{"slug": "salesforce-just-turned-the-agent-allowlist-into-a-crm-product", "title": "Salesforce Just Turned the Agent Allowlist Into a CRM Product", "summary": "Salesforce's Winter '27 release, announced August 31 and generally available October 12, moves agent authorization into the CRM by shipping an API Catalog that lets administrators control which agents may call which commerce APIs and which Model Context Protocol servers and tools they may reach. Per Salesforce's Winter '27 release-notes change log, only two API Catalog MCP features are explicitly tagged generally available — \"Discover Manually Registered MCP Servers in API Catalog\" and \"Bring MuleSoft MCP Servers into API Catalog\" — both recorded on a rolling basis under the week of May 11, 2026, while the rest of the catalog's MCP surface carries May-through-July entries with no GA or beta tag. Salesforce reports that Agentic Commerce Search, which trains a dedicated small language model on each merchant's catalog and shopper behavior, shows \"a 13% conversion lift and a 17% increase in add-to-cart rates\" and is now standard for all Shopper Agent customers, though the figures are vendor-reported early results with no independent test data published.", "body_md": "For months, the merchant-side gate in [agentic commerce](https://forkast.news/glossary/agentic-commerce/) was a line in a robots.txt file. Shopify blocked AI crawlers from its checkout and cart paths, Amazon blocked Meta’s Muse agent outright, and the control merchants had over agent traffic was reactive and blunt: the picture mapped in [The Fragmenting Gate](https://forkast.news/the-fragmenting-gate-who-controls-agentic-commerce-is-splitting-across-every-layer/). Salesforce’s [Winter ’27 announcement](https://www.salesforce.com/news/stories/winter-2027-product-release-announcement), dated August 31 and generally available October 12, moves that gate inside the CRM. The blocklist ships as a setting.\n\nWhat is being productized is authorization, not [agent identity](https://forkast.news/learn/what-is-agent-identity/). The question the API Catalog answers is not who an agent is but which agents may call which commerce APIs, and which [Model Context Protocol](https://forkast.news/glossary/model-context-protocol-mcp/) (MCP) servers and tools they may reach. The catalog consolidates APIs and MCP servers from MuleSoft, Heroku, and Apex into one managed surface; administrators activate Salesforce-hosted MCP servers for outside clients and register external ones. An allowlist is boring infrastructure. Packaged inside a CRM subscription, it is a control point with a price attached.\n\nThe surface keeps widening. The same release ships agent skills and plug-ins that bundle MCP connectors into installable packages, over 100 prebuilt at launch, and third-party orchestration that lets Agentforce drive agents from AWS, Azure, and Google over A2A. Every new surface the platform connects is another set of calls someone has to authorize.\n\nThe availability picture is narrower than the release energy suggests. Winter ’27 is the release peg and the product positioning: the allowlist becomes a SKU, order management connects over MCP, and Agentic Commerce Search ships. It is not the ship date for the catalog’s confirmed pair. Per Salesforce’s [Winter ’27 release-notes change log](https://help.salesforce.com/s/articleView?id=release-notes.rn_change_log.htm&language=en_US&release=262&type=5), exactly two API Catalog MCP features are explicitly tagged generally available: “Discover Manually Registered MCP Servers in API Catalog” and “Bring MuleSoft MCP Servers into API Catalog,” both recorded as generally available on a rolling basis under the change log’s week of May 11, 2026, five months ahead of the release. The rest of the catalog’s MCP surface (manual registration of external servers, security risk scores, and the mappings from agents, prompt templates, and Connect REST API actions to server tools) carries release-note entries dated May through July with no explicit GA or beta tag. The individual help pages were not retrievable at filing. Confirmed is confirmed; the rest ships with untagged edges.\n\nWhat closes the loop is one line in the Commerce material: order management connects via MCP. Order management, reachable through the same protocol surface, is the platform answering the postures the Fragmenting Gate mapped. Instead of merchants fencing agents out, the platform decides which agents come in and what they can touch. It does not settle the architectural question the [Oracle Fusion Claw piece](https://forkast.news/the-application-layer-is-absorbing-agent-infrastructure-oracle-fusion-claw-signals-the-end-of-standalone-middleware/) raised: whether agent transactions run on live write-back or on data copied into the platform. The release material does not say.\n\nThen there is the number everyone will quote. Agentic Commerce Search trains a dedicated small language model on each merchant’s catalog and shopper behavior, and Salesforce’s announcement reports: “Early results show a 13% conversion lift and a 17% increase in add-to-cart rates, and the capability is now standard for all Shopper Agent customers.” Those are vendor-reported early results; no independent test data has been published. It is still the first quantified conversion bet anyone in this market has placed on agent-driven shopping traffic: the first attempt to price the traffic, not just route it.\n\nWhat the SKU does not move is the part merchants actually argue about. As laid out in [the liability gap piece](https://forkast.news/the-agentic-commerce-liability-gap-who-pays-when-the-agent-buys-wrong/), the merchant still absorbs the cost when an agent buys wrong: no reason code for agent error exists, no framework reallocates the loss, and 93% of merchants believe AI providers should bear it. Merchants are rationing exposure accordingly; only 28% are willing to offer agents their full product range. The API Catalog is platform governance, not an allocation of risk. Salesforce has built the gate and priced the key. Whether the party collecting the toll also carries the liability for what walks through is the question Winter ’27 leaves exactly where it found it.", "url": "https://wpnews.pro/news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product", "canonical_source": "https://forkast.news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product/", "published_at": "2026-10-12 11:33:30+00:00", "updated_at": "2026-10-12 12:15:19.831984+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-products", "ai-search", "artificial-intelligence"], "entities": ["Salesforce", "Agentforce", "Model Context Protocol", "MuleSoft", "Heroku", "Apex", "AWS", "Azure"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product", "markdown": "https://wpnews.pro/news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product.md", "text": "https://wpnews.pro/news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product.txt", "jsonld": "https://wpnews.pro/news/salesforce-just-turned-the-agent-allowlist-into-a-crm-product.jsonld"}}