓
Monitor and optimize agents

Review sessions, audit activity, usage, performance, and improvement recommendations

✓
Connect external tools

Extend agents through MuleSoft, AgentExchange, REST APIs, and Model Context Protocol integrations

How Salesforce Agentforce works

An administrator or implementation team defines an agent's role, instructions, knowledge sources, permissions, and available actions in Agentforce Builder. The agent receives a user request through a configured channel, retrieves relevant business context, reasons through the task, executes approved actions, returns a response or result, and escalates to a human when required.

INPUTS
Text promptsVoiceCustomer and employee messagesSalesforce recordsDocuments and knowledge sourcesExternal application dataAPI requests
OUTPUTS
TextAgent actionsUpdated Salesforce recordsWorkflow resultsCase and task updatesVoice responsesStructured business dataHuman escalations

Who Salesforce Agentforce is for

BEST FOR

Medium and large organizations that already use Salesforce and need governed AI agents for customer service, sales, employee support, field operations, or cross-system workflows.

LESS SUITED FOR

Individuals, small teams seeking a standalone chatbot, consumers wanting a general-purpose AI assistant, or organizations unwilling to configure Salesforce data, permissions, workflows, channels, governance, and licensing.

Strengths & limitations

+ Strengths

  • Deep integration with Salesforce CRM data, metadata, permissions, workflows, and business processes
  • low-code and no-code agent construction
  • support for both customer and employee use cases
  • configurable action execution
  • multiple deployment channels
  • human handoff
  • enterprise administration and auditability
  • model choice across supported Salesforce, AWS-hosted, and Google options
  • API, MuleSoft, AgentExchange, and MCP connectivity.

– Limitations

  • Significant setup and governance requirements
  • pricing can be complex because it combines Salesforce editions, add-ons, users, conversations, credits, and contracts
  • many capabilities require existing Salesforce licenses or paid add-ons
  • product scope is broad and fragmented across multiple Agentforce products
  • performance depends on data quality, permissions, action design, model choice, and testing
  • not designed as a simple standalone consumer chatbot.

Pricing & access

FREE ACCESS Free plan available

Salesforce Foundations is listed at $0 and includes Agentforce Builder, Prompt Builder, Agent Script, Agentforce Coworker, and Agentforce Vibes. Availability and included functionality depend on the applicable Salesforce edition and contract. ([salesforce.com](https://www.salesforce.com/agentforce/pricing/?bc=OTH&trk=article-ssr-frontend-pulse_little-text-block&utm_source=openai))

PAID ACCESS $2 per conversation

Current public pricing includes Salesforce Foundations at $0, Flex Credits at $500 per 100,000 credits, Conversations at $2 per conversation, Agentforce User License at $5 per user per month, Agentforce add-ons starting at $125 per user per month, Agentforce Industries add-ons starting at $150 per user per month, and Agentforce 1 Editions from $550 per user per month. Pricing depends on use case, edition, contract, usage model, and feature requirements. ([salesforce.com](https://www.salesforce.com/agentforce/pricing/?bc=OTH&trk=article-ssr-frontend-pulse_little-text-block&utm_source=openai))

FREE TRIAL No free trial listed
USAGE LIMITS Plan limits apply

Usage is governed by conversation counts, Flex Credit consumption, per-user entitlements, Salesforce edition limits, included credits, and contract-specific allowances. Flex Credits are consumed by agent actions; Salesforce states that standard Agentforce actions use 20 Flex Credits and Agentforce Voice actions use 30 Flex Credits. ([salesforce.com](https://www.salesforce.com/agentforce/pricing/?bc=OTH&utm_source=openai))

Platforms & access

✓ Web app
✓ Mobile app
– Desktop app
– Browser extension
✓ API
✓ Embeddable

Salesforce Lightning Experience; Salesforce mobile app; Field Service mobile app; Slack; websites and Experience Cloud; messaging channels such as WhatsApp and Facebook Messenger; email; voice channels; REST and Salesforce platform APIs

Product format: standalone

Product specs

Standard features
✓ Web access
– File upload
✓ Memory
✓ Custom agents
– Scheduled automation
✓ Knowledge base
– Website ingestion
– Code execution
✓ Computer actions
✓ Integrations
– Webhooks
✓ MCP support
– Bring your own key
✓ Model selection
✓ Collaboration
✓ Shared workspace
✓ Admin controls
✓ SSO
✓ Role permissions
✓ Analytics
✓ Templates
✓ No-code
– Project workspace
– Brand tools
✓ Performance scoring

Agentforce is a product platform rather than a single chatbot. Its capabilities vary across Agentforce Builder, Service Agent, employee agents, sales agents, industry agents, Agentforce Voice, Agentforce Vibes, Agentforce 360, and related Salesforce products. The product supports both customer-facing and employee-facing agents, with human escalation and configurable actions.

Categories & capabilities

Browse similar tools

Integrations & models

INTEGRATIONS Connected workflows

Agentforce integrates with Salesforce CRM, Data 360, Salesforce Flows, Prompt Builder, Apex, MuleSoft APIs, Slack, Salesforce mobile and Lightning interfaces, messaging channels, email, voice channels, AgentExchange, Google Workspace integrations, external APIs, and MCP servers. Salesforce identifies partner and external-system connectivity through APIs, MuleSoft, AgentExchange, and MCP. ([salesforce.com](https://www.salesforce.com/platform/agentforce-platform/?bc=OTH&utm_source=openai))

MODELS Models used

Model choice varies by configuration and product generation. Salesforce documentation identifies GPT-4.1 for agents created in the new Agentforce Builder, GPT-4o for legacy Builder agents, Anthropic Claude Haiku 4.5 through Amazon Bedrock for the AWS-hosted option, and Gemini 3.5 Flash through Google Vertex AI for the Google Gemini option. Salesforce-owned models may also support tasks such as topic classification and citations. ([help.salesforce.com](https://help.salesforce.com/s/articleView?id=ai.agent_setup_select_model_provider.htm&language=en_US&type=5&utm_source=openai))

Privacy & data Data handling, AI training, retention and security
↓
Data handling

Agentforce operates within Salesforce's Einstein Trust Layer and respects Salesforce access controls. Salesforce describes protections including prompt defense, toxicity detection, audit trails, secure data retrieval, and zero-data-retention arrangements with third-party model providers. Customer data may still be stored in Salesforce features such as Data 360, audit records, or configured application data, depending on the implementation. ([help.salesforce.com](https://help.salesforce.com/s/articleView?id=005315874&language=en_US&type=1&utm_source=openai))

AI training

Salesforce states that prompts and responses are not retained or used for training by third-party out-of-the-box LLM providers under its zero-data-retention arrangements. Salesforce-owned models and customer-configured features have separate terms and data-handling considerations, so organizations should review the applicable Salesforce agreement and configuration. ([help.salesforce.com](https://help.salesforce.com/s/articleView?id=005315874&language=en_US&type=1&utm_source=openai))

Data retention

Third-party model providers are described as having zero data retention for Agentforce prompts and responses, while Salesforce may store interaction, audit, analytics, or business data depending on enabled features and configuration. Exact retention periods were not established from the consulted sources and may vary by service and contract. ([help.salesforce.com](https://help.salesforce.com/s/articleView?id=005315874&language=en_US&type=1&utm_source=openai))

Security

Security features include Salesforce access controls, the Einstein Trust Layer, secure data retrieval, prompt-injection detection, toxicity detection, audit trails, encryption in transit, and zero-data-retention arrangements with external model providers. Salesforce states that Agentforce is covered by applicable Salesforce security and compliance programs, including SOC reports and ISO certifications for supported editions and services. ([help.salesforce.com](https://help.salesforce.com/s/articleView?id=005315874&language=en_US&type=1&utm_source=openai))

About Salesforce Agentforce

Salesforce Agentforce is designed for organizations that want AI agents connected to CRM records and business processes rather than a standalone chatbot. Teams can configure agents to answer questions, retrieve approved information, execute actions, update records, support service and sales workflows, and escalate complex interactions to human employees.

What is Salesforce Agentforce?

Salesforce Agentforce is an enterprise AI agent platform from Salesforce. It provides tools for creating or customizing agents that operate within Salesforce and connected business systems. An Agentforce agent can receive a request through a supported channel, retrieve relevant business context, follow configured instructions, perform approved actions, and return a response or escalate the interaction.

The platform is primarily aimed at organizations already using Salesforce or planning a substantial Salesforce deployment. Its value comes from connecting conversational AI to CRM data, permissions, workflows, knowledge sources, and operational processes. That makes it different from a general-purpose chatbot, which may generate an answer but normally does not have the same direct ability to update a customer record, run a business workflow, or route work to an employee.

What Agentforce actually does

Agentforce agents can be configured for customer service, sales, employee assistance, field service, marketing, and other business operations. Common tasks include answering account or order questions, qualifying leads, assisting service representatives, updating records, scheduling field-service work, handling cases, and coordinating actions across Salesforce and external applications.

Agents can use Salesforce records, Data 360, knowledge sources, metadata, and connected information for grounding. Administrators can expose selected actions through Salesforce Flows, Prompt Builder, Apex, APIs, MuleSoft, AgentExchange, and supported Model Context Protocol integrations. The goal is not simply to generate text, but to let an agent complete controlled business work.

Building and configuring agents

Agentforce Builder provides low-code and no-code tools for defining an agent's role, instructions, topics, subagents, knowledge sources, permissions, and available actions. A business or IT team can customize prebuilt agents or create agents for a particular department and workflow.

In practice, configuration still requires more than writing a prompt. Organizations need to decide which data the agent can access, which actions it may perform, how business rules are applied, when a human takeover is required, and how the agent should behave when information is incomplete. Salesforce administrators, developers, or implementation partners may use Flows, Apex, APIs, and MuleSoft when a use case goes beyond standard configuration.

Grounding and action execution

The most important distinction between Agentforce and a basic FAQ bot is the combination of business context and action execution. An agent can retrieve information from approved sources and then use configured actions to update records, create tasks, run workflows, invoke APIs, or complete other operational steps. Poor data quality, overly broad permissions, or badly designed actions can nevertheless produce unreliable or unsafe results, so testing and governance remain essential.

Where agents can be deployed

Agentforce supports deployment across Salesforce interfaces, the Salesforce mobile app, Field Service mobile, Slack, websites and Experience Cloud, messaging channels such as WhatsApp and Facebook Messenger, email, and voice experiences. It can also be accessed through Salesforce platform and REST APIs.

This channel flexibility matters for companies that want the same business logic to support customers, employees, and service representatives in different environments. For example, a customer-facing agent might handle an initial service question on a website, while an employee agent answers internal questions in Slack AI or a Salesforce interface. Deployment options and channel availability vary by Salesforce edition, region, product generation, and contract.

Important capabilities

  • Customer and employee agents: Build agents for service, sales, field operations, internal support, and other business functions.
  • CRM-aware responses: Ground answers in Salesforce records, Data 360, knowledge sources, and configured external information.
  • Business actions: Run Flows, invoke Apex or APIs, update records, create tasks, and execute approved processes.
  • Human escalation: Transfer complex, sensitive, or out-of-scope interactions to employees with relevant context.
  • External connectivity: Extend agents through MuleSoft, AgentExchange, REST APIs, and MCP-enabled services.
  • Monitoring and optimization: Review sessions, usage, audit activity, outcomes, and opportunities to improve agent behavior.
  • Model choice: Depending on configuration and product generation, supported options include Salesforce-managed models and selected models hosted through AWS or Google.

How organizations realistically use Agentforce

A service organization might deploy an agent to answer routine questions, retrieve account or order information, and create or update cases before handing complicated matters to a representative. A sales team could use an agent to qualify incoming leads, retrieve account context, book meetings, and update CRM records. An employee-support agent could answer questions about internal processes or Salesforce data through a supported workplace channel.

Field-service teams can use agents to assist with scheduling and operational requests, while companies with several connected systems can use APIs, MuleSoft, or MCP integrations to coordinate work beyond Salesforce. These scenarios depend on carefully configured actions and permissions; Agentforce is not an autonomous replacement for every business process.

Pricing and access

Agentforce pricing is mixed and depends heavily on the Salesforce edition, deployment model, user entitlements, usage, and contract. Salesforce Foundations is listed at $0 and includes tools such as Agentforce Builder, Prompt Builder, Agent Script, Agentforce Coworker, and Agentforce Vibes, although availability and functionality depend on the applicable Salesforce setup.

Paid access can be based on usage or users. Public pricing includes Flex Credits at $500 per 100,000 credits, Conversations at $2 per conversation, an Agentforce User License at $5 per user per month, and certain add-ons starting at $125 per user per month. Agentforce 1 Editions are listed from $550 per user per month. These figures should not be treated as a universal total cost: Salesforce editions, included entitlements, implementation work, channels, features, and contract terms all affect the final price.

Usage limits can involve conversation counts, Flex Credit consumption, included credits, and edition-specific allowances. Salesforce states that standard Agentforce actions use 20 Flex Credits and Agentforce Voice actions use 30 Flex Credits. Organizations evaluating the platform should model expected interactions and actions rather than comparing only the headline per-user or per-conversation price.

Privacy, security, and governance

Agentforce operates within Salesforce's Einstein Trust Layer and Salesforce access-control model. Salesforce describes protections including secure data retrieval, prompt-injection detection, toxicity detection, audit trails, encryption in transit, and zero-data-retention arrangements with third-party model providers. Salesforce also states that prompts and responses are not retained or used for training by third-party out-of-the-box LLM providers covered by those arrangements.

These protections do not mean that every implementation has identical data handling. Salesforce may store interaction, audit, analytics, or business data in enabled features such as Data 360, and retention depends on the services and configuration. Organizations should review the applicable Salesforce agreement, permissions, connected systems, retention settings, and compliance requirements before deploying customer-facing or sensitive workflows.

Limitations and setup requirements

Agentforce is not a lightweight standalone chatbot. It depends on Salesforce licensing, data structure, permissions, workflow configuration, testing, and governance. Pricing can be difficult to forecast because it combines editions, users, conversations, credits, add-ons, and contract-specific allowances.

The product's broad scope can also make evaluation more complicated. Capabilities differ across Agentforce Builder, Service Agent, employee agents, sales agents, industry offerings, voice features, and related Salesforce products. Model, channel, mobile, voice, and industry availability may change by edition, release, and region.

Agent behavior also depends on the quality of the underlying data and the design of its actions. An agent with incomplete knowledge, excessive permissions, or poorly defined escalation rules may provide an unhelpful answer or perform an unsuitable action. A serious deployment therefore needs access controls, test cases, monitoring, human escalation, and an ownership model for ongoing improvement.

Who should use Salesforce Agentforce?

Agentforce is a strong fit for medium-sized and large organizations that already rely on Salesforce and want governed AI agents connected to CRM data and business workflows. It is especially relevant to service and support teams, sales operations, employee-support teams, field-service organizations, and enterprise IT departments.

It is less suitable for individuals or small teams seeking an inexpensive general-purpose assistant, a simple website chatbot, or a quick no-code experiment with no existing CRM infrastructure. Tools such as Botpress, Dify, and n8n represent adjacent agent-building or automation approaches, but Agentforce is distinguished by its close relationship with Salesforce records, permissions, workflows, and enterprise channels. Companies already using other CRM platforms may also evaluate products such as HubSpot Breeze according to where their customer data and operational processes live.

Bottom line

Salesforce Agentforce is best understood as a governed business-process platform for AI agents, not as a single conversational assistant. Its main advantage is the ability to combine natural-language interaction with Salesforce data and controlled actions across customer and employee workflows. Its main trade-offs are configuration complexity, dependence on the Salesforce ecosystem, variable availability, and pricing that requires careful usage and license analysis.

Salesforce Agentforce is an enterprise AI agent platform for building governed agents that use Salesforce data, workflows, permissions, and integrations to support customer service, sales, employee assistance, field operations, and other business processes.

Answers to Frequently Asked Questions

Is Salesforce Agentforce secure, and what are its limitations?
Agentforce operates within Salesforce's Einstein Trust Layer and access-control model, with features such as secure data retrieval, prompt-injection detection, audit trails, encryption in transit, and stated zero-data-retention arrangements with covered third-party model providers. However, security and data handling depend on the specific configuration, permissions, connected systems, and retention settings. Successful deployment also requires reliable data, carefully designed actions, testing, monitoring, human escalation, and ongoing governance.
How much does Salesforce Agentforce cost?
Salesforce Agentforce pricing depends on the Salesforce edition, user entitlements, deployment model, usage, channels, add-ons, and contract terms. Public examples include Flex Credits at $500 per 100,000 credits, Conversations at $2 per conversation, an Agentforce User License at $5 per user per month, and Agentforce 1 Editions from $550 per user per month. Salesforce Foundations is listed at $0 for certain included tools, subject to applicable availability and functionality.
What is Salesforce Agentforce?
Salesforce Agentforce is an enterprise AI agent platform for creating and customizing agents that work with Salesforce data, permissions, workflows, knowledge sources, and connected business systems. Agents can answer requests, perform approved actions, update records, execute workflows, and escalate complex interactions to employees.
What can Salesforce Agentforce agents do?
Agentforce agents can answer customer and employee questions, retrieve CRM and knowledge-base information, qualify leads, handle cases, schedule field-service work, update Salesforce records, create tasks, run Flows, invoke Apex or APIs, and coordinate processes across Salesforce and external applications.