Retrieve the most recently created leads via SOQL. (docs)
GET /services/data/v60.0/query?q=<SOQL Lead>
🟢 low
— no
Retrieve the most recently created opportunities via SOQL. (docs)
GET /services/data/v60.0/query?q=<SOQL Opportunity>
🟢 low
— no
What the agent can do
Capability
API call
Risk
Needs approval
Create a new Lead record (requires LastName and Company). (docs)
POST /services/data/v60.0/sobjects/Lead
🟡 medium
✅ yes
Create a new Contact record (requires LastName). (docs)
POST /services/data/v60.0/sobjects/Contact
🟡 medium
✅ yes
Create a new Task activity record (requires Subject). (docs)
POST /services/data/v60.0/sobjects/Task
🟢 low
— no
Connecting it
You provide: Salesforce account (OAuth)
Where to get it: In Salesforce: Setup → App Manager → New Connected App → enable OAuth Settings; set the callback (redirect) URL, add OAuth scopes (api, refresh_token), and save to get the Consumer Key/Secret. Customers connect via the OAuth web-server flow; the token response returns both an access token (Bearer) and an instance_url (e.g. https://yourorg.my.salesforce.com) that all REST calls must target.
Permissions/scopes:api, refresh_token
Account setup
Account needed: A Salesforce org with API access — API is enabled on Enterprise, Performance, Unlimited, and Developer editions (Essentials/Pro may require the API add-on).
App registration: OAuth: Setup → App Manager → New Connected App → enable OAuth Settings → set callback URL + scopes (api, refresh_token) → save to obtain Consumer Key/Secret. Customers install via the OAuth web-server flow; the token grant returns the access token and the org's instance_url.
Verification required: No Salesforce review to use a Connected App against your own or managed customer orgs. A security review is required only to publish a managed package on the AppExchange.
Testing: Sign up for a free Developer Edition org at developer.salesforce.com to build and test OAuth + REST against non-production data.
Limits
Daily API request limit per org by edition: Developer Edition 15,000; Enterprise 100,000 (+1,000 per Salesforce license); Performance/Unlimited 100,000 (+5,000 per license). Concurrent long-running (>20s) request limit: 25 per org (Developer Edition 5). HTTP 403 REQUEST_LIMIT_EXCEEDED on daily exceed; 503 on concurrency exceed.