VOOZH about

URL: https://www.cdata.com/kb/tech/lakebase-cloud-agentforce.rst

⇱ Connecting Agentforce with Lakebase Data via CData Connect AI MCP Server


Connecting Agentforce with Lakebase Data via CData Connect AI MCP Server

πŸ‘ Somya Sharma
Somya Sharma
Technical Marketing Engineer
Leverage the CData Connect AI Remote MCP Server to enable Agentforce to securely read and take actions on your Lakebase data for you.

Agentforce is built for enterprise teams. Its declarative tooling and API-first architecture make it straightforward to compose assistants and automate CRM-centric workflows. But when agents need to work with data beyond Lakebase data, many implementations fall back on periodic syncs or bespoke middleware to replicate external systems into local stores. That adds complexity, creates governance and maintenance overhead, introduces sync delays, and limits the real-time potential of your agents.

CData Connect AI fills this gap with direct, live connectivity to hundreds of enterprise apps, databases, ERPs, and finance platforms. Using CData's remote Model Context Protocol (MCP) Server, Agentforce agents can securely read, write, and act on fresh, contextual data at runtime; no replication required. The result is grounded responses, real-time decisions, and cross-system automations with fewer moving parts and stronger control.

This article outlines the steps required to configure Lakebase connectivity in Connect AI, register the MCP server in Agentforce, and build a workflow that queries Lakebase data data.

Prerequisites:

  • CData Connect AI account
  • Install Python 3.9+
  • Lakebase data org with Agentforce enabled and permission to create/manage Connected Apps

Credentials Checklist:

Before you begin, you'll need a few credentials mentioned below:

CData Connect AI MCP:

  1. USERNAME: Your CData email login
  2. PAT: Connect AI, go to Settings and click on Access Tokens (copy once)
  3. MCP_BASE_URL: https://mcp.cloud.cdata.com/mcp
  4. MCP_AUTH: Base64 encoded (EMAIL:PAT), where EMAIL is your Connect AI email address and PAT is your Connect AI personal access token (see below).

Note: You can create the base64 encoded version of MCP_AUTH using any Base64 encoding tool.

Agentforce:

  • SFDC_DOMAIN: My Domain URL (https://your_domain.my.salesforce.com)
  • SFDC_CLIENT_ID & SFDC_CLIENT_SECRET: from your Connected App
  • AGENT_ID: open your agent in Agentforce Agents and copy the 18-char ID at the end of the URL

Step 1: Configure Lakebase Connectivity for Agentforce

Connectivity to Lakebase from Agentforce is made possible through CData Connect AI Remote MCP. To interact with Lakebase data from Agentforce, we start by creating and configuring a Lakebase connection in CData Connect AI.

  1. Log into Connect AI, click Sources, and then click Add Connection
  2. πŸ‘ Adding a Connection
  3. Select "Lakebase" from the Add Connection panel
  4. πŸ‘ Selecting a data source
  5. Enter the necessary authentication properties to connect to Lakebase. To connect to Databricks Lakebase, start by setting the following properties:
    • DatabricksInstance: The Databricks instance or server hostname, provided in the format instance-abcdef12-3456-7890-abcd-abcdef123456.database.cloud.databricks.com.
    • Server: The host name or IP address of the server hosting the Lakebase database.
    • Port (optional): The port of the server hosting the Lakebase database, set to 5432 by default.
    • Database (optional): The database to connect to after authenticating to the Lakebase Server, set to the authenticating user's default database by default.

    OAuth Client Authentication

    To authenicate using OAuth client credentials, you need to configure an OAuth client in your service principal. In short, you need to do the following:

    1. Create and configure a new service principal
    2. Assign permissions to the service principal
    3. Create an OAuth secret for the service principal

    For more information, refer to the Setting Up OAuthClient Authentication section in the Help documentation.

    OAuth PKCE Authentication

    To authenticate using the OAuth code type with PKCE (Proof Key for Code Exchange), set the following properties:

    • AuthScheme: OAuthPKCE.
    • User: The authenticating user's user ID.

    For more information, refer to the Help documentation.

    πŸ‘ Configuring a connection (Salesforce is shown)
  6. Click Save & Test
  7. Navigate to the Permissions tab in the Add Lakebase Connection page and update the User-based permissions. πŸ‘ Updating permissions

Add a Personal Access Token

A Personal Access Token (PAT) is used to authenticate the connection to Connect AI from Agentforce. It is best practice to create a separate PAT for each service to maintain granularity of access.

  1. Click on the Gear icon () at the top right of the Connect AI app to open the settings page.
  2. On the Settings page, go to the Access Tokens section and click Create PAT.
  3. Give the PAT a name and click Create. πŸ‘ Creating a new PAT
  4. The personal access token is only visible at creation, so be sure to copy it and store it securely for future use.

With the connection configured and a PAT generated, we are ready to connect to Lakebase data from Agentforce.

Step 2: Enable Agentforce and publish the Experience Cloud site

  1. In Salesforce Setup, go to Einstein Setup, toggle Turn on Einstein
  2. πŸ‘ Turn On Einstein toggle
  3. Go to Agentforce Agents, toggle Agentforce on
  4. πŸ‘ Turn On Agentforce
  5. Publish the Experience Cloud Site that hosts Coral Cloud: Setup, search for All Sites then select Builder (for coral-cloud) click Publish and Confirm
  6. πŸ‘ Coral Cloud Builder
  7. Click the Experience Builder menu
  8. Click Salesforce Setup
  9. πŸ‘ Salesforce Setup
  10. Refresh your browser to reload Setup. Feel free to close the Experience Site browser tab.

Step 3: Set up the EinsteinServiceAgent user and profile

  1. In the Setup Quick Find, search for and select Users
  2. Click Edit next to the EinsteinServiceAgent User
  3. Update the Profile to Einstein Agent User
  4. Keep everything else as-is
  5. Click Save
πŸ‘ Edit EinsteinServiceAgent User

Step 4: Create the Agent and attach an external connection

  1. Setup search for Agentforce Agents click New Agent
  2. Click Create with Gen AI
  3. πŸ‘ Creation of Agent
  4. Provide a summary, name, role, company info; set Agent User = EinsteinServiceAgent User
  5. Check Keep a record of conversations with enhanced event logs, and click Save
  6. πŸ‘ Customize your agent
  7. Click Create
  8. Add Connections select Needs Setup click on Add External App
  9. πŸ‘ Connect to External App
  10. Set Connection Type = API, and provide an Integration Name
  11. Click New Connected App (you'll configure it in the next step)
πŸ‘ Create a New Connected App

Step 5: Create and configure the Salesforce Connected App (Client Credentials)

  1. Allow creation of Connected Apps
  2. Click on New Connected App and provide Name and Admin Email
  3. πŸ‘ Allow creating Connected Apps
  4. Enable OAuth Settings with Callback URL: https://login.salesforce.com
  5. πŸ‘ Provide all the required deatils
  6. OAuth Scopes (add all):
    • Access chatbot services (chatbot_api)
    • Access the Salesforce API Platform (sfap_api)
    • Manage user data via APIs (api)
    • Perform requests at any time (refresh_token, offline_access)
  7. Deselect:
    • PKCE
    • Require Secret for Web Server Flow
    • Require Secret for Refresh Token Flow
  8. Select:
    • Enable Client Credentials Flow
    • Issue JWT-based access tokens for named users.
    • Enable the Save option
    πŸ‘ Refer the image to fill the require fileds
  9. On the app's Manage page click on Edit Policies
  10. Permitted Users: Select the appropriate option for your org
    • In Client Credentials Flow set Run As: choose a user with at least API Only access.
    • Enable JWT-based Access Tokens; Token Timeout: 30 minutes, and click Save
    πŸ‘ Edit the Policies
  11. Finally, return to your Agent Connection and select this Connected App, and click Save
  12. πŸ‘ Add the connected app
  13. Retrieve Consumer Key and Consumer Secret from App Manager
  14. Find your Connected App and View the Manage Consumer Details
  15. πŸ‘ Retrieve Consumer Key and Consumer Secret
  16. Copy Consumer Key and Consumer Secret
πŸ‘ Copy the Consumer Details

Step 6: Collect remaining IDs

  1. My Domain: Setup go to My Domain and copy your ...my.salesforce.com URL for token requests
  2. πŸ‘ Collect My Domain
  3. AGENT_ID: Open the agent in Agentforce Agents and copy the 18-char ID from the URL tail
  4. πŸ‘ Collect the AgentID

    Step 7: Set up Python project

    Install packages:

    pip install requests asyncio langchain-mcp-adapters
    

    Create config.py (replace placeholders with your actual values). It should define:

    • MCP: USERNAME, PAT, MCP_BASE_URL, and compute MCP_AUTH = base64(username:pat)
    • Salesforce: SFDC_DOMAIN, SFDC_CLIENT_ID, SFDC_CLIENT_SECRET, AGENT_ID
    import base64
    
    # --- MCP (CData Connect AI) ---
    EMAIL = "[email protected]"
    PAT = "your_PAT"
    
    MCP_BASE_URL = "https://mcp.cloud.cdata.com/mcp"
    MCP_AUTH = base64.b64encode(f"{EMAIL}:{PAT}".encode()).decode()
    
    # --- Salesforce Agentforce ---
    SFDC_DOMAIN = "https://your_domain.my.salesforce.com"
    SFDC_CLIENT_ID = "your_SFDC_CLIENT_ID"
    SFDC_CLIENT_SECRET = "your_SFDC_CLIENT_SECRET"
    
    AGENT_ID = "your_AGENT_ID"
    

    The complete Python script (flow and key functions)

    The Python script has three main sections:

    1. Salesforce / Einstein Agent Functions
      • get_salesforce_token() - obtains OAuth2 token
      • start_agent_session() - starts an agent session
      • post_message_to_agent() - sends messages to the agent
    2. MCP Functions
      • query_mcp() - retrieves catalogs and runs a sample query from MCP tools
    3. Main Execution
      • Calls MCP functions
      • Gets Salesforce token and starts Agent Session
      • Sends MCP results to the agent for reasoning
      • Prints Agent Response

    Open a terminal in the project directory where the script is and run:

    python agentforce_script.py
    

    agentforce_script.py

    import asyncio
    import requests
    import time
    import uuid
    from langchain_mcp_adapters.client import MultiServerMCPClient
    from config import SFDC_DOMAIN, SFDC_CLIENT_ID, SFDC_CLIENT_SECRET, AGENT_ID, MCP_BASE_URL, MCP_AUTH
     
    # ---------------- Salesforce / Einstein Agent ---------------- #
    def get_salesforce_token():
     """Fetch a fresh Salesforce OAuth token using client credentials."""
     print(" Requesting fresh Salesforce token...")
     token_url = f"{SFDC_DOMAIN}/services/oauth2/token"
     data = {
     "grant_type": "client_credentials",
     "client_id": SFDC_CLIENT_ID,
     "client_secret": SFDC_CLIENT_SECRET,
     }
     headers = {"Content-Type": "application/x-www-form-urlencoded"}
     
     resp = requests.post(token_url, data=data, headers=headers)
     resp.raise_for_status()
     token_data = resp.json()
     
     print(" Got access token.")
     return token_data["access_token"], token_data["instance_url"]
     
     
    def start_agent_session(access_token):
     """Start a session with Salesforce Einstein Agent."""
     session_url = f"https://api.salesforce.com/einstein/ai-agent/v1/agents/{AGENT_ID}/sessions"
     payload = {
     "externalSessionKey": str(uuid.uuid4()),
     "instanceConfig": {"endpoint": SFDC_DOMAIN},
     "streamingCapabilities": {"chunkTypes": ["Text"]},
     "bypassUser": True,
     }
     headers = {
     "Content-Type": "application/json",
     "Authorization": f"Bearer {access_token}",
     }
     
     resp = requests.post(session_url, json=payload, headers=headers)
     resp.raise_for_status()
     session_data = resp.json()
     
     print(f" Agent session started: {session_data['sessionId']}")
     return session_data["sessionId"]
     
     
    def post_message_to_agent(access_token, session_id, message_text):
     """Send a message to the Salesforce Einstein Agent session."""
     messages_url = f"https://api.salesforce.com/einstein/ai-agent/v1/sessions/{session_id}/messages"
     payload = {
     "message": {
     "sequenceId": int(time.time() * 1000),
     "type": "Text",
     "text": message_text,
     },
     "variables": [],
     }
     headers = {
     "Content-Type": "application/json",
     "Authorization": f"Bearer {access_token}",
     }
     
     resp = requests.post(messages_url, json=payload, headers=headers)
     resp.raise_for_status()
     return resp.json()
     
     
    # ---------------- MCP part ---------------- #
    async def query_mcp():
     """Query MCP server for catalogs and a sample query."""
     mcp_client = MultiServerMCPClient(
     connections={
     "default": {
     "transport": "streamable_http",
     "url": MCP_BASE_URL,
     "headers": {"Authorization": f"Basic {MCP_AUTH}"},
     }
     }
     )
     
     tools = await mcp_client.get_tools()
     print("Discovered MCP tools:", [t.name for t in tools])
     
     # List catalogs
     get_catalogs_tool = next(t for t in tools if t.name == "getCatalogs")
     catalogs = await get_catalogs_tool.ainvoke({})
     print("Catalogs:", catalogs)
     
     # Run a sample query
     query_tool = next(t for t in tools if t.name == "queryData")
     query_result = await query_tool.ainvoke({
     "query": "SELECT * FROM [Lakebase].[PUBLIC].[EMPLOYEES] LIMIT 5"
     })
     print("Query result:", query_result)
     
     return catalogs, query_result
     
     
    # ---------------- Main ---------------- #
    async def main():
     # Step 1: MCP
     catalogs, query_result = await query_mcp()
     
     # Step 2: Salesforce token and agent
     access_token, _ = get_salesforce_token()
     session_id = start_agent_session(access_token)
     
     # Step 3: Post MCP results to agent with instructions
     context_message = (
     f"You are a helpful assistant.\n"
     f"The following MCP data was retrieved:\n\n"
     f"Catalogs: {catalogs}\n"
     f"Query result: {query_result}\n\n"
     f"Please answer the user's question based on this data: "
     f"List all available catalogs and summarize the query results."
     )
     
     response = post_message_to_agent(access_token, session_id, context_message)
     
     print("\n Agent response:")
     print(response)
     
     
    if __name__ == "__main__":
     asyncio.run(main())
    

    Sample Output

    πŸ‘ Sample Output

    Build data-powered agents in Salesforce Agentforce

    Agentforce lets you orchestrate AI agents and automate CRM workflows. With live connectivity through CData Connect AI and the remote MCP Server, your agents can operate on real-time, contextual data across your stack CRMs, ERPs, databases, finance platforms, and more.

    Start your free trial today to see how CData can empower Agentforce with live, secure access to hundreds of external systems.