Salesforce’s ChatGPT integration is really about stopping customers from leaking their own data

Salesforce users running Agentforce with ChatGPT Enterprise or Edu can now update CRM data directly from the bot, a move aimed at curbing home-built integrations that risk spilling data outside the company's controls.

While the tie-up was pitched as a way to reduce the time users spend toggling between OpenAI’s bot and Salesforce, analyst Vernon Keenan said in a blog post that it is actually security driven.

The move, which was announced last week, is aimed at heading off the DIYers who have assembled their own integrations using model context protocol, or MCP, according to Kris Billmaier, GM and EVP of Agentforce Sales at Salesforce. Think of MCP as a kind of API layer for wiring AI models to tools and data.

Keenan wrote that Salesforce users have been building their own MCP servers using OpenAI’s Apps SDK and exposing Salesforce data to various frontier LLMs in ...