Step 8

Summary and Next Steps

⏱ 1 min

What you built

In this workshop you governed the Salesforce SObject All and Data 360 MCP Servers through MuleSoft Omni Gateway with the full 6-policy stack:

Step	What you did
Find in Portfolio	Located the Salesforce MCP Server assets in Anypoint Exchange’s service-oriented Portfolio view
Add to Registry	Created API Manager instances for both MCP Servers, linking them to your Omni Gateway deployment
Create Gateway Instance	Verified gateway connectivity and port configuration for MCP traffic
Apply Policies	Applied all six MCP policies in order: MCP Support, PII Detector, Global Access, ABAC, Payload Optimization, and Telemetry
Cost Attribution	Configured the Cost Management dashboard and Token Mapping to reduce token consumption by 30–75%
Test and Verify	Validated each governance layer end-to-end from a real MCP client

Key outcomes

PII protection: Tool calls containing SSNs, emails, credit card numbers, and phone numbers are blocked before they reach Salesforce — protecting both inbound prompts and outbound responses.
Least-privilege tool access: The Cedar ABAC policy ensures each AI agent can only call the specific tools it needs. An HR reporting agent cannot accidentally call delete on a Salesforce record.
Token cost visibility and reduction: The Agent Connection Telemetry policy feeds the Cost Management dashboard with per-agent, per-tool token metrics. MCP Payload Optimization and Tool Mapping reduce token consumption by 30–75% compared to ungoverned access.
Complete audit trail: Every tool call through the governed gateway is logged in Anypoint Monitoring with client identity, tool name, token counts, and latency — providing the audit trail required for compliance and chargeback.

Next steps

Govern more MCP Servers Apply the same policy stack to the Salesforce SObject Reads and Tableau Next MCP Servers. SObject Reads can use a relaxed ABAC policy (allow all read tools) while Tableau Next may need stricter PII detection for analytics queries that return customer data.

Build governed agent networks on top The governed MCP endpoints you created in this workshop are the foundation for multi-agent systems. See the Agent Fabric workshop to build a Broker-fronted agent network where the Broker calls these governed Salesforce tools as part of larger workflows.

Set up cost alerts Configure Anypoint Monitoring alerts to notify your team when daily token spend exceeds a budget threshold. Navigate to Governance → Cost Management → Alerts.

Explore scoped Tool Mapping Expand the Tool Mapping configuration to create scoped aliases for every common query pattern in your org. Each alias further reduces token costs and makes the agent’s tool selection more reliable.

Congratulations on completing the Governing Salesforce MCP Servers workshop.