Connect your agent to Salesforce to read and update any data in your CRM — contacts, accounts, opportunities, leads, cases, tasks, custom objects, and more. The agent can call any Salesforce REST API endpoint, including SOQL queries, so anything you can do in Salesforce, the agent can do too.Documentation Index
Fetch the complete documentation index at: https://docs.abundly.ai/llms.txt
Use this file to discover all available pages before exploring further.
How to enable
Go to Settings → Capabilities and enable Salesforce, then link a workspace secret containing your Salesforce login URL, Consumer Key, and Consumer Secret. The same secret can be reused across agents and teams.Example use cases
- Lead triage — “Every morning, list new leads from the last 24 hours and email me a summary grouped by lead source”
- Opportunity monitoring — “Check for opportunities closing this month that haven’t had activity in 14 days, and create a follow-up task on each”
- Account research — “Look up this account and summarize open opportunities, recent cases, and the primary contact”
- Data hygiene — “Find duplicate contacts (same email) and report them to me”
- Custom objects — “Read this week’s records from our custom Project__c object and post a summary to the #sales Slack channel”
How to set up Salesforce authentication
Salesforce uses External Client Apps (the modern replacement for Connected Apps) with the OAuth 2.0 Client Credentials Flow for server-to-server access. The agent authenticates as a Salesforce user you choose (“run-as user”), so everything the agent does is performed and audited as that user.Find your My Domain login URL
In Salesforce Setup, search for My Domain. The Current My Domain URL at the top is what you’ll use as the Login URL in Abundly.
Create an External Client App
In Setup, search for External Client App Manager and click New External Client App.In Basic Information:
- External Client App Name: e.g. “Abundly Agent”
- API Name: auto-fills
- Contact Email: your email
- Leave Distribution State as Local
Enable OAuth and add scopes
Check Enable OAuth, then in App Settings:
- Callback URL: Enter
https://login.salesforce.com/services/oauth2/success(a placeholder — Client Credentials Flow doesn’t use it, but the form requires a value). - Selected OAuth Scopes: Move at least Manage user data via APIs (api) to the right. For broader access during evaluation, also add Full access (full). You can tighten this later.
Enable Client Credentials Flow
Scroll down to Flow Enablement and check Enable Client Credentials Flow.Then in Security:
- Leave Require secret for Web Server Flow and Require secret for Refresh Token Flow checked (the defaults).
- Uncheck Require Proof Key for Code Exchange (PKCE) extension. PKCE doesn’t apply to Client Credentials Flow and breaks token issuance if left enabled.
Set the Run As user
On the new app’s detail page, open the Policies tab and click Edit. Scroll to OAuth Flows and External Client App Enhancements.In the Run As (Username) field, enter the Salesforce username of the user the agent should act as (the exact username is shown under Setup → Users, and isn’t always the same as the email).Save the policy.
Wait for activation
External Client Apps take about 10 minutes after creation before they can issue tokens. If you try to authenticate immediately and get an
invalid_client_id error, wait and retry.Copy the Consumer Key and Secret
On the app’s detail page, open the Settings tab and click Consumer Key and Secret. Salesforce will send a verification code to your email — enter it. Copy the Consumer Key and Consumer Secret.
Configure in Abundly
Go to Settings → Capabilities, enable Salesforce, and create a new workspace secret of type Salesforce. Paste:
- Login URL — your
https://<your-org>.my.salesforce.comfrom step 1. For sandboxes, use the sandbox’s My Domain URL orhttps://test.salesforce.com. - Consumer Key
- Consumer Secret
If your org is older and still allows Connected Apps, that path also works (Connected Apps remain functional even though new ones can no longer be created in fresh orgs). The OAuth flow is identical — only the Setup screens differ.See Salesforce’s Client Credentials Flow documentation for more details.
API version
The agent calls the Salesforce REST API athttps://{your-instance}/services/data/v66.0/.... If you need a different API version, just tell the agent — it can target any version your org supports.
