Contact Us 1-800-596-4880

Allowlisting Trusted Domains in Anypoint Platform

Every HTTP request you make to external resources goes through the API Console proxy. For security reasons, you must register the target domain as a trusted domain in Anypoint Platform to enable secure calls to third‑party services in Anypoint Platform.

Add a New Trusted Domain

The new domain must not duplicate an existing trusted domain and can’t be a MuleSoft or Anypoint Platform domain or subdomain.

  1. Sign in to Anypoint Platform using an account that has the Organization Administrator permission.

  2. Select Access Management from the gear icon menu.

  3. Click Trusted domains.

  4. Click Add domain.

  5. In the dialog box, enter the domain name and click Add domain.

    You are redirected to the Trusted Domains page, where you can edit or delete domains. If you register a domain on a parent organization, it’s also allowlisted on all business groups.

Automatic Registration of Domains

Some domains are added automatically:

  • Publishing an API specification to Exchange adds the implementation base URI.

  • Sending a request through the proxy adds the implementation base URI.

  • Unauthenticated requests from public Exchange portals or Mocking Service shareable links are added.

Public Anypoint Exchange assets and portals created before 2024 might not auto-register. Manually register those domains.