AgentDx 1.0 · for Salesforce developers and admins

Agentic IDE for Salesforce Developers

AgentDx writes your code automatically - just give it a prompt and let it cook!

7-day free trial · macOS 13+ · Claude included

A sped-up recording of AgentDx on a Salesforce developer org. Asked to "create a trigger on Account that updates every related contact's mailing address when the billing address changes", it reads the org first, finds the triggers already on Account, and recommends a handler class called from the existing AccountAddressTrigger instead of adding another trigger. When a deploy fails because ContactRestrictionTrigger unlinks every contact from its account, it asks how to proceed. Then it deploys, and all 3 new tests pass.

Org grounding

A generic assistant writes a second trigger. AgentDx reads the first one.

Ask a general-purpose assistant to email an Account’s owner on create and it will happily write a new AccountTrigger, into an org that already has one. Two triggers on one object run in an order Salesforce doesn’t guarantee. AgentDx reads the org first, tells you when what you asked for already exists, and extends it instead of duplicating it.

  1. You ask

    “Send an email to the owner when an Account is created.”

  2. Org preflight

    Before it writes anything, AgentDx checks the org for automation that already runs when an Account is created.

  3. ALREADY_EXISTS

    One trigger and three active flows run after insert. AccountTrigger hands off to AccountTriggerHandler, and the active Account_Welcome_Email flow already sends an email alert.

  4. It asks

    A second trigger on Account would run in an undefined order, so it won’t write one. It asks whether to change what the existing flow sends, or whether this is a different email.

The AgentDx transcript for “Send an email to the owner when an Account is created.” An org preflight returns ALREADY_EXISTS: one trigger and three active flows on Account after insert. AgentDx lists them, says a second trigger would give undefined execution order so it won’t create one, and asks whether to change what the existing Account_Welcome_Email flow sends.
The duplicate-trigger example in the real app, against a demo org.

How it works

Connect, index, ask, approve, undo.

The same five steps for a question about the org and for a change to it.

  1. 01

    Connect

    Sign in through your browser. AgentDx uses the Salesforce CLI’s own connected app, so there is nothing to install in the org first.

  2. 02

    Index

    It indexes the org in stages: the basics in seconds, objects and automation in a minute or two, code in the background. Ask questions meanwhile; answers come live from the org.

  3. 03

    Ask or build

    Ask about the org, or describe what to build. A preflight checks what already exists before anything is written.

  4. 04

    Approve with diffs

    Changes arrive as cards: Apex as a diff, Flows element by element, permission sets as a before-and-after matrix.

  5. 05

    Undo

    Every change is journaled before it runs. Revert from the Changes panel, with a plain list of what a revert can’t restore.

Features

Built for the org you already have.

Everything here ships in 1.0 and works against real orgs: production, sandboxes, developer and scratch orgs.

  • Read first

    AgentDx indexes the org and checks it before every write, so it builds on what you have instead of beside it.

  • Approve what matters

    Changes arrive as cards you can actually read. Production always asks, and the riskiest changes make you type the org’s alias.

  • Undo what it did

    A journal records every change before it runs, and reverts what Salesforce lets it revert, in one click.

Approval cards

Apex and Flow changes, as diffs you can read

Before a change reaches the org you see exactly what it is. Apex arrives as a line diff, with the tests that will run and any lint finding beside the line it belongs to. A Flow change is broken down element by element.

  • Which Flow elements now write data, and which entry criteria changed
  • A warning when a deploy would activate a draft Flow
  • The org, objects, component count and reversibility on every card
An approval card titled “Write AccountTriggerHandler.cls”, which extends the existing handler rather than adding a second trigger on Account. It shows a line diff adding a bulkified notifyOwners method, the tests that will run, a lint finding, and Reject and Approve buttons.
An approval card for “Update Account_Welcome_Email”, a tier 2 operation on a developer org. It warns that the deploy activates the flow, shows the entry criteria change, and lists four changed elements, two of which write data.

Permission matrix

Permission changes, with the blast radius first

A permission set change shows how many active users hold the set, then a before-and-after matrix of system, object and field permissions. Anything that reaches beyond a single record, like View All Data, is called out at the top.

  • Active users who hold the set, counted from the org
  • Object, field, Apex class and custom permission changes side by side
  • Confirmed by typing the org’s alias, and framed in red in production
An approval card for “Update Sales_Manager permission set”, a tier 3 operation on a production org, framed in red. 4,012 active users hold the set. Two permissions that reach beyond a single record are listed first, View All Data and View All on Opportunity, followed by a before-and-after matrix of system, object, field, Apex class and custom permissions.

Change journal

Every change journaled, most of them one click to undo

Each change is written to the journal before it runs and settled after, so even a half-applied deploy can be explained. Revert puts back what it can, and tells you in plain words what it can’t.

  • Deploys, record updates and failures, each marked by how reversible it is
  • Anonymous Apex marked “cannot be undone” before you run it
  • Reverts list what will not come back, like LastModifiedDate
The Changes panel beside a conversation, listing journal entries: a deploy of AccountTriggerHandler marked reversible, an update of 412 Accounts reversible with caveats, anonymous Apex that cannot be undone, a failed field creation, and an earlier update that was reverted. Reversible entries have a Revert button.
A “Revert this change?” dialog for an update of 412 Accounts. It will write the previous field values back, and lists what it will not restore: LastModifiedDate and LastModifiedById, automation that fires again on the revert, and fields changed by automation as a side effect.

Workbench

An editor for the code, a browser for the org

Open your project in a real editor, built on Monaco, with the agent beside it. The org browser lists every metadata type in the org and pulls any component down into the project when you open it.

  • Explorer, tabs, Apex highlighting and a status bar that names the org
  • Every metadata type in the org, with counts, filterable
  • Ask about the file in front of you without leaving it
The AgentDx workbench: a file explorer with Apex classes, a Lightning web component, a Visualforce page and a trigger; AccountService.cls open in the editor with syntax highlighting; and the AgentDx chat panel on the right, connected to acme-dev.
The org browser listing the metadata types in acme-dev with counts, such as 1,173 Apex classes, 140 Apex triggers and 404 custom objects, with Lightning component bundles expanded.

And underneath

  • Preflight and deny-gate

    No tool that can change the org runs without a preflight on record for what it touches. The gate runs before permissions are even checked, so it holds when tools are allowed to run without asking.

  • Validate-first production deploys

    A metadata deploy to production becomes a validation with RunLocalTests. The org compiles it and runs your tests; nothing changes until you approve the quick deploy.

  • Apex lint, PMD and test gates

    A local lint catches SOQL in loops, hardcoded Ids and missing sharing as the code is written. Code Analyzer findings at severity 1 or 2 block the deploy, and a turn can’t end with deployed Apex untested, failing or under 75% coverage.

  • Org-risk colours

    Production is red, sandboxes amber, scratch and developer orgs green, wherever the org appears. An org AgentDx can’t identify is treated as production.

    How the colours work
  • What changed in this org

    Ask what changed recently and AgentDx reads the Setup Audit Trail, the only record of changes that leave no other trace, and answers from it.

  • Document and image attachments

    Attach the requirements doc, a spreadsheet, a slide deck, a PDF or a screenshot. Word, Excel and PowerPoint files are read as text; images and PDFs go to the model as they are.

  • Decision memory

    When AgentDx has to ask you something, each option comes with evidence from the org. It remembers your answer for that org, so a settled question stays settled.

Safety

Production is treated like production.

Nobody should have to read a username to know they are about to change production. AgentDx colours every org by risk, everywhere it appears: the org list, the header and every approval card.

  • Prod

    Production

    Every change asks first. Deploys validate before they apply, and anything riskier than a small change needs the org’s alias typed in.

  • Unverified

    An org it can’t identify

    Fails closed. It gets production-grade caution until AgentDx can tell what kind of org it is.

  • Sandbox

    Sandbox

    Small, reversible changes can run without a card. Larger ones, and anything it can’t classify, still ask.

  • ScratchDev

    Scratch and developer orgs

    The place to try things, where a mistake is cheap. Still preflighted, gated and journaled.

Between a prompt and production

  • Reading never needs permission. In production, every write does.
  • Changing permissions, deleting data or destroying metadata means typing the org’s alias, not “yes”, in any org.
  • Production deploys run as a validation with RunLocalTests first, and apply only when you approve the quick deploy.
  • Hard deletes are switched off. AgentDx proposes a soft delete instead, which stays in the Recycle Bin for 15 days.
  • A tool it can’t classify fails closed and asks, so a new tool never arrives auto-approved.
  • Every change is journaled before it runs, so even a half-applied deploy can be explained.

Privacy

Your org, your Mac.

The org index, the change journal and your settings live on your Mac. Prompts pass through AgentDx’s servers on their way to Claude, and are never kept there.

  • An account, and only what it needs

    Sign in with Apple, Google or email. We keep your email, your plan and what each agent request cost, never what it said.

  • No Salesforce credentials stored

    Sign-in goes through the Salesforce CLI’s auth store, the same one sf uses. AgentDx keeps no passwords or tokens of its own.

  • Claude included, no key to manage

    The agent reaches Claude through AgentDx’s servers, which pass each request to Anthropic without storing or logging it.

  • No telemetry

    AgentDx sends no analytics or crash reports, and turns telemetry off in everything it runs: the Claude agent, the Salesforce MCP server and the bundled Salesforce plugin.

What leaves your Mac

To Anthropic, through AgentDx
Your prompts, attachments, and the org context the agent reads to answer them. Our servers relay them and keep only a count of what each request cost.
To your Salesforce org
The API calls that read it and, once you approve them, the changes.
To this site
Your sign-in, your plan’s status, and a check for updates every few hours, which downloads new versions when there are any.
Read the privacy policy

Requirements

What you need.

A Mac, an org and an AgentDx plan. That’s the list.

macOS 13 Ventura or later
Electron and the bundled Claude agent both need macOS 13.
Apple Silicon or Intel
Two downloads, one per architecture. The download page picks the right one.
An AgentDx plan
Yearly with a 7-day free trial, or monthly. Claude is included: no Anthropic key or bill of your own. See pricing
A Salesforce org you can sign in to
Production, sandbox, developer or scratch. Some answers need the View Setup and Configuration permission.
Nothing else to install
Node.js, a Java runtime for the Apex analyzer and the Salesforce tooling ship inside the app.

FAQ

Questions, answered.

Something else? Email hello@kineticbit.io.

What does AgentDx cost?

For the first 100 founding members, $99 a year with a 7-day free trial, or $9.99 a month. After the 100th founding seat, prices double to $199 a year and $19.99 a month. Founding members keep their price for as long as they stay subscribed. The pricing page shows how many founding seats are left.

Do I need an Anthropic API key?

No. Claude is included in every plan: AgentDx runs the agent through its own Anthropic account, so there is no key to create and no separate Anthropic bill. Each plan includes a monthly usage allowance, and the app shows how much of it is left.

Can I use it on more than one Mac?

Yes. Your plan belongs to your account, so sign in with the same Apple, Google or email account on any Mac you use.

My org rejected the sign-in. Why?

AgentDx signs in through the Salesforce CLI’s own connected app, so most orgs need nothing installed first. But orgs can block connected apps that haven’t been installed in them: since September 2025, using an uninstalled connected app needs the Approve Uninstalled Connected Apps user permission, and orgs with API Access Control can restrict sign-in to allowlisted apps. If the Salesforce CLI connected app was never installed in your org and you don’t have that permission, Salesforce refuses the login. An admin can install the Salesforce CLI connected app in the org (Setup, Connected Apps OAuth Usage) or grant you the permission.

Does AgentDx store my Salesforce password or tokens?

No. Sign-in happens in your browser, and the connection is saved in the Salesforce CLI’s auth store, the same one sf uses, so sf can use it too. AgentDx keeps no Salesforce credentials of its own.

Will it change production without asking?

No. In production every change asks first, metadata deploys run as a validation before they apply, and anything riskier than a small change needs you to type the org’s alias. Hard deletes are switched off in every org.

Can I undo a change?

Most of them. Every change is journaled before it runs. Metadata deploys and record updates can be reverted from the Changes panel, and the revert tells you what it can’t restore, like LastModifiedDate. Anonymous Apex can’t be undone, and AgentDx says so before you run it.

What does AgentDx send to Anthropic, and what reaches you?

Your prompts, your attachments and the org context the agent reads to answer them go to Anthropic’s API through AgentDx’s servers, which pass them on without storing or logging them. We keep your account email, your plan and a count of what each request cost, never its content. The app sends no telemetry. The privacy policy has the detail.

Do I need the Salesforce CLI, Node.js or Java installed?

No. Node.js, a Java runtime for the Apex analyzer and the Salesforce tooling all ship inside the app. It runs on a Mac with nothing else installed.

Which Macs does it run on?

macOS 13 Ventura or later, on Apple Silicon or Intel. There is one download for each; the download page picks the right one.

Which model does it use?

Claude Sonnet 5.5, through Anthropic’s Agent SDK. AgentDx decides how hard it thinks: lightly for questions about your org, and more deeply, up to its maximum, for changes, by how complex they are. Its Salesforce know-how comes from Salesforce’s own official Agent Skills and the Salesforce MCP server, both bundled with the app.

Is AgentDx made by Salesforce?

No. AgentDx is made by KineticBit Inc.. It is independent and not affiliated with or endorsed by Salesforce.

Read the org first.

AgentDx for Mac. Start a 7-day free trial, connect an org, and ask it what already runs when an Account is created.

Download for Mac

7-day free trial · macOS 13+ · Claude included