Skip to main content
For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
This guide is part of the User Guides collection. It covers the Coverbase Agent Governor package for Salesforce Agentforce. For all three platforms at a glance, see Governor platforms.
The package is in early access and is not yet on AppExchange. Your Coverbase representative gives you the Salesforce DX project to deploy with the Salesforce CLI.
The package gives Agentforce agents three actions backed by the governor. The agent asks the governor before it reads a company database or calls an API. The governor decides, runs the action with a credential scoped to it, masks the result and records the decision. The key lives in a Salesforce external credential, never in Apex, a field or a log. The package also carries a topic, Governed Company Data, that holds the three actions and instructions for each verdict.

​
Set up the agent in Coverbase

  1. In Inspect › Governor › Agents, select Register agent and name it after the Salesforce org or agent, for example agentforce-service.
  2. Copy the key from the Connect an agent panel. Under Platform › Agentforce, the panel shows the deploy command, the named credential URL for your Coverbase environment and where the key goes.
  3. In Policies, give the agent a baseline on the targets it should reach.
Connect panel with Agentforce setup

Connect an agent, Platform group, Agentforce.

​
Deploy the package

The deployment runs the package’s Apex tests. The topic and agent actions deploy only to an org with Agentforce turned on. The named credential Coverbase_Governor points at https://api.coverbase.app. To use another Coverbase environment, change its URL in Setup › Named Credentials to the value the Connect panel shows.

​
Set the key

Deployment never carries the key. Add it after you deploy:
  1. In Salesforce Setup › Named Credentials › External Credentials, open Coverbase Agent Governor.
  2. Open the Agent_Key principal and add an authentication parameter named AgentKey. Its value is the key, cbbk.<agent_id>.<secret>, without Bearer. The credential adds the header itself.
  3. Assign the Coverbase Agent Governor User permission set to the agent’s running user and to anyone who runs the actions in an employee agent.

​
Add the topic to your agent

  1. In Agent Builder, open your agent and select Topics › Add from Asset Library.
  2. Add Governed Company Data.
  3. Activate the agent.
To use the actions in a topic you already have, add Run Governed Action, Check Governed Approval and List Governed Targets from Asset Library › Actions, and add these instructions to the topic:

​
Run Governed Action inputs and outputs

​
Held actions

An Apex action cannot wait, so a held action is handled in the conversation. The agent tells the user, and runs the same action with the approval ID once Check Governed Approval returns approved. Approve once runs only the exact statement it was given for; a different statement is held again with a new approval ID. For unattended work, a scheduled or record-triggered flow can call Check Governed Approval and resume when it reads approved.
Approvals queue with a held action selected

Inspect › Governor › Approvals: the approver sees the exact statement the Agentforce agent asked to run.

​
Act for many people

  • One agent, a delegation per person. Pass the person’s delegation in Delegation ID, for example from a field on the User record. The governor records the person beside the agent and limits the agent to that person’s delegated targets.
  • A key per person. Assign the Coverbase Governor Per User permission set instead. Each person opens Settings › External Credentials › Coverbase Agent Governor and stores their own key in an AgentKey parameter on the Per_User principal. A person without a stored key gets an authentication error instead of acting as the shared agent.

​
Check the results in Coverbase

Every call appears in Inspect › Governor › Activity under the governor agent you created.
Activity view with a decision opened

Inspect › Governor › Activity.

​
Troubleshooting