Add Salesforce Data 360 discovery surfaces

curated/salesforce.json

@@ -0,0 +1,130 @@
+{
+  "slug": "salesforce",
+  "name": "Salesforce",
+  "tagline": "CRM, Data 360, Agentforce, and platform APIs behind governed agent access.",
+  "description": "Salesforce exposes REST, GraphQL, CLI, hosted MCP, and Data 360 APIs. For agent-native work, the highest-value gap is making the Data 360 surfaces discoverable with clear credential recipes and safe execution policies.",
+  "domain": "salesforce.com",
+  "icon": "https://www.google.com/s2/favicons?domain=salesforce.com&sz=64",
+  "categories": [
+    "crm",
+    "data-platform",
+    "ai-agents"
+  ],
+  "auth": {
+    "methods": [
+      {
+        "type": "oauth2-client-credentials",
+        "label": "External Client App client credentials",
+        "note": "Use a Salesforce External Client App with Client Credentials enabled, least-privilege run-as user, and scopes api, cdp_api, and cdp_query_api."
+      },
+      {
+        "type": "oauth2-token-exchange",
+        "label": "Data 360 instance token exchange",
+        "note": "Exchange a core org token at /services/a360/token for instance-host APIs such as Ingestion and Profile. ECA scopes for these surfaces include cdp_ingest_api and cdp_profile_api."
+      },
+      {
+        "type": "oauth2-pkce",
+        "label": "Per-user OAuth",
+        "note": "Use per-user OAuth for human-scoped actions and Salesforce Hosted MCP servers where available."
+      }
+    ],
+    "guide": "For a governed org-plane agent, create an External Client App in Salesforce, enable Client Credentials Flow, grant scopes api, cdp_api, and cdp_query_api, and assign a least-privilege Data 360 integration user. Register Salesforce Data 360 Connect as an OpenAPI source in Executor, then register the ECA as a confidential OAuth client through Executor's browser handoff so the client secret never crosses chat or shell history.",
+    "sources": [
+      {
+        "title": "Data 360 Connect REST API spec",
+        "url": "https://developer.salesforce.com/docs/data/connectapi/references/spec"
+      },
+      {
+        "title": "Data 360 Ingestion API",
+        "url": "https://developer.salesforce.com/docs/data/data-cloud-int/guide/c360-a-ingestion-api.html"
+      },
+      {
+        "title": "Data 360 Profile API",
+        "url": "https://developer.salesforce.com/docs/data/data-cloud-query-guide/references/data-cloud-query-api-reference/c360a-api-profile-call-overview.html"
+      },
+      {
+        "title": "OAuth and Connect REST API",
+        "url": "https://developer.salesforce.com/docs/atlas.en-us.chatterapi.meta/chatterapi/intro_using_oauth.htm"
+      }
+    ],
+    "generatedAt": "2026-07-03",
+    "verified": false
+  },
+  "interfaces": [
+    {
+      "format": "openapi",
+      "name": "Data 360 Connect REST API",
+      "endpoint": "https://{my-domain}.my.salesforce.com/services/data/v{version}",
+      "specUrl": "/specs/salesforce-data-360-connect.yaml",
+      "auth": "oauth2-client-credentials",
+      "docs": "https://developer.salesforce.com/docs/data/connectapi/references",
+      "note": "The official docs endpoint can be awkward for server-side fetches; this workspace mirrors the spec for Executor registration and integrations.sh discovery.",
+      "origin": "vendor"
+    },
+    {
+      "format": "openapi",
+      "name": "Data 360 Ingestion API",
+      "endpoint": "https://{tenant}.c360a.salesforce.com/api/v1/ingest",
+      "specUrl": "/specs/salesforce-data-360-ingestion.openapi.json",
+      "auth": "oauth2-token-exchange",
+      "docs": "https://developer.salesforce.com/docs/data/data-cloud-int/guide/c360-a-ingestion-api.html",
+      "note": "The instance host and bearer token come from the Salesforce /services/a360/token exchange. In this workspace, registration uses browser handoff until the trusted token bridge exists.",
+      "origin": "workspace-curated"
+    },
+    {
+      "format": "openapi",
+      "name": "Data 360 Profile API",
+      "endpoint": "https://{tenant}.c360a.salesforce.com/api/v1/profile",
+      "specUrl": "/specs/salesforce-data-360-profile.openapi.json",
+      "auth": "oauth2-token-exchange",
+      "docs": "https://developer.salesforce.com/docs/data/data-cloud-query-guide/references/data-cloud-query-api-reference/c360a-api-profile-call-overview.html",
+      "note": "The instance host and bearer token come from the Salesforce /services/a360/token exchange. Profile calls are read/query oriented but still require Data 360 instance credentials.",
+      "origin": "workspace-curated"
+    },
+    {
+      "format": "openapi",
+      "name": "Salesforce REST API",
+      "endpoint": "https://{my-domain}.my.salesforce.com/services/data/v{version}",
+      "auth": "oauth2",
+      "docs": "https://developer.salesforce.com/docs/atlas.en-us.api_rest.meta/api_rest",
+      "origin": "vendor"
+    },
+    {
+      "format": "graphql",
+      "name": "Salesforce GraphQL API",
+      "endpoint": "https://{my-domain}.my.salesforce.com/services/data/v{version}/graphql",
+      "auth": "oauth2",
+      "docs": "https://developer.salesforce.com/docs/platform/graphql/overview",
+      "origin": "vendor"
+    },
+    {
+      "format": "cli",
+      "name": "sf",
+      "install": "npm install -g @salesforce/cli && sf org login web",
+      "auth": "oauth",
+      "docs": "https://developer.salesforce.com/tools/salesforcecli",
+      "origin": "vendor"
+    },
+    {
+      "format": "mcp",
+      "name": "Salesforce Hosted MCP servers",
+      "endpoint": "Salesforce-hosted MCP endpoints per org/user where enabled",
+      "auth": "oauth2-pkce",
+      "docs": "https://developer.salesforce.com",
+      "note": "Use the user-plane OAuth scope mcp_api when onboarding hosted MCP sources.",
+      "origin": "vendor"
+    }
+  ],
+  "links": {
+    "homepage": "https://salesforce.com",
+    "docs": "https://developer.salesforce.com/docs"
+  },
+  "related": [
+    "openapi/salesforce-data-360-connect",
+    "openapi/salesforce-data-360-ingestion",
+    "openapi/salesforce-data-360-profile",
+    "openapi/salesforce-com-openapi",
+    "graphql/salesforce-com-graphql",
+    "cli/salesforce-com-cli"
+  ]
+}

overrides/openapi/salesforce-data-360-connect.json

@@ -0,0 +1,19 @@
+{
+  "name": "Salesforce Data 360 Connect REST API",
+  "description": "Official Salesforce Data 360 Connect REST API. Covers metadata, streams, DMOs/DLOs, identity resolution, calculated insights, segments, activations, query, retrievers, data spaces, data actions, clean rooms, and related lifecycle APIs.",
+  "url": "https://developer.salesforce.com/docs/data/connectapi/references/spec",
+  "icon": "https://www.google.com/s2/favicons?domain=salesforce.com&sz=64",
+  "categories": [
+    "crm",
+    "data-platform",
+    "ai-agents"
+  ],
+  "openapi": {
+    "provider": "salesforce.com",
+    "service": "data-360-connect",
+    "version": "67.0",
+    "specUrl": "/specs/salesforce-data-360-connect.yaml",
+    "docsUrl": "https://developer.salesforce.com/docs/data/connectapi/references",
+    "openapiVer": "3.0.0"
+  }
+}

overrides/openapi/salesforce-data-360-ingestion.json

@@ -0,0 +1,19 @@
+{
+  "name": "Salesforce Data 360 Ingestion API",
+  "description": "Instance-host Data 360 Ingestion API for streaming upsert/delete and bulk CSV job lifecycle. Requires the Data 360 instance token returned by /services/a360/token.",
+  "url": "https://developer.salesforce.com/docs/data/data-cloud-int/guide/c360-a-ingestion-api.html",
+  "icon": "https://www.google.com/s2/favicons?domain=salesforce.com&sz=64",
+  "categories": [
+    "crm",
+    "data-platform",
+    "ai-agents"
+  ],
+  "openapi": {
+    "provider": "salesforce.com",
+    "service": "data-360-ingestion",
+    "version": "1.0.0",
+    "specUrl": "/specs/salesforce-data-360-ingestion.openapi.json",
+    "docsUrl": "https://developer.salesforce.com/docs/data/data-cloud-int/guide/c360-a-ingestion-api.html",
+    "openapiVer": "3.0.3"
+  }
+}

overrides/openapi/salesforce-data-360-profile.json

@@ -0,0 +1,19 @@
+{
+  "name": "Salesforce Data 360 Profile API",
+  "description": "Instance-host Data 360 Profile API for profile metadata, record lookup, child data, and calculated insight reads. Requires the Data 360 instance token returned by /services/a360/token.",
+  "url": "https://developer.salesforce.com/docs/data/data-cloud-query-guide/references/data-cloud-query-api-reference/c360a-api-profile-call-overview.html",
+  "icon": "https://www.google.com/s2/favicons?domain=salesforce.com&sz=64",
+  "categories": [
+    "crm",
+    "data-platform",
+    "ai-agents"
+  ],
+  "openapi": {
+    "provider": "salesforce.com",
+    "service": "data-360-profile",
+    "version": "1.0.0",
+    "specUrl": "/specs/salesforce-data-360-profile.openapi.json",
+    "docsUrl": "https://developer.salesforce.com/docs/data/data-cloud-query-guide/references/data-cloud-query-api-reference/c360a-api-profile-call-overview.html",
+    "openapiVer": "3.0.3"
+  }
+}