Use Agentforce gateway policies to protect connections to your external APIs and Model Context Protocol (MCP) servers. Control access, set usage limits, and ensure compliance.
Required Editions
Policy Builder works the same way for these connection types:
- Model Context Protocol server connections: Protect the connection between Agentforce agents and MCP servers.
- API connections: Protect API agent interactions for APIs in MuleSoft for Agentforce: API Catalog for Salesforce.
In both cases, create policies from templates, apply them to connections manually or by matching criteria. Manage execution order, edits, and removal from the same page.
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, Unlimited, and Developer Editions with Foundations or Agentforce 1 Editions |
| To build and manage Agentforce agents, you need Customize Application, or both Manage AI Agents and the permission for your agent type. |
Note Policies apply only when the agent is committed or activated. Policies aren’t
enforced for agents in a draft state.
- Create an Agentforce Gateway Policy
Create a policy from a prebuilt template and follow a few simple steps to build a new policy that fits your governance needs. You can apply the policy immediately or save it and apply it later. - Apply an Agentforce Gateway Policy
Apply a policy either manually or automatically by defining matching criteria. - Manage Agentforce Gateway Policies
Understand the default policy execution order and learn how to manage existing policies. You can edit a policy’s details or adjust the connections it protects as well as the agents it targets.