July 27, 2026

Salesforce in FUSE: Ask Your CRM Questions in Plain English

Your pipeline data already answers the question. Getting it out usually means a report request and a two-day wait. Salesforce is now a FUSE datasource.

Your CRM knows which deals slipped last quarter. Asking it should not require a report builder.

✓ Connect Salesforce to FUSE in about 5 minutes of admin time
✓ Read-only. FUSE cannot create, update, or delete anything in your org
✓ Every query runs as the person who connected, under their existing permissions
✓ Built on Salesforce Hosted MCP, generally available since April 2026
✓ Available on all paid FUSE plans


Why this is different from another CRM dashboard

Most integrations copy your data somewhere else and go stale. This one does not move your data at all.

FUSE connects to Salesforce's own Hosted MCP server. Salesforce runs the query inside your org and returns the result. There is no sync, no warehouse, no nightly job drifting out of date. When you ask a question, you get the state of your CRM right now.

The security model comes with it. Salesforce enforces object permissions, field-level security, and sharing rules on every single call, and every call runs as the Salesforce user your admin connects. FUSE never sees more than that user can see. It also cannot write anything, and that is guaranteed three separate ways: the SOQL query language has no write statements, the sobject-reads server exposes read tools only, and the OAuth scopes FUSE requests include no write API at all.


How to connect it

Steps 1 and 2 are one-time admin setup. Everyone after that connects in about 30 seconds.


1. Your FUSE account manager sends you a private install URL. Paste it into your Salesforce org and click Install. Choose "Install for Admins Only" for the initial rollout. You can widen access later without reinstalling.


2. Activate the read-only server. From anywhere in Salesforce, click the gear icon in the top-right toolbar and choose Setup.

Type MCP in the Quick Find box. Two results appear under different parents and they are not interchangeable. Click MCP Servers under Integrations, API Catalog. Do not click Registered MCP Servers under Einstein, Agentforce Registry: that one points Agentforce at external servers, which is the opposite direction.

Find sobject-reads in the list and click Activate. When you are done, sobject-reads reads Active and every other server stays Inactive. That is the expected end state. Salesforce ships all MCP servers disabled, and FUSE only ever needs this one.

3. In FUSE, open Connect a datasource, choose Salesforce, and sign in. Salesforce handles the login and consent.


What you can ask

Point it at the questions you would otherwise queue for RevOps.

"Which opportunities over $100k are still open past their close date?"
"Show me every account with no activity in the last 60 days."
"Compare closed-won by stage this quarter against last quarter."
"What did we lose to competitors in EMEA, and what were the stated reasons?"

You can also combine Salesforce with the rest of your stack in one conversation. FUSE connects Google Ads, Google Analytics, Google Search Console, Meta Ads, LinkedIn, TikTok, Amazon Ads, Klaviyo, and Shopify, so "which campaigns produced the pipeline that actually closed" is a single question rather than a spreadsheet merge.

How it works

FUSE is an MCP client. Salesforce is the runtime.

Six read-only tools are available to the agent: SOQL query, cross-object search, related-record traversal, recent records, schema describe, and current-user info. FUSE never runs code inside your org and never writes to it.

Result tables use your org's real field labels, not guesses derived from API names. If your admin renamed a custom field to "Advertiser", the table header says Advertiser. FUSE reads that label from your org's schema rather than reformatting the API name, so tables read the way your team reads Salesforce.

FAQ

Is the Salesforce integration read-only?

Yes. FUSE uses the platform/sobject-reads server, which Salesforce describes as the safest of its SObject server family. Agents can discover schema, query records, and traverse relationships. No data changes are possible through this server.

Does FUSE get access to my whole Salesforce org?

No. Access is bounded three ways: the read-only server, the permissions of the individual user who connected, and the two OAuth scopes FUSE requests. Salesforce introduced a dedicated MCP scope precisely so that MCP access does not grant REST API access.

Which Salesforce edition do I need?

Enterprise Edition or above. Salesforce Hosted MCP became generally available in April 2026 for Enterprise Edition orgs and above. This is a Salesforce requirement, not a FUSE one.

Can I see what the AI actually did in my Salesforce org?

Yes. Every MCP call is attributed to the named user in standard Salesforce audit logs. You can isolate this traffic in Event Monitoring by filtering for APICLIENTCATEGORY = SALESFORCE_HOSTED_MCP.

How is the connection secured?

Salesforce requires the OAuth authorization code flow with PKCE, and it is the only supported path. There are no service accounts and no machine-to-machine flows, so every transaction traces back to a real person.

Which FUSE plan do I need?

Salesforce is available on all paid plans. On the free tier the Salesforce card opens a contact form instead of the connect flow.

Get started

1. Ask your FUSE account manager for the Salesforce install URL.

2. Have a Salesforce admin install it and activate platform/sobject-reads.

3. Open FUSE, connect Salesforce, and ask your first question.

Close-up of the word FUSE in large, white, bold letters on a black background.