使い方
- インストールコマンドをコピーし、自分の環境へ導入する前にソースを確認します。
- 必要なツール、認証情報、対応環境を原文で確認します。
- 入力と成果物を指定し、出力を資料と照合します。
npx skills add https://github.com/sshvarzman-salesforce/claude-skills --skill sf-agent-api-integration-patterns開始前の確認
- 導入にはモデル契約、API枠、ファイルへのアクセス許可は含まれません。
- スター数や導入数は活動の指標であり、独立した品質・安全性試験ではありません。
リポジトリの原文
見出し、例、コード、表、リンク、参照画像を含む原文を表示しています。
Agent API Integration Patterns
Use This Skill When
- Choosing an integration pattern for the Agent API (website, headless, connector, agent-to-agent).
- Structuring a reusable client: token management, session lifecycle, message loop, streaming, retries.
- Setting the security and resilience posture before building.
Integration Patterns
| Pattern | Description | Delivery | Notes |
|---|---|---|---|
| Website chat | Embed agent chat on a site/app | Streaming | Token brokered server-side; browser never sees the secret |
| Headless automation | Automate functionality without UI | Sync | Server-to-server; ideal for jobs/workflows |
| Platform connector | Connect to Slack, Teams, custom workflows | Sync or streaming | Standardized REST calls per platform SDK |
| Agent-to-agent | One agent invokes another | Sync | Build an agentic ecosystem; watch credit consumption |
Reference Client Architecture
Structure any integration around four layers:
- Token service — mints and caches the client-credentials token, refreshes before expiry, and keeps the secret server-side.
- Session manager — starts sessions (
externalSessionKeyper conversation), trackssessionId+sequenceId, and ends sessions. - Message loop — serializes turns per session (one request in flight), builds the message body, attaches variables.
- Response handler — parses sync
Informor consumes the SSE stream; renders citations; capturesfeedbackId.
[Client UI / Job] → [Message loop] → [Session manager] → [Token service] → Agent API
↑ (cache token)
[Response handler] ← SSE / JSON ←─────────────┘Browser-safe pattern (website)
- Never expose the consumer secret or token to the browser.
- Front-end talks to your backend; backend brokers the token and proxies Agent API calls.
- Stream from backend to browser (SSE/WebSocket) if real-time rendering is needed.
Resilience Checklist
- Token refresh: refresh on
401and proactively before expiry. - Concurrency: queue turns per session; a concurrent request returns
423. - Timeout: the API times out at 120s → surfaced as
500; set client timeouts and a user-facing fallback. - Retries: retry idempotent failures (network,
500transient) with backoff; do not blindly resend a message that may have partially processed. - Session cleanup: DELETE sessions on conversation end; reap abandoned sessions.
- Government Cloud: switch base host to
api.gov.salesforce.com.
Guardrails
- Server-side secret/token custody only — treat the browser as hostile.
- One in-flight request per session; serialize turns.
- Use the My Domain URL for
instanceConfig.endpoint, not the Lightning URL. - Agent API usage consumes credits (see Generative AI Usage and Billing) — budget agent-to-agent chains carefully.
- Not supported for "Agentforce (Default)" agents — confirm agent type before integrating.
- Log
traceId,sessionId, andexternalSessionKeyfor every turn to support debugging and audit.
Deliverables
- Chosen integration pattern with rationale (surface, sync vs streaming, credit impact).
- A layered client design (token / session / message / response) with concurrency and retry policy.
- A security posture doc (secret custody, token brokering, PII handling).
- A resilience matrix covering 401 / 423 / 500 / timeout / session cleanup.
Additional Resources
- Setup and tokens:
sf-agent-api-setup - Session and messaging mechanics:
sf-agent-api-session-lifecycle,sf-agent-api-messaging - Context passing:
sf-agent-api-variables - Error handling:
sf-agent-api-troubleshooting - Pre-ship review:
sf-agent-api-review - Official docs: Agent API Developer Guide, Considerations
