Pluto runs AI agents inside Salesforce, on standard Salesforce licenses, with any model provider. Pluto Core is the engine. Every other package is optional.
| Package | What it adds |
|---|---|
| Pluto Core | The agent engine: runs, tools, approvals, recovery, and data protection |
| Pluto Model Adapters | Ready-made OpenAI connections |
| Pluto Console | Admin console: set up agents, follow runs, decide approvals |
Pluto installs as unlocked packages. Try them in a sandbox first.
The current version is 2.0.
- Open the Install page of the Pluto docs.
- Install Pluto Core, then Pluto Model Adapters. Optionally install Pluto Console.
- Turn on Core's recovery and retention schedules, as the Install page describes.
- Follow Your first agent.
- A model can be wrong. Try each agent in a sandbox first, and start with tools that only read records.
- To have a person check a change before it happens, check Always Require Approval on the tool. The agent never approves its own work. See Require approval.
- Pluto sends the agent's instructions, the records its tools read, and tool results to the model provider you connect. Core first replaces email addresses, phone numbers, payment cards, US SSNs, IBANs, and classified fields with tokens. Names, street addresses, and other free text reach the model as written. See Sensitive data.
- By default a run stops at 10 model calls, 15 tool calls, or 250,000 tokens. Set prices on the Agent Model to see an estimated cost for each model call. See Limits and cost.
- By default, Core clears a run's inputs, model requests and replies, and tool results 30 days after the run ends. See Retention and erasure.
- The Pluto docs cover setup, building agents, and operations.
- Developers who add tools, model providers, context, or policies follow the extension contract.
- To report a security problem, see Security.
Pluto is free. The only official source is this repository and the packages it publishes. Pluto is not sold on AppExchange. If you paid for a copy of Pluto, or see it listed under another name, it did not come from this project.
To support Pluto's development, use GitHub Sponsors or Buy Me a Coffee.
Pluto is licensed under the GNU Affero General Public License, version 3 only (AGPL-3.0-only), with the Pluto Extension Exception. Copyright (c) 2026 Sonal.
- You may use, change, and share the code, including at work.
- If you share a changed version, you must share its full source under the AGPL.
- If you change Pluto and people use your changed version over a network, you must offer those people its source. This includes users in a Salesforce org and people who reach an agent by email or chat.
- Your own extensions can stay private. A custom tool, model provider, context provider, policy, Flow, or Apex class that uses only Pluto's global Apex, invocable actions, and shipped objects may use any license. The exception does not cover changes to Pluto's own files.
- Every source file carries a copyright and license notice. Keep it.
- The license does not cover the Pluto name or logo. See Trademarks.
- Code from other projects keeps its own license. See Third-party notices.
Each author signs the Pluto Contributor License Agreement once, before their first pull request is merged. See Contributing.