Salesforce Agentforce
The broadest enterprise agent platform on paper — Atlas, MCP, A2A, real observability — but $800M ARR and CIOs saying 'it isn't there yet' are both true; your agents will only be as good as your Data Cloud.
| Salesforce Foundations | Free | Agentforce Builder, Prompt Builder, Agent Script, Coworker, Vibes |
| Flex Credits | $500 per 100k credits | €500 official EUR list; standard action 20 credits, Voice action 30 credits |
| Conversations | $2 per conversation | €2 official EUR list; customer-facing agents, pre-purchase only |
| Agentforce add-ons | $125/user/mo | unmetered employee agent usage; Industries add-ons $150 |
| Agentforce 1 Editions | from $550/user/mo | includes add-on + 2.5M Flex Credits per org per year |
| Agentforce User License | $5/user/mo | company-wide employee access; requires Flex Credits |
Unused Flex Credits do not roll over; no overage penalty (contracted rate billed in arrears). Examples exclude Data 360 consumption, which grounding-quality effectively requires. Analysts flag consumption unpredictability as a mid-market budgeting problem.
checked 2026-07-31 · vendor pricing page
Element scores
Strengths
No other enterprise platform covers this much of the periodic table: configurable Atlas hybrid reasoning with real model choice (OpenAI, Claude in the trust boundary, Gemini, xGen), Command Center observability on OpenTelemetry, a Testing Center with synthetic-utterance batch evals, Agentforce Voice, and the best protocol posture in the category — native MCP client, 35+ partner MCP servers on AgentExchange, MuleSoft API-to-MCP conversion, and co-creatorship of A2A. Official EUR price list published. FedRAMP High for US federal.
Honest dings
Two publicly disclosed prompt-injection chains inside a year (ForcedLeak CVSS 9.4, then PipeLeak) — handled responsibly, but proof the attack surface is real. The July 2026 KeyBanc CIO survey found customers unwilling to pay CRM-provider AI premiums and calling the product immature, and Forrester flags complex pricing and slow value realization. Credits don't roll over, mid-market cost predictability is poor, there's no customer fine-tuning, and agent quality collapses on messy data — Data Cloud is a de facto prerequisite with its own bill.
Sources
Every audit lists the research it rests on — transparency and traceability are the product. Tools evolve: each audit is a snapshot of its audit date, and re-audits supersede older versions (kept below for reference).
- salesforce.com/agentforce/pricing — Official pricing incl. EUR list: Flex Credits, Conversations, add-ons, Agentforce 1 Editions, User License, buying models, credit mechanics (accessed 2026-07-31)
- salesforce.com/news/press-releases/2026/02/25/fy26-… — Official FY26 Q4: 29,000+ Agentforce deals (+50% Q/Q), $800M Agentforce ARR (+169% Y/Y), 2.4B agentic work units, 19T tokens (accessed 2026-07-31)
- salesforce.com/agentforce/what-is-new — Official Agentforce 360 capabilities: Builder unified workspace, Agent Script, hybrid reasoning in Atlas, Gemini model support, Voice, Intelligent Context, Vibes (accessed 2026-07-31)
- investor.salesforce.com/news/news-details/2025/Sale… — Official Agentforce 3 launch: Command Center on OpenTelemetry, native MCP client, MuleSoft MCP/A2A GA July 2025, Claude in trust boundary, Session Tracing (accessed 2026-07-31)
- salesforce.com/blog/connected-agents-agentexchange — Official: AgentExchange MCP marketplace (35 launch partners), A2A co-creation with Google, Linux Foundation A2A Technical Steering Committee seat (accessed 2026-07-31)
- trailhead.salesforce.com/content/learn/projects/uns… — Official: Data 360 chunking, vector embeddings, vector/hybrid/enriched search indexes, retrievers for Agentforce and Prompt Builder grounding (accessed 2026-07-31)
- theregister.com/saas/2026/07/15/salesforces-agentfo… — Independent 15/07/2026: KeyBanc CIO survey — weak Agentforce sentiment, customers unwilling to pay CRM-provider AI premiums; Salesforce rebuttal (accessed 2026-07-31)
- insightfulaiworld.com/salesforce-agentforce-360-ent… — Independent 19/05/2026: ForcedLeak (CVSS 9.4) and PipeLeak disclosures, Atlas ensemble architecture, configurable reasoning dial, Forrester/Gartner positioning, EU AI Act exposure (accessed 2026-07-31)
- salesforceben.com/why-salesforce-customers-still-ar… — Independent 17/07/2026: ecosystem sentiment, Headless 360 pivot, consumption-pricing wariness among CIOs (accessed 2026-07-31)
- sebastientang.com/blog/agentforce-360-platform-what… — Independent 03/06/2026: Builder governance risks (agent sprawl), Agent Script guardrail architecture, Testing Center role, Intelligent Context consent exposure (accessed 2026-07-31)
- salesforcedictionary.com/blogs/agentforce-360-platf… — Independent 20/05/2026: Atlas 8–12 specialized models per request, architect-level platform anatomy, mid-market pricing critique (accessed 2026-07-31)
- salesforce.com/agentforce/ai-agents/agent2agent-pro… — Official A2A explainer: protocol architecture, MCP vs A2A positioning (accessed 2026-07-31)