Skip to content

Salesforce Agentforce usage

Salesforce Agentforce contributes Flex Credit and action-level usage rows for AI activity inside Salesforce.

Onboarding scope

This guide covers the read-only salesforce_agentforce connector in the Venturi platform connector package. It reads Digital Wallet consumption records and never changes org data, metadata, or configuration.

Required access

Salesforce Digital Wallet stores consumption records, including Flex Credit usage per Agentforce action, as read-only Data 360 data lake objects such as TenantBillingUsageEvent, TenantEnrichedUsageEvent, and TenantDailyEntitlementConsumption. The connector reads these objects through the Data 360 query API. Digital Wallet requires a Data 360 license (a Customer Data Platform license does not qualify), and a Digital Wallet object must be added to a data space before Data 360 features such as Query Editor can read it. The same Salesforce article lists which queries on these objects are free and which can consume Data 360 credits. See Salesforce’s Digital Wallet data lake objects, Digital Wallet permissions, and About Digital Wallet.

Add these OAuth scopes to a Salesforce external client app. They are vendor permissions, entered exactly as written:

OAuth scope Purpose
api Authenticate to Salesforce APIs. This scope is not read-only by itself.
cdp_query_api Run SQL queries against Data 360 data, including the Digital Wallet objects.
refresh_token Optional; maintains unattended access when your app policy permits it.

Salesforce lists each scope in its OAuth token and scope reference. External client apps succeed connected apps: from the Spring ‘26 release, Salesforce blocks the creation of new connected apps unless Salesforce Support enables it, and an existing connected app with the same scopes keeps working. See New connected apps can no longer be created.

Enforce read-only behavior with a dedicated integration user. Give it the Digital Wallet View Consumption permission, the Data Cloud User permission set that Salesforce requires to read Digital Wallet data in Data 360, and access to the data space that holds the Digital Wallet objects. Do not grant Create, Edit, Delete, Modify All Data, or Customize Application. OAuth scope api permits API authentication; the integration user’s permissions supply the least-privilege boundary.

Setup

  1. Create an external client app and a dedicated integration user for Venturi.
  2. Give the integration user the permissions and data-space access above, and add the OAuth scopes above to the external client app.
  3. Store the app credential as an encrypted credential reference in Settings / Admin / Credentials.
  4. Configure VENTURI_AGENTFORCE_INSTANCE_URL. The default lookback is 30 days; set VENTURI_AGENTFORCE_LOOKBACK_DAYS to change it. See sync windows and failure behavior.
  5. Set VENTURI_AGENTFORCE_FLEX_CREDIT_USD only when your Salesforce order form defines a stable price per Flex Credit.
  6. In Venturi, go to Integrations / Salesforce Agentforce and run Test connection.

Flex Credit assumptions

Venturi records Flex Credits exactly as Digital Wallet reports them per action; it does not recompute credits from action counts. It converts credits to USD only with the per-credit price you set in VENTURI_AGENTFORCE_FLEX_CREDIT_USD. Without that setting the connector keeps the credit quantity and leaves the USD value empty, because negotiated Flex Credit pricing differs by contract and Venturi does not assume a list price. Set the price per credit, not per action: at Salesforce’s published list price of USD 500 per 100,000 Flex Credits, one credit costs USD 0.005, and a standard Agentforce action that consumes 20 credits costs USD 0.10. Agentforce Voice actions consume 30 credits. See Agentforce pricing.

Verification

  • Test connection passes the read-only boundary check: Digital Wallet reads succeed, and the integration user holds no Create, Edit, Delete, or Modify All Data permission.
  • Agentforce action rows appear in the latest sync.
  • Flex Credit consumption appears per action where Digital Wallet reports it.
  • Salesforce billing or contract records remain authoritative for Flex Credit value; Venturi does not invent a USD conversion.
  • The connector inventory marks Salesforce Agentforce as read-only.

Rotation and offboarding

Rotate the app credential through Salesforce administration, then update the credential reference in Settings / Admin / Credentials. Removing the connector stops new Agentforce usage syncs.

Give feedback on this page

Sign in to send feedback. Opens in a new tab.

Copy page details 
Docs feedback: Salesforce Agentforce usage
Page: https://docs.venturi.systems/connectors/salesforce-agentforce/