Salesforce Just Made the Browser Optional. The Headless 360 Era Has Begun.

Salesforce Just Made the Browser Optional. The Headless 360 Era Has Begun. | Enterprise Architecture
Enterprise Architecture · Agentforce · MCP

Salesforce Just Made the Browser Optional. The Headless 360 Era Has Begun.

TDX 2026 unveiled the most significant architectural shift in Salesforce’s 27-year history. Every capability is now an API, MCP tool, or CLI command. Here is an honest architect’s playbook on what changes, what breaks, and how to prepare your org for the browser-less era.

Reading time: ~11 minutes | Published: April 2026 | Published By: Sandip Patel, Salesforce Architect
MCP TOOLS 60+ New MCP tools shipped at TDX 2026 giving agents full platform access
CODING SKILLS 30+ Preconfigured coding skills for Claude Code, Cursor, Codex, Windsurf
AGENTEXCHANGE 13K+ Unified apps, agents, and MCP servers in the new marketplace
DEVOPS SPEED 40% Claimed reduction in deployment cycle times via DevOps Center MCP
TL;DR

Headless 360 turns every Salesforce capability into an API, MCP tool, or CLI command. Agents and external coding tools can now operate the entire platform without ever opening a browser. For architects, this means new permission models, agent-as-user security patterns, and real decisions about which workloads belong in MCP land vs. the classic Lightning experience. The upside is massive. The cost model is unannounced. Plan carefully.

1
The “Why Would You Ever Log In?” Moment
How TDX 2026 reframed the entire Salesforce architectural conversation

Parker Harris stood on the TDX 2026 keynote stage on April 15 and asked a question that would have been heretical five years ago. Why should you ever log into Salesforce again? It landed as a rhetorical question. It arrived as a roadmap.

Over the next 48 hours, Salesforce shipped more than 100 new tools and skills, open-sourced a new programming language, unified three marketplaces into one, and declared that every layer of the platform is now programmable from any surface. This is not a feature release. This is the first real architectural pivot the platform has made in a decade.

The framing from Jayesh Govindarjan, EVP at Salesforce, was telling. He described the platform as four layers: a system of context (Data 360), a system of work (Customer 360 apps), a system of agency (Agentforce), and a system of engagement (Slack and other surfaces). Headless 360 opens every one of those layers to programmable endpoints. Agents and coding tools can now reach into any of them without a browser in sight.

Architect’s Context

Headless is not new as a concept. Commerce Cloud has been “headless” for years. What is new is applying it to the entire Salesforce platform, including CRM, Service, Marketing, Data 360, and Agentforce. The API surface is no longer a side door for integrations. It is becoming the front door.

For architects who have spent careers designing around Lightning, Apex triggers, Flow, and the Setup menu, this is a signal to reset your mental model. The browser UI is not going away. But it is no longer where your most valuable workloads will live.

Here is the shift in one sentence. Salesforce used to be a system humans logged into. It is becoming a system agents program against.

2
The Three Pillars of Headless 360
Build any way you want, deploy anywhere, trust at scale

Salesforce organized Headless 360 around three pillars. Each one represents a different architectural concern. Understanding the pillars separately matters because they will arrive in your org on different timelines and with different cost profiles.

🔧
Pillar 1: Build Any Way You Want

60+ new MCP tools and 30+ coding skills. Coding agents like Claude Code, Cursor, Codex, and Windsurf can read metadata, generate Apex, and deploy through DevOps Center without opening the browser. Agentforce Vibes 2.0 brings bring-your-own-model support and a cloud-hosted IDE.

📱
Pillar 2: Deploy Anywhere

The Agentforce Experience Layer (AXL) separates what an agent does from how it renders. Define the interaction once, embed it natively in Slack, Teams, WhatsApp, Voice, ChatGPT, Claude, Gemini, or any MCP-compatible surface. No rebuilding for each platform.

🛡
Pillar 3: Trust at Scale

Agent Script goes GA and open source. Testing Center surfaces logic gaps before deployment. Custom Scoring Evals define what “good” means for your use case. A new A/B Testing API runs multiple agent versions against real traffic.

The pillars track the lifecycle of an agentic workload. You build it with coding tools and MCP. You deploy it across surfaces without writing platform-specific glue. And you trust it in production with deterministic guardrails and evaluation tooling.

Why the Pillar Order Matters

Most coverage has focused on Pillar 1 because MCP tools and vibe coding are the shiny part. I would argue Pillar 3 is where the real architectural value lives. The industry has been shipping impressive demos for two years. The hard part has always been getting probabilistic systems to behave like enterprise systems. Reliability, auditability, rollback, and regression testing.

Agent Script and Testing Center are the tools architects have been quietly asking for. Agent Script gives you a versionable, auditable definition of an agent’s behavior as a state machine. Testing Center gives you a regression suite. These are not glamorous announcements. They are the announcements that make production agent deployment possible without hoping nothing breaks.

“The agent demos were impressive two years ago. What was missing was everything you need to actually run them in production. That is what shipped at TDX 2026.”
3
MCP Tools: The New Integration Layer
What changes vs. SFDX CLI and the Metadata API you already know

If you have been building on Salesforce for years, you might be wondering what is structurally different about MCP tools versus what you already have with SFDX, the Metadata API, or REST composite endpoints. Fair question. Here is the honest breakdown.

MCP is a Contract Designed for LLMs
Not Humans

Tool descriptions, argument schemas, and response formats are structured so an LLM can reason about when to call them. REST APIs were designed for developers to read documentation and write glue code. MCP tools are designed for an agent to discover and invoke without a human in the loop.

Stateful, Authenticated, Scoped
Session-Aware

MCP tool calls run in the context of an authenticated session with defined permissions. Unlike a one-off REST call, a coding agent can chain multiple tool calls across a reasoning session and the platform maintains context. This is materially different from stateless integration patterns.

Native to the Coding Agent Workflow
Zero Glue Code

Claude Code, Cursor, Codex, and Windsurf can auto-discover MCP servers and their tools. No custom SDK integration. No OAuth handshake boilerplate. This reduces the distance between “I want to add a picklist value” and “the change is deployed” from hours to minutes.

DevOps Center MCP Brings CI/CD Into Conversation
Natural Language Deploy

The new DevOps Center MCP allows deployments to be described and executed through the coding agent. Salesforce claims up to 40% reduction in cycle times. Whether that number holds in real enterprise change control processes is another question. The direction of travel is clear.

The Headless 360 Architecture in One Picture

Think of the platform as four stacked layers, each now independently callable through MCP:

Layer 1
System of Context
Data 360 provides unified customer profiles, unstructured data, and semantic definitions
Layer 2
System of Work
Customer 360 apps expose business logic as callable operations
Layer 3
System of Agency
Agentforce orchestrates reasoning, actions, and tool calls
Layer 4
System of Engagement
Slack, Teams, Voice, WhatsApp, and any MCP-compatible surface

In the old model, these layers were tightly coupled to Lightning as the primary UI. In the Headless 360 model, any surface can call any layer. The architectural decision is no longer just “where does the data live?” but “which layer handles reasoning, which handles action, and which handles presentation?”

Design Pattern Worth Adopting

Treat agents as first-class identities in your org, not as features of a user’s license. Each agent needs its own permission set, audit trail, and runtime guardrails. An agent orchestrating sales workflows should never be able to invoke service-side MCP tools just because it inherits from a user’s broad access.

4
Agent Script and Deterministic Reasoning
The architectural answer to “LLMs are too unpredictable for production”

Agent Script was quietly the most important announcement at TDX 2026, and most of the press missed it. Salesforce open-sourced a new programming language designed for a very specific architectural problem. How do you combine the flexibility of LLM reasoning with the predictability enterprise systems require?

The answer, per Agent Script, is hybrid reasoning. In a single Agent Script file, you declare which steps of the agent’s flow must execute deterministically (explicit business logic, variable assignments, conditional transitions) and which steps can reason freely using LLM capabilities. The whole thing compiles to a state machine that is versionable, testable, and auditable.

?
Pure Prompt-Based Agents
The original Agentforce model
  • The LLM reasoning engine picks which tool to call next
  • Hard to predict behavior for edge cases
  • Black box when something goes wrong
  • Works well for open-ended conversational flows
  • Fails when enterprises need guaranteed outcomes
Agent Script Hybrid Reasoning
Deterministic where it matters
  • Explicit state machine defines agent behavior
  • Business logic executes the same way every time
  • LLM reasoning scoped to specific decision points
  • Single flat file, versionable in Git
  • Built for enterprise testing and rollback

The syntax uses two modes. The arrow (->) or colon signals procedural logic that runs top to bottom. The pipe (|) signals prompt text that assembles into a single instruction block for the LLM. The runtime walks the script, executes deterministic steps, and sends only the relevant prompt fragments to the model at each decision point.

AGENT SCRIPT// Deterministic: always check order status first
lookup_order(orderId) -> order

if order.status == "shipped":
  | Help the customer with tracking. Their tracking number is {order.tracking}.
else:
  | Apologize and explain the order is still processing. Offer to escalate.

// LLM decides tone and phrasing, but the path is fixed

This is not a return to rigid chatbot scripting. It is a bet that the winning architecture for enterprise AI is not “smarter models” but “better control planes around the models.” You keep LLM reasoning for the parts that genuinely need it (interpretation, phrasing, context handling) and you hard-code the parts where drift is unacceptable.

Why This Matters Strategically

Agent Script being open source is the signal. Salesforce is betting that hybrid reasoning becomes a cross-vendor standard, not a proprietary lock-in. Claude Code can already generate Agent Script natively because the documentation is clean. If other vendors adopt similar patterns, the whole industry moves away from pure prompt engineering toward context engineering. That is the shift architects should be preparing for.

5
The Questions Salesforce Didn’t Answer
What was conspicuously missing from the keynote

Every big announcement has gaps. Headless 360 has a few that deserve attention before you build architectural dependencies on these capabilities.

$
The Pricing Silence
No licensing model was announced
  • Are all 60+ MCP tools included at no cost?
  • Which capabilities will land in premium SKUs?
  • How does MCP tool invocation count against API limits?
  • Will there be per-agent, per-call, or platform-level fees?
  • Action: Ask your AE about pricing before committing architecturally
The SLA Silence
Real-time agent workflows need guarantees
  • What is the latency SLA on MCP tool calls?
  • What is the uptime commitment for hosted MCP servers?
  • How does degraded performance propagate to agents?
  • What is the throttling behavior at scale?
  • Action: Architect for graceful degradation from day one

The Apex Limits Still Apply (For Now)

Your agents running against production workloads still hit the same governor limits Apex has always had. The 10-second synchronous CPU limit. The 100 SOQL queries per transaction. The 150 DML operations. Salesforce flagged upcoming changes to the security model and async limits “engineered for agents” at TDX, but nothing has shipped yet. Until it does, architects running production agent workloads need to design around existing limits and expect hard conversations with AEs about per-org ceilings.

The Builder Gap Is Real

This is the conversation Salesforce did not have on stage. Headless 360, MCP tools, Agent Script, native React, ADLC skills, Hosted MCP Servers. This is a pro-code menu. The vibe coding framing makes it feel accessible, but the underlying skillset is software engineering. When Salesforce says “agents will write Agent Script for you,” that is true. But someone still has to prompt, evaluate, debug, test, and deploy what the agent produces. That someone needs to understand structured type systems, API architectures, CI/CD pipelines, and LLM behavior.

The traditional Trailblazer community was built on clicks-not-code. These announcements do not include a visible bridge program for admins who need to cross from declarative to agentic. If you lead a team of Salesforce admins, the reskilling conversation starts now.

Unanswered Security Question

When external coding agents (Claude Code, Cursor, Codex) get live, authenticated access to your org, the blast radius of a compromised developer credential just grew considerably. Token scoping, session expiration, and audit logging for MCP sessions need to be treated as Tier-1 security concerns, not afterthoughts.

6
An Architect’s 6-Step Readiness Plan
What to do this week, this month, and this quarter

You do not need to rewrite your org tomorrow. You do need a clear plan for absorbing Headless 360 into your architecture without breaking what already works. Here is the phased approach that matches how this will actually roll out.

THIS WEEK THIS MONTH THIS QUARTER
1
Spin Up a Developer Edition Org
Salesforce made this free. Every Developer Edition org now includes Agentforce Vibes IDE, Claude Sonnet 4.5 as the default coding model, and Salesforce Hosted MCP Servers. Zero installation, launches from Setup. Use this week to run a real task against MCP tools. Don’t read about them. Execute them.
Cost: free
2
Audit Your Agent Identity Story
If you have Agentforce in production or sandbox, map which agents exist, which permission sets they use, what objects they touch, and what actions they invoke. If your agents inherit broad integration user permissions, tighten that now. Least-privilege is how you prevent $1M mistakes at machine speed.
Security first
3
Prototype One Workflow in Agent Script
Pick a workflow you already have in Agentforce that suffers from probabilistic drift. Customer onboarding, quote generation, service dispatch, anything where you need guaranteed outcomes. Rewrite it in Agent Script. You will learn more in one afternoon than from any whitepaper.
Highest learning ROI
4
Get Pricing Clarity From Your AE
Before committing architecturally to MCP-heavy patterns, ask: What is included in your current Agentforce SKU? Which Headless 360 capabilities require new licenses? How are MCP tool calls metered? Put the answers in writing. Your 2027 renewal conversation will thank you.
Do this now
5
Build a Testing and Eval Discipline
Use Testing Center (GA May 2026) to build a regression suite for each production agent. Define Custom Scoring Evals for what “good” looks like in your domain. Set up A/B testing for any agent change that affects more than 5% of traffic. Treat agent deployments like you treat Apex deployments, because they have similar blast radius.
Production discipline
6
Plan Your Team’s Reskilling Path
If you lead admins, the declarative-to-agentic bridge is your problem now. Start with Agent Script (the low-code canvas mode makes it admin-accessible). Move to MCP concepts and tool invocation. Most of your team will not become pro-code engineers. That is fine. They need enough fluency to design, configure, and govern the systems that pro-code engineers build.
Long-term investment
Org already running Agentforce in production
Ready to adopt Headless 360 in 60-90 days
Org using Data 360 but not Agentforce yet
Plan for 3-6 month ramp
Traditional Lightning-only org
Data readiness first, 6+ months

For architects evaluating this right now, the question is not “should we adopt Headless 360?” The question is which workloads benefit from going headless first, which stay in Lightning, and how to keep the two models from fighting each other. The orgs that win the next three years will answer that question before their competitors do.

7
Frequently Asked Questions
Headless 360, MCP, Agent Script, and getting started
What is Salesforce Headless 360 in one sentence?
Headless 360 makes every capability on the Salesforce platform accessible as an API, MCP tool, or CLI command, so AI agents and coding tools can operate the entire system without ever opening a browser. It was announced at TDX 2026 on April 15 and includes more than 60 new MCP tools, 30+ preconfigured coding skills, Agentforce Vibes 2.0, and the Agentforce Experience Layer.
How is MCP different from the REST API or SFDX CLI I already use?
REST APIs were designed for developers to read documentation and write glue code. MCP tools are designed for LLMs to discover and invoke autonomously. MCP tool calls run in stateful, authenticated sessions with defined permissions, and external coding agents like Claude Code or Cursor can auto-discover them without custom integration work. The Metadata API and SFDX are still there. MCP sits alongside them as the LLM-native layer.
Do I need to stop using Lightning and the Setup menu now?
No. Headless 360 is new plumbing, not a replacement. The Setup menu still exists. Lightning App Builder still exists. Flow, Apex triggers, and Experience Cloud all still work. The architectural question becomes which workloads benefit from going headless (anything agent-driven or cross-surface) and which stay in the classic experience (anything human-centric or configuration-heavy).
Is Agent Script just a new DSL for chatbots?
No. Agent Script is a hybrid reasoning language that lets you specify which parts of an agent flow must execute deterministically (business logic, variable state, transitions) and which parts use LLM reasoning. The whole script compiles to a state machine that is versionable and auditable. It is designed to solve the production reliability problem that pure prompt-based agents struggle with. It went GA and open source at TDX 2026.
How much does Headless 360 cost?
Salesforce did not announce a pricing model at TDX 2026. Some capabilities are included in existing Agentforce SKUs, others will likely require new licenses, and MCP tool metering has not been disclosed. Industry analysts have flagged this as a material concern. Get pricing clarity from your account executive in writing before building architectural dependencies on any Headless 360 capability.
What’s the single best way to learn Headless 360 this week?
Spin up a free Developer Edition org. Every DE org now includes Agentforce Vibes IDE (cloud-hosted VS Code), Claude Sonnet 4.5 as the default coding model, and Salesforce Hosted MCP Servers. No installation required. Pick one real task, run it through MCP tools end to end, and you will learn more in an hour than from a week of reading announcements.
Should admins worry about being replaced?
No, but the job is changing. Traditional declarative configuration skills remain valuable for the parts of the platform that stay human-centric. The growth area is agent governance: defining permission structures, writing Agent Script logic in the low-code canvas, building testing and eval discipline, and bridging business requirements to agent implementations. The admins who thrive will be the ones who add “agent designer” to their skill set.

Leave a reply

Your email address will not be published. Required fields are marked *