Shivanath Devinarayanan · Updated
On this page
Every tool call and model call goes through the gateway. Client ID, ABAC, MCP tool mapping, rate limit and mTLS, an LLM lane, an A2A lane. Agents do not get a private pipe. Govern the edges first. Migrate a data plane only when it is proven.
Canonical APIs so the tools on the far side are honest are Integration Architecture . MCP hosting is governed MCP tools .
- Interaction Slack, email, web, and scheduled jobs. The surface the company already uses. Identity starts here, not after the agent replies.
- Agent runtime The Agentforce agent, or a peer worker that is allowed to take the next step. Runtime is not the whole architecture.
- Orchestration and hooks Guided determinism. Known paths stay deterministic. Model judgment where the path is not known. Hooks fire before and after the risky step.
- Tool calls MCP is how agents get tools. Hosts and maps live on the gateway, not as a private pipe from the agent to a system of record.
- Governed gateway The front door: client ID, ABAC, tool mapping, rate limit and mTLS, an LLM lane, and an A2A lane. Agents do not go around it.
- Memory Built-in session memory, temporal memory, peer memory, a context graph, and decision traces. Memory is an asset with an owner.
- Systems of record Salesforce and other policy-gated stores. The agent acts here only with a named identity and a trail that can be replayed.
Do, and do not
The gateway does
- Require a client ID on every tool and model call.
- Apply ABAC before the call leaves the door.
- Map MCP tools by name, not by "whatever the agent asked for".
- Rate-limit and prefer mTLS on the machine path.
- Keep an LLM lane and an A2A lane as separate doors, not one blob.
The gateway does not
- Let an agent keep a private pipe around the front door.
- Invent token exchange inside a Mule app that is only wrapping Agentforce.
- Treat exporting logs as a substitute for refusing a call.
- Migrate a data plane "because the slide said so" before the gateway is proven.
The seven-layer path is the parent diagram on architecture . Identity still narrows hop by hop on identity .
How to hire
Hiring starts with a governed production agent on one documented job, then a consultation.
Start at First Agent in Production , then book a consultation .
SHIVANATH DEVINARAYANAN · SALESFORCE MVP HALL OF FAME ·
SD
Home · About · Services · Portfolio · Success Stories · Writing · News · Events · Contact · Tools I use · Media kit · Privacy Policy