Allowlisting Trusted Domains in Anypoint Platform
Every HTTP request you make to external resources goes through the API Console proxy. For security reasons, you must register the target domain as a trusted domain in Anypoint Platform to enable secure calls to third‑party services in Anypoint Platform.
Add a New Trusted Domain
The new domain must not duplicate an existing trusted domain and can’t be a MuleSoft or Anypoint Platform domain or subdomain.
-
Sign in to Anypoint Platform using an account that has the Organization Administrator permission.
-
Select Access Management from the
menu.
-
Click Trusted domains.
-
Click Add domain.
-
In the dialog box, enter the domain name and click Add domain.
You are redirected to the Trusted Domains page, where you can edit or delete domains. If you register a domain on a parent organization, it’s also allowlisted on all business groups.
Automatic Registration of Domains
Some domains are added automatically:
-
Publishing an API specification to Exchange adds the implementation base URI.
-
Sending a request through the proxy adds the implementation base URI.
-
Unauthenticated requests from public Exchange portals or Mocking Service shareable links are added.
| Public Anypoint Exchange assets and portals created before 2024 might not auto-register. Manually register those domains. |



