Salesforce Service Cloud for AI agents

Salesforce Service Cloud is the customer service side of Salesforce, handling support cases, live chat, and a knowledge base for service teams. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

CRMOAuth 2.0MCP + RESTsalesforce.com
AUDIT LOG · SALESFORCE SERVICE CLOUDPOLICY: acme-support
09:41:07 · claude · u_8f2read
salesforce_service_cloud.list_einstein_bots
List Einstein Bots✓ allowed · 212ms
09:41:08 · claude · u_8f2read
salesforce_service_cloud.query_soql
Query SOQL✓ allowed · 164ms
09:41:09 · claude · u_8f2write
salesforce_service_cloud.create_case_record
Create Case Record✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
salesforce_service_cloud.delete_case_record
Delete Case Record✕ blocked · policy: deny
EVERY SALESFORCE SERVICE CLOUD CALL, ON THE RECORD
01 · USE CASES

What agents do in Salesforce Service Cloud.

01

Create a support case

Opens a new case record with the customer's issue details so a support queue can pick it up.

02

Look up a case before replying

Reads an existing case record and its chat transcript before an agent drafts a response.

03

Delete a case only after confirmation

Removes a duplicate or test case record only once a support lead approves the deletion.

02 · ACTIONS

24 Salesforce Service Cloud actions, graded by risk.

Every Salesforce Service Cloud action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

8

Look things up. Allowed by default.

  • salesforce_service_cloud.query_soql
    Query SOQL
  • salesforce_service_cloud.query_all_soql
    Query All SOQL
  • salesforce_service_cloud.get_case_record
    Get Case Record
  • salesforce_service_cloud.get_chat_messages
    Get Chat Messages
  • salesforce_service_cloud.list_einstein_bots
    List Einstein Bots
  • salesforce_service_cloud.get_live_agent_api_version
    Get Live Agent API Version
  • salesforce_service_cloud.describe_s_object
    Describe SObject
  • salesforce_service_cloud.retrieve_salesforce_username
    Retrieve Salesforce Username

write

15

Create and change things. Allow, or ask the user first.

  • salesforce_service_cloud.send_custom_event
    Send Custom Event
  • salesforce_service_cloud.create_case_record
    Create Case Record
  • salesforce_service_cloud.set_breadcrumb
    Set Breadcrumb
  • salesforce_service_cloud.composite_batch
    Composite Batch
  • salesforce_service_cloud.end_chat_session
    End Chat Session
  • salesforce_service_cloud.composite_request
    Composite Request
  • salesforce_service_cloud.upload_file_to_s3
    Upload File to S3
  • salesforce_service_cloud.chasitor_sneak_peek
    Chasitor Sneak Peek
  • salesforce_service_cloud.generate_request_id
    Generate Request ID
  • salesforce_service_cloud.resync_chasitor_state
    Resync Chasitor State
  • salesforce_service_cloud.composite_sobject_tree
    Composite SObject Tree
  • salesforce_service_cloud.reconnect_chat_session
    Reconnect Chat Session
  • salesforce_service_cloud.visitor_sensitive_data_rule
    Visitor Sensitive Data Rule Triggered
  • salesforce_service_cloud.generate_signed_jwt_assertion
    Generate Signed JWT Assertion
  • salesforce_service_cloud.agent_sensitive_data_rule_triggered
    Agent Sensitive Data Rule Triggered

destructive

1

Delete, cancel or archive. Ask first, or deny outright.

  • salesforce_service_cloud.delete_case_record
    Delete Case Record
03 · HOW IT WORKS

Salesforce Service Cloud in three steps.

  1. 01Your users connect Salesforce Service CloudThey sign in to Salesforce Service Cloud on Arc0 Connect, under your brand, and approve the access you ask for.
  2. 02You set the rulesReads run, writes like “create Case Record” can wait for the user, and “delete Case Record” can be denied outright.
  3. 03Any agent can actYour agent calls Salesforce Service Cloud through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('salesforce_service_cloud', {
  read: 'allow',
  write: 'ask',        // create_case_record
  destructive: 'deny',  // delete_case_record
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Salesforce Service Cloud connects.

Users sign in to Salesforce Service Cloud on Arc0 Connect and approve the scopes you request. Build with Arc0’s Salesforce Service Cloud OAuth app, or bring your own so the Salesforce Service Cloud consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Salesforce Service Cloud connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
OAuth 2.0
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Salesforce Service Cloud from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
07 · FAQ

Salesforce Service Cloud and Arc0, answered.

Q01

Can I use Salesforce Service Cloud with Claude, ChatGPT or Cursor?

Yes. Connect Salesforce Service Cloud to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Salesforce Service Cloud actions you allow.

Q02

How do users connect Salesforce Service Cloud?

Users sign in to Salesforce Service Cloud on Arc0 Connect and approve the scopes you request. Build with Arc0’s Salesforce Service Cloud OAuth app, or bring your own so the Salesforce Service Cloud consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

Q03

Which Salesforce Service Cloud actions can my agent take?

24 in total: 8 read, 15 write and 1 destructive, such as “create Case Record”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Salesforce Service Cloud?

Yes. Actions like “delete Case Record” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Salesforce Service Cloud too?

Yes. The same Salesforce Service Cloud connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Salesforce Service Cloud into your agent.

Your users connect Salesforce Service Cloud once, under your brand. Your agent gets 24 actions behind your policies, with every call on the record.

Free to build · MCP + REST · Audit log on every plan