Distinguish access from a business workflow
A connector that retrieves records can be useful for a straightforward query. A more involved task may also need definitions, exclusions and a repeatable method: which cases count as overdue, how to handle missing dates and what the analyst should review before circulating a conclusion.
Those procedures can be represented in a configured agent rather than retyped in every conversation. They remain instructions that require testing; they do not become security controls because they sit behind an MCP entry point.
- Question in Claude
- Selected REDA agent
- Permitted Salesforce work
- Answer returned to host
How REDA’s connection is positioned
REDA AI allows an administrator to make selected Internal agents available through MCP. Users connect with their Salesforce identity, and the agent retains its configured business context and tools. The host receives the resulting business answer and relevant structured content—not merely a catalogue of tool names. See the MCP experience.
MCP is a protocol for connecting an application to capabilities. Its authorization specification addresses access to protected services; it does not decide whether your business answer is correct or whether a particular process should be automated. [1]
A worked example: preparing a service review
Illustrative workflow, not a measured deployment. An analyst asks for a weekly summary of unresolved cases. The selected agent uses the agreed definition of “unresolved”, retrieves permitted information and returns themes with supporting records. The analyst checks the totals and prepares the final discussion material in the host.
If the request expands to changing case owners or sending messages, that is a different action scope. Start by deciding whether those capabilities belong in the agent at all, then establish the applicable permissions and review behaviour.
Evaluate both sides of the connection
| Boundary | Question to resolve |
|---|---|
| Identity and access | Which Salesforce identity is used, and what can this user reach? |
| Information leaving Salesforce | What answer, records or action details reach the host and its providers? |
| Action execution | Which operations are permitted, and which require an enforced approval? |
| Evidence | Where can you inspect the conversation and resulting record changes? |
Do not assume that REDA controls other connectors available in Claude or that a confirmation in the host also enforces approval in Salesforce. Scheduled work can also have a different execution identity from an immediate request. The governance page and setup documentation describe the relevant qualifications.
Start with a read-oriented task
A narrowly defined analytical request makes it easier to inspect both usefulness and boundaries. Test with a user who has representative access, an inaccessible record, incomplete data and a question outside the agent’s scope. Then inspect the actual result, not only the conversational explanation.
REDA can help configure the business procedure and evaluate the connection. A report, export or simpler connector may still be sufficient; choose the agent approach when the reusable procedure earns its place.
Sources
- Model Context Protocol — Authorization specification · 25 November 2025 specification. Accessed 22 September 2026.