Enhanced MuleSoft Experience Release Notes
The enhanced MuleSoft experience is a unified workspace for managing, governing, and monitoring AI-connected integration assets, including agents, APIs, Model Context Protocol (MCP) servers, model proxies, and gateways. Teams use it to register services, apply governance strategies, monitor runtime health, and optimize costs from one portfolio view instead of working across disconnected tools.
August 31, 2026
What’s New
Features
-
You can now connect the enhanced experience to AWS Secrets Manager, Azure Key Vault, or HashiCorp Vault so API keys and other credentials stay in your secrets manager. MuleSoft stores only metadata, such as secret names and paths, not the secret values. It reads the secret from your vault when a model proxy or other service needs it.
For more information, see Using Credentials Stored in External Vaults.
-
You can now contain a rogue AI agent before it leaks data, takes unauthorized actions, or runs up costs. Stop that agent’s requests from reaching your models, then restore access if the containment was a false positive.
For more information, see Detect and Contain Rogue Agents.
-
Cost Management now includes budget management. Set spending budgets for your model wallets, track spend against each budget, and manage budgets across providers and models from the Budgets tab.
For more information, see Budgets Tab.
-
The Cost Management Optimizations page now includes an Agents tab, so you can review token usage and optimization opportunities for your agents alongside model proxies and MCP servers.
For more information, see Filter and Search.
-
You can now create, edit, delete, and list model wallets, which allocate token budgets that are granted only when a request’s claims match the wallet’s required claims. Manage model wallets from the UI or through the MuleSoft Agent.
For more information, see Capping Spend for Callers of Model Proxies.
-
You can now edit instances for model proxies, APIs, agents, and MCP servers from the service detail page or the instance detail page, without switching to Anypoint Platform.
-
Model Proxy now supports semantic caching, TLS security for provider connections, external vault–based provider authentication, and the Model Proxy Request Compression policy.
For more details about updates to model proxy, see Model Proxy Release Notes.
-
MCP Bridge now exposes tool output schemas as part of the MCP specification, so you can connect servers built with MCP Bridge to Agentforce.
-
These SaaS connectors are now available in the Trusted MCP catalog: Wix, WordPress.com, Hootsuite, Descript, Intercom, Front, and LiveChat.
-
You can now create an A2A bridge to make a non-A2A agent A2A-compliant so that Agent Fabric can discover, govern, and orchestrate it alongside native A2A agents.
For more information, see Make an Agent A2A-Compliant
-
You can now use OAuth 2.0 Authorization Code for Microsoft Copilot Studio scanners to create, authorize, and test the provider connection before you continue scanner setup.
For more information, see Microsoft Copilot Studio OAuth Authorization.
-
You can now apply universal policies to your API instances and manage the resulting native policies. A universal policy is defined once and applied as the correct native policy on each supported gateway.
For more information, see:
-
API scanners now write policies from these provider platforms: Google Apigee, Azure API Management, and Kong Gateway. For these providers, policy results are visible from each discovered API in Portfolio > APIs > Policies.
For more information, see:
-
You can now track remediation and scan status in the Akamai Security Findings table on the Conformance tab.
For more information, see Track Remediation and Scan Status.
Enhancements
-
Cost Management optimization for MCP servers now includes policy recommendation cards with an Apply action, a sortable potential-savings column, savings framed in dollars per month, applied policies grouped by category, and a benchmark of the top MCP servers across the top models.
-
The Optimizations and Budgets dashboards now include a toggle to switch between dollar and token views.
-
MCP Bridge overview pages now group tools by the source API they were generated from, with a link to each API’s Exchange page.
-
MCP Bridge tool editing now includes a resource filter and instance-type badges, and you can add a TLS context and customize HTTP request mappings on a deployed MCP server.
-
You can now configure inbound and outbound TLS contexts when you create or modify an MCP Bridge, and Model Proxy now supports TLS context configuration for upstream connections.
-
You can now edit a model proxy’s deployment configuration inline, including its base path, gateway target, and consumer endpoint, with a warning when a change requires redeployment.
-
The Portfolio Filters menu now includes an Organizations group, so you can narrow the catalog to specific business groups and hide public MuleSoft catalog assets.
-
MuleSoft for Teams is now available as a limited availability feature. Install the MuleSoft for Teams app to interact with MuleSoft directly from your Microsoft Teams tenant, receive platform alerts in channels, and use MuleSoft Agent to list APIs, view MCP servers, check governance, and perform other management tasks. To request access, contact your account executive.
For more information, see Integrate the Enhanced Experience with Microsoft Teams.
-
The MuleSoft app for Microsoft Teams is now available in additional regions.
-
The MuleSoft Agent in Slack and Microsoft Teams now uses a refreshed set of cards for listing and viewing services, instances, and policies, and for applying a policy.
-
You can now filter your alerts and bulk-assign a Microsoft Teams channel as the delivery destination, with a confirmation step that lists the affected alerts.
-
When you ask the MuleSoft Agent to do something it doesn’t have a tool for, it now explains what it can do and offers to report the limitation.
-
MuleSoft Agent semantic search is recalibrated to return more accurate and relevant results.
-
Portfolio, service detail, instance detail, and policy pages load faster.
Changes
-
In a model proxy route, the Model field is renamed to Request model override, and Not applicable is renamed to Use model from request, to clarify that the field overrides the model specified in the incoming request.
-
The MuleSoft Agent panel is now hidden by default unless the MuleSoft Agent feature is enabled for your organization, and it’s hidden in trial accounts. Previously, the panel could appear for users who couldn’t access the feature.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
The MuleSoft Agent now returns results when you search for assets by type, instead of returning none. |
W-23149216 |
The MuleSoft Agent no longer returns a "No generations found in stream" error in the agent panel, Slack, and Teams. |
W-23927589 |
Switching to a child business group now returns correct results for the MuleSoft Agent in Microsoft Teams. |
W-23927098 |
Your business group selection is now preserved when you refresh the page or open the enhanced experience in a new tab. |
W-23444044 |
Installing and uninstalling the MuleSoft Slack app now works correctly. |
W-23632725 |
A clearer error message now appears when a user who isn’t an organization admin tries to connect Slack to Anypoint Platform. |
W-23360453 |
MuleSoft Agent notifications now deliver to Microsoft Teams instead of failing with an SSL error. |
W-23649227 |
Reinstalling the MuleSoft app in Microsoft Teams now recovers automatically from an installation conflict, matching Slack behavior. |
W-23651771 |
You can now connect Microsoft Teams to a second organization that uses the same Microsoft Entra tenant. |
W-23972001 |
Notifications now display the tenant ID instead of the MuleSoft organization ID. |
W-23902550 |
Toast messages are no longer truncated in the notification list. |
W-23902562 |
Testing the connection to an unreachable or invalid MCP server URL now returns a clear validation message instead of a server error. |
W-23480369 |
MCP server detail pages now show connected APIs, because connection metadata is preserved on MCP server upstreams. |
W-23748233 |
Creating a model proxy from a child business group no longer redirects you to the parent business group. |
W-23930690 |
The topics and model fields are now populated when you edit an existing model proxy that uses semantic caching. |
W-23792167 |
The Omni Gateway dropdown in the model proxy wizard now lists all gateway targets instead of only the first page. |
W-23845232 |
Permissions are now consistent between the model proxy gateway and route-configuration APIs. |
W-23845221 |
The Fallback model dropdown in the model proxy route editor no longer renders empty when a model wallet is enabled. |
W-23996495 |
The provider badge for Amazon Bedrock AgentCore now displays correctly. |
W-23995654 |
The Smart Response Trimming payload optimization policy now saves a complete model proxy URL. |
W-23561570, W-23956373 |
Payload optimization opportunities now appear for instances whose average token usage doesn’t cross the display threshold. |
W-23653988 |
Testing credentials for an OpenAI model proxy in the payload optimization policy now works. |
W-23688845 |
The Discovered tile on the home page no longer over-counts forked MuleSoft public templates. |
W-23630949 |
The agents catalog count no longer includes agent-network rows, so the count matches the assets shown. |
W-23631818 |
August 24, 2026
Fixed Issues
The release addresses this enhanced MuleSoft experience issue:
| Issue Resolution | ID |
|---|---|
The Expose as MCP Server action now appears for APIs that have a deployable instance, even without a configured consumer endpoint. |
W-23922779 |
August 6, 2026
What’s New
Features
-
Playgrounds are now available for APIs and MCP servers. Use the Playground tab on a service detail page to explore endpoints and tools, configure and send requests, and inspect responses without leaving the enhanced experience.
For more information, see Testing Services with Playgrounds, Testing APIs in the API Playground, and Exploring MCP Server Tools in the MCP Playground.
-
The Akamai scanner is now available to map external security findings to the right services in Portfolio. Add the scanner to scan APIs, surface security findings, and apply governance strategies from the portfolio. The scanner doesn’t import or register third-party services. It correlates risk scores, findings, and incidents in one governance workflow.
For more information, see Correlating Risk Using Akamai API Security and Working with Governance Strategies.
-
Additional Trusted MCP server SaaS integrations are now available, and ready-to-use MCP client configuration snippets help you connect popular MCP clients faster.
-
Model Proxy now supports the Anthropic API format and native Anthropic models.
-
API scanners now read policies from these provider platforms: Amazon API Gateway, Google Apigee, Azure API Management, and Kong Gateway. For these providers, policy results are visible from each discovered API in Portfolio > APIs > Policies.
After connecting to a third-party API gateway provider, you can govern discovered APIs through the same governance workflow used for Anypoint Platform APIs. This enables unified governance across multiple gateway platforms.
For more information, see:
Enhancements
-
The Scanner details page now includes an Activity Log with a real-time timeline of scan progress events.
For more information, see Viewing Scanner History and Settings.
-
MCP Bridge now lets you edit tool input schemas, customize tool HTTP request mappings and headers, and expose tool output schemas as part of the MCP specification.
-
Cost Management now lets you edit optimization policies and is available from the Ask MuleSoft sidebar.
-
The LLM proxy credential test now distinguishes between credentials that can’t be verified and credentials that are invalid.
-
LLM Proxy is now renamed to Model Proxy.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
The MCP server creation success screen now displays a persistent runtime authentication warning banner instead of stacked notifications. |
W-22323999 |
Agent detail policy views no longer show a misleading "No instances covered" message for environment types that have no instances. |
W-22416846 |
Portfolio catalog and entity pages now load faster and filter more reliably. |
W-22580671 |
The Anypoint MCP Bridge now returns tool input schemas in valid JSON Schema format in |
W-22602876 |
Platform MCP server tools now match filter values to stored display labels, returning correct results. |
W-22850282 |
The Apply Policy agent action now displays available policies immediately instead of showing none during an initial delay. |
W-23011916 |
The agent no longer directs you to a nonexistent automated policy creation page. |
W-23012045 |
The agent no longer gets stuck on the Environment field when prefilling a governance strategy form. |
W-23091457 |
The Ping operation now works correctly in MCP Bridge. |
W-23128311 |
Cost Management now displays metrics for Twilio MCP server instances. |
W-23141551 |
API catalog filter options now include values from all assets instead of only the first page of results. |
W-23330370 |
Long LLM responses are no longer dropped mid-stream. |
W-23366770 |
The policy version selector on the policy configuration page now lists versions in order. |
W-23385993 |
Cost Management now surfaces Payload Optimization opportunity cards even when the Payload Optimization policy is not yet applied. |
W-23402200 |
Correlation policies now apply correctly to instances. |
W-23470169 |
Cost Management policy names no longer display underscores. |
W-23475812 |
The MuleSoft Agent prompt now works for users who are granted agent permission only in a child business group. |
W-23478614 |
The MCP server creation wizard now shows an accurate message when the blocker is a missing Exchange permission. |
W-23495332 |
Cost Management Payload Optimization Smart Response Trimming now works regardless of sub-policy order. |
W-23515804 |
Notification labels now match Anypoint Platform. |
W-23522019 |
The agent no longer rejects legitimate platform questions as off-topic. |
W-23528364 |
The agent no longer loops when discovering assets that include nested environment fields. |
W-23564370 |
Cost Management now uses the latest policy version for Trusted MCP servers. |
W-23574980 |
Cost Management now surfaces Payload Optimization opportunities in instance modals even when projected savings are below the display threshold. |
W-23632337 |
July 15, 2026
What’s New
Features
-
The new Payload Optimization policy page lets you configure token-reduction strategies, including payload sanitization and TOON encoding, as toggleable sub-policies.
-
Cost Management now surfaces Payload Optimization sub-policies as opportunity cards, so you can act on top token-savings recommendations directly from the Cost Management page.
-
The new MCP Tools Progressive Disclosure policy enables you to reduce context window token cost by exposing tools on demand through search. Apply the policy Cost Management.
-
Instance detail pages now display the consumer endpoint URL, including the base path, so you can copy a callable URL without switching to Anypoint Platform.
Enhancements
-
Tool Mapping policy configuration now includes a version selector, so you can update the policy to a new version.
-
Applied policies now display a "New version available" indicator when a newer version is available.
-
The model proxy overview now shows the configured fallback route and semantic prompt guard as summary cards, so you can review them without entering edit mode.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
The MCP server Create & Deploy button now displays progress notifications instead of internal provisioning steps. |
W-22477443 |
The monitoring summary page now loads successfully and no longer times out because of backend connectivity failures. |
W-22561882 |
MCP server creation no longer pre-selects a gateway without a public URL, preventing validation errors during review. |
W-22569213 |
MCP server detail pages now open correctly even before the asset is fully indexed, instead of redirecting to the MCP server list. |
W-22668860 |
Name and path validation is improved during MCP server creation. |
W-22730633 |
Policy views for externally managed gateway instances now return an empty policy set instead of a 404 error. |
W-22850289 |
The Run discovery scan quick action in the agent panel now performs the same scan as the Run discovery scan button on scanner pages. |
W-22855741 |
MCP tool input schemas now display complete information. |
W-22903101 |
Long text entered in the agent panel input box now stays within its container. |
W-23012031 |
The Support Credentials toggle in Cross-Origin Resource Sharing policy configuration is now enabled, matching earlier behavior. |
W-23050595 |
Health Check policy configuration now routes you to the alert builder to create an alert after the policy is applied. |
W-23050597 |
Injection Protection policy configuration now provides a multi-select dropdown for built-in protections instead of a free-form text field. |
W-23050599 |
Policy configuration forms with nested fields no longer add an empty row that caused save errors. |
W-23050623 |
Navigation from the agent panel to a specific agent’s detail page now works correctly. |
W-23091579 |
Availability drill-downs now display the availability metric instead of the reliability metric. |
W-23111937 |
Time-series chart drill-downs now display the time bucket you select instead of an adjacent one. |
W-23111946 |
Agent portfolio search now returns agents that also appear in the main UI search. |
W-23113003 |
Tool-mapping descriptions are no longer duplicated when a tool’s summary and description match. |
W-23130198 |
Agent responses now display consistently in chat history. |
W-23131703 |
Cost Management token-savings projections in the instance detail modal now update to match the selected timeframe instead of always using the 30-day period. |
W-23140133 |
The trusted MCP wizard footer now adjusts correctly when the sidebar is collapsed. |
W-23176162 |
Cost Management tool optimization now displays an error message when your organization lacks Agentforce access instead of failing silently. |
W-23178835 |
Acronis test-connection operations now succeed by using the correct tenant filter. |
W-23181533 |
Editing a policy no longer disables or unchecks unrelated fields whose names end in |
W-23186039 |
Model Based Routing policy configuration now displays the selected version after you change and save it. |
W-23200921 |
Cost Management tooltips now render with a solid background for better readability. |
W-23312200 |
Cost Management now displays estimated saved tokens correctly when optimization strategies are active. |
W-23319697 |
July 2, 2026
What’s New
-
Model proxies now supports multiple routes to the same LLM provider and can filter requests to different routes with headers.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
Manual API registration now processes uploaded .zip files without errors. |
W-22441824 |
Manual API registration now processes uploaded JSON and YAML files without server errors. |
W-22441846 |
Portfolio page headers and toolbars now remain fixed at the top when scrolling. |
W-22454943 |
Newly created API instances now appear immediately in the instance list. |
W-22461347 |
Basic Authentication policy password fields now mask input correctly. |
W-22476294 |
Slack Agent now processes Omni Gateway requests without errors. |
W-22518488 |
Pre-selected paths in MCP Server creation no longer display validation errors during review. |
W-22599092 |
Slack Agent responses now focus on available actions instead of describing unavailable creation workflows. |
W-22642526 |
MCP transcoding operations now correctly handle body literals without affecting upstream policies. |
W-22642906 |
Gateway detail page links now redirect to Anypoint Runtime Manager with the correct environment scope. |
W-22708401 |
Outbound OAuth 2.0 Credential Injection policies now allow setting Client ID and Secret. |
W-22815084 |
Policy listing views now clearly distinguish between inbound and outbound policies. |
W-22923681 |
Model proxy asset creation now handles Exchange API responses without HTTP 502 errors. |
W-22927281 |
MCP Server tool lists now return all available tools without truncating results at 512 items. |
W-22928504 |
Portfolio page provider filters now display all configured providers instead of a static list. |
W-22928563 |
Portfolio page filters now handle large result sets without returning empty results. |
W-22928667 |
OAuth 2.0 test connection operations now work correctly when creating an MCP server. |
W-22965458 |
API specification overviews for gRPC APIs now populate correctly in the India region. |
W-22966440 |
A2A PII Detector policy configuration now supports multi-select for PII types. |
W-23050572 |
MCP PII Detector policy configuration now supports multi-select for PII types. |
W-23050575 |
LLM PII Detection policy configuration now supports multi-select for PII types. |
W-23050578 |
Model Based Routing policy configuration now includes Match Headers and isFallback Entry fields. |
W-23050585 |
Client ID Enforcement policy configuration now displays Client ID Expression and Client Secret Expression fields when Custom Expression is selected. |
W-23050592 |
JWT Validation policy configuration now includes JWT Signing Key Length, conditional JWT Key fields, and Client ID Expression. |
W-23050601 |
Credential Injection API Key policy configuration now displays auth-type-dependent fields for custom headers, API keys, and client credentials. |
W-23050605 |
Credential Injection OAuth 2.0 policy configuration now displays grant-type-dependent fields for Client Credentials and Password grant types. |
W-23050608 |
OAuth 2.0 OBO Credential Injection policy configuration now displays all grant-type-dependent fields. |
W-23050613 |
Agent registration workflow now uses correct naming conventions. |
W-23064092 |
MCP Server creation now displays clear, actionable error messages when credential validation fails. |
W-23073090 |
Acronis credential test operations now work correctly with network allowlist configurations. |
W-23085376 |
Public Agent detail pages no longer display delete icons. |
W-23090929 |
POST tools created from MCP bridge connections now correctly include all input parameters. |
W-23128385 |
The MuleSoft Agent now displays correctly for users who have been enabled in child business groups. |
W-23182443 |
June 22, 2026
What’s New
Enhancements
-
Notifications are now available, allowing you to configure and receive alerts for service health and governance events.
For more information, see Configuring Notifications for Alerts.
-
MuleSoft Agent is now available. Manage your MuleSoft environment with MuleSoft Agent, an agentic experience available in the control plane. Use MuleSoft Agent to create scanners, apply policies, deploy instances, and perform other management tasks. To request access, contact your account executive.
For more information, see Using the MuleSoft Agent.
-
MuleSoft for Slack is now available. Install the MuleSoft Slack app to interact with the MuleSoft Platform directly from your Slack workspace, send platform notifications to Slack channels or direct messages, take platform actions, and ask questions about your MuleSoft organization.
For more information, see Integrate the Enhanced Experience with Slack.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
Inactive instances now display correctly across both pipeline and summary views. |
W-22456216 |
Instance detail pages now display environment names correctly instead of showing only environment types. |
W-22455820 |
Instance detail page headers now display correctly with proper styling and element positioning. |
W-22455880 |
Governance strategy deletion now completes successfully without returning errors. |
W-22476104 |
The MCP Server creation flow no longer displays premature "select at least one tool" warnings during loading or when no operations exist. |
W-22490327 |
MCP Server creation now displays helpful error messages when incorrect credentials are provided. |
W-22570827, W-22570738 |
Connected asset graph links on agent pages now navigate directly to entity detail pages instead of list pages. |
W-22571289 |
Cost Management recommendation cards now display in strict descending order by projected savings. |
W-22586604 |
Text overflow issues on MCP Server creation pages are resolved. |
W-22598973, W-22622184 |
Auto-generated MCP tool names now follow snake_case convention and use operation names instead of API asset prefixes. |
W-22601645 |
The Continue button now enables correctly after editing optimized tool names and descriptions in Tool Mapping policy imports. |
W-22603960 |
The MCP Tool Response Sanitization policy now displays values that match Anypoint settings. |
W-22692504 |
Chat input fields in Cost Management now handle long prompts without overflowing the container. |
W-22692107 |
Consumer endpoints now display correctly and no longer intermittently show implementation URLs. |
W-22696329 |
Gateway URLs in MCP Server creation now update correctly instead of remaining stuck at default demo URLs. |
W-22696327 |
Scan summaries now correctly display skipped services in provider scan results. |
W-22701129 |
Cost Management optimization estimations now correctly check input schemas. |
W-22709243 |
Credential input fields in the MCP Server wizard now display correct validation messages. |
W-22730686 |
Azure API Management providers now display correctly in the provider listing. |
W-22730614 |
You can now delete MCP assets from the catalog when they have zero instances. |
W-22732824 |
Model proxy Bedrock routes now correctly clear empty session tokens when switching from STS to long-term IAM credentials. |
W-22769399 |
Scanner deletion operations now complete cleanly without displaying stale scanner data. |
W-22779340 |
Cost Management optimization operations now display loading indicators correctly for individual rows instead of all rows. |
W-22781792 |
Consumer endpoint URLs for trusted MCP servers now include the correct |
W-22782195 |
Read-only operation selection in MCP bridge SaaS actions now correctly deselects PUT operations. |
W-22784169 |
The JWT Validation policy configuration form now includes the JWT Key input parameter. |
W-22795041 |
Service catalog counts now display consistently between the UI and MCP server counts. |
W-22795809 |
Provider pages now reload correctly when switching Business Groups. |
W-22795416 |
Provider filters on the Agents portfolio page now return correct results for all providers including Amazon Bedrock AgentCore and Azure AI Foundry. |
W-22910173 |
HTTP Basic Authentication configuration for Client ID Enforcement policies now works correctly. |
W-22923781 |
You can now edit policy configurations for all policy types. |
W-22923643 |
Rate Limiting policy search now works as expected. |
W-22923811 |
OAuth2 OBO Credential Injection now works correctly for outbound policies. |
W-22924163 |
Cross Origin policy forms now properly disable the Support Credentials option when applicable. |
W-22924051 |
Tool response size limits now prevent oversized responses from exceeding client token limits. |
W-22947243 |
Scanner connection tests for Vertex AI now return descriptive error messages on failures. |
W-22947245 |
API instance upstream URLs now update correctly when editing trusted MCP server configurations. |
W-22971120 |
Monitoring and performance modules now load correctly without modularity errors. |
W-22999188 |
The All Versions filter label now displays correctly on monitoring pages instead of showing MISSING_KEY errors. |
W-23003583 |
MCP bridge instances now display availability status correctly. |
W-23003437 |
Asset search now validates query parameters correctly and no longer accepts empty queries. |
W-22962129 |
Agent and MCP detail pages now display enriched metadata correctly. |
W-22992220 |
June 18, 2026
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
The Performance page now displays monitoring data correctly for organizations in the India cloud. |
W-22997947 |
Monitoring data now resolves to the correct environment when organizations contain multiple environments of the same type. |
W-23007726 |
The Instances column header now displays Env Type instead of Environment. |
W-22418037 |
The Edit action now appears in the action menu on MCP Server detail pages in EU, Japan, and Canada clouds. |
W-22693560 |
CloudFront URL access for file downloads now works correctly in Japan and Canada clouds. |
W-22686958 |
June 11, 2026
What’s New
This release includes security updates and improvements to the enhanced MuleSoft experience.
Fixed Issues
The release addresses these enhanced MuleSoft experience issues:
| Issue Resolution | ID |
|---|---|
You can now deploy, edit, and delete MCP servers that share the same name. |
W-22603005 |
Auto-generated MCP tool names no longer contain spaces, ensuring compliance with the MCP specification. |
W-22816476 |
You can now open service detail pages from the Services catalog while viewing the root Business Group context. |
W-22696491 |
Governance Insights reports now display policy rulesets and instances correctly. |
W-22710201 |
The Environment filter on the Gateways catalog page now correctly filters the displayed gateways by the selected environment. |
W-22778035 |
The Provider filter on portfolio pages (Agents, APIs, MCPs) now correctly returns services associated with the selected provider. |
W-22815822 |
The Vitest library is upgraded to 4.1.8 to address a reported security vulnerability. |
W-22777847 |
Automated policies configured at both organization and environment levels now display correctly without duplicated policy activity. |
W-22735582 |
Policy direction (inbound or outbound) now displays correctly under application methods instead of showing generic instance policy labels. |
W-22801826 |
A cross-tenant security vulnerability that allowed unauthorized access to Kong gateway plugin configurations across organizations is resolved. |
W-22803601 |
Public MCP Server and Agent assets no longer allow unmanaged instance creation. |
W-22733185 |
MCP server provisioning status now updates more reliably while reducing unnecessary refresh cycles. |
W-22725529 |
Third-party libraries are updated to resolve reported security vulnerabilities. |
W-22618670 |
May 28, 2026
What’s New
-
You can now manage agents, APIs, MCP servers, model proxies, and gateways from one portfolio experience, so teams can govern and operate AI integrations without switching between separate tools.
For more information, see Enhanced MuleSoft Experience and Enhanced MuleSoft Experience Overview.
-
You can now add services through provider-based discovery or manual registration, so teams can onboard both cloud-managed and custom services faster.
For more information, see Adding Services to Your Portfolio, Create a Scanner for Provider Services, and Register Services Manually.
-
You can now create MCP servers by selecting source systems and publishing tools and resources for MCP clients, so you can more easily expose existing APIs and SaaS systems through MCP workflows.
For more information, see Create MCP Servers.
-
You can now add semantic services with Basic and Advanced scale models, so LLM-driven requests route with improved context awareness as traffic grows.
For more information, see Configuring Semantic Routing Services.
-
You can now apply governance strategies across supported service types, so teams can enforce conformance and cost controls more consistently.
For more information, see Create Governance Strategies and Viewing Service Details in the Portfolio.
-
Scanner operations now support lifecycle workflows for running, pausing, editing, and deleting scanners, so provider discovery stays current with less manual overhead.
For more information, see Adding Scanners from Providers and Running and Managing Scanners.
-
Service detail pages now centralize instance creation and management workflows for supported catalogs, so teams can align deployment operations with governance and monitoring workflows.
For more information, see Creating and Managing Instances of Services and Viewing Service Details in the Portfolio.
-
Monitoring guidance now connects service health, detailed metrics, and token and response analysis, so responders can triage regressions faster.
For more information, see Monitoring Services in Your Portfolio, View Detailed Metrics for Your Services, and Managing Costs and Token Usage.
-
You can now access the experience from Anypoint Platform, direct URLs, and supported coding assistants, so teams can work from existing workflow surfaces.
For more information, see Get Started with the Enhanced Experience Connect the Enhanced Experience to Claude Desktop.
-
Service detail pages now clarify tab availability by service type, so operators can more easily find instance, governance, and conformance data by catalog.
For more information, see Viewing Service Details in the Portfolio.