Salesforce Headless 360 MCP exposes 60 tools so ChatGPT can drive the CRM
Key takeaways
- Salesforce launched AIforce at Dreamforce 2026, an agentic layer meant to replace the browser-and-click interface most enterprises still run on.
- Headless 360 exposes every Salesforce cloud as reusable capability, with an MCP server carrying more than 60 tools for data, workflow, approvals and records.
- Six of the seven named 360 agents are generally available now; Hunter is in pilot with general availability set for November.
A company whose entire business was a user interface just shipped a product premised on the interface being optional. At Dreamforce 2026, Marc Benioff unveiled AIforce, an agentic layer meant to replace the browser-and-click experience most enterprises still run on.
Underneath it sits Headless 360, which exposes every Salesforce cloud as reusable capability that any authorised AI agent can discover through open standards. The Salesforce Headless 360 MCP server carries more than 60 tools covering data access, workflow execution, approval routing and record management. Agents running in Claude, ChatGPT, Cursor, Amazon Quick or Gemini Enterprise can call Salesforce at runtime without anyone building a bespoke integration first.
What shipped
Seven named 360 agents came with the announcement. Casey, Paige, Carter, Marshall, Piper and Fin are generally available now. Hunter is in pilot with general availability set for November. Anthropic CEO Dario Amodei appeared on stage to announce Claudeforce, a deeper Claude integration across Salesforce and Slack.
Why it matters
Exposing 60 tools over MCP so rival assistants can drive your product is a structural bet, not a feature. Salesforce spent two decades making its UI the place work happened, and the switching cost of that UI is a large part of why customers stayed. Handing agents a standard interface to the data underneath removes some of that friction on purpose.
If it works, the software vendors who spent twenty years defending their interface have a problem, because the interface stops being the moat and the data becomes the product. If it does not work, Salesforce has given every competing assistant a clean route into its data layer for nothing. Either way it is the largest commitment to the agentic tooling wave that an incumbent enterprise vendor has made so far.
What to watch
Security is the obvious open question. A protocol designed to let agents reach everything concentrates credentials in one place, and enterprises have already seen what that costs when unauthorised Gemini access hit three companies. Sixty tools with write access to CRM records, approvals and workflows is a large surface to get permissions right on.
The number to watch is not agent adoption. It is how many customers turn Headless 360 on and then point something other than Salesforce's own agents at it, because that is the test of whether the open part of this was meant seriously.
