Enhanced MuleSoft Experience Release Notes

Manual API registration now processes uploaded .zip files without errors.

W-22441824

Manual API registration now processes uploaded JSON and YAML files without server errors.

W-22441846

Portfolio page headers and toolbars now remain fixed at the top when scrolling.

W-22454943

Newly created API instances now appear immediately in the instance list.

W-22461347

Basic Authentication policy password fields now mask input correctly.

W-22476294

Slack Agent now processes Omni Gateway requests without errors.

W-22518488

Pre-selected paths in MCP Server creation no longer display validation errors during review.

W-22599092

Slack Agent responses now focus on available actions instead of describing unavailable creation workflows.

W-22642526

MCP transcoding operations now correctly handle body literals without affecting upstream policies.

W-22642906

Gateway detail page links now redirect to Anypoint Runtime Manager with the correct environment scope.

W-22708401

Outbound OAuth 2.0 Credential Injection policies now allow setting Client ID and Secret.

W-22815084

Policy listing views now clearly distinguish between inbound and outbound policies.

W-22923681

LLM proxy asset creation now handles Exchange API responses without HTTP 502 errors.

W-22927281

MCP Server tool lists now return all available tools without truncating results at 512 items.

W-22928504

Portfolio page provider filters now display all configured providers instead of a static list.

W-22928563

Portfolio page filters now handle large result sets without returning empty results.

W-22928667

OAuth 2.0 test connection operations now work correctly when creating an MCP server.

W-22965458

API specification overviews for gRPC APIs now populate correctly in the India region.

W-22966440

A2A PII Detector policy configuration now supports multi-select for PII types.

W-23050572

MCP PII Detector policy configuration now supports multi-select for PII types.

W-23050575

LLM PII Detection policy configuration now supports multi-select for PII types.

W-23050578

Model Based Routing policy configuration now includes Match Headers and isFallback Entry fields.

W-23050585

Client ID Enforcement policy configuration now displays Client ID Expression and Client Secret Expression fields when Custom Expression is selected.

W-23050592

JWT Validation policy configuration now includes JWT Signing Key Length, conditional JWT Key fields, and Client ID Expression.

W-23050601

Credential Injection API Key policy configuration now displays auth-type-dependent fields for custom headers, API keys, and client credentials.

W-23050605

Credential Injection OAuth 2.0 policy configuration now displays grant-type-dependent fields for Client Credentials and Password grant types.

W-23050608

OAuth 2.0 OBO Credential Injection policy configuration now displays all grant-type-dependent fields.

W-23050613

Agent registration workflow now uses correct naming conventions.

W-23064092

MCP Server creation now displays clear, actionable error messages when credential validation fails.

W-23073090

Acronis credential test operations now work correctly with network allowlist configurations.

W-23085376

Public Agent detail pages no longer display delete icons.

W-23090929

POST tools created from MCP bridge connections now correctly include all input parameters.

W-23128385

The MuleSoft Agent now displays correctly for users who have been enabled in child business groups.

W-23182443

Inactive instances now display correctly across both pipeline and summary views.

W-22456216

Instance detail pages now display environment names correctly instead of showing only environment types.

W-22455820

Instance detail page headers now display correctly with proper styling and element positioning.

W-22455880

Governance strategy deletion now completes successfully without returning errors.

W-22476104

The MCP Server creation flow no longer displays premature "select at least one tool" warnings during loading or when no operations exist.

W-22490327

MCP Server creation now displays helpful error messages when incorrect credentials are provided.

W-22570827, W-22570738

Connected asset graph links on agent pages now navigate directly to entity detail pages instead of list pages.

W-22571289

Cost Management recommendation cards now display in strict descending order by projected savings.

W-22586604

Text overflow issues on MCP Server creation pages are resolved.

W-22598973, W-22622184

Auto-generated MCP tool names now follow snake_case convention and use operation names instead of API asset prefixes.

W-22601645

The Continue button now enables correctly after editing optimized tool names and descriptions in Tool Mapping policy imports.

W-22603960

The MCP Tool Response Sanitization policy now displays values that match Anypoint settings.

W-22692504

Chat input fields in Cost Management now handle long prompts without overflowing the container.

W-22692107

Consumer endpoints now display correctly and no longer intermittently show implementation URLs.

W-22696329

Gateway URLs in MCP Server creation now update correctly instead of remaining stuck at default demo URLs.

W-22696327

Scan summaries now correctly display skipped services in provider scan results.

W-22701129

Cost Management optimization estimations now correctly check input schemas.

W-22709243

Credential input fields in the MCP Server wizard now display correct validation messages.

W-22730686

Azure API Management providers now display correctly in the provider listing.

W-22730614

You can now delete MCP assets from the catalog when they have zero instances.

W-22732824

LLM proxy Bedrock routes now correctly clear empty session tokens when switching from STS to long-term IAM credentials.

W-22769399

Scanner deletion operations now complete cleanly without displaying stale scanner data.

W-22779340

Cost Management optimization operations now display loading indicators correctly for individual rows instead of all rows.

W-22781792

Consumer endpoint URLs for trusted MCP servers now include the correct /mcp path.

W-22782195

Read-only operation selection in MCP bridge SaaS actions now correctly deselects PUT operations.

W-22784169

The JWT Validation policy configuration form now includes the JWT Key input parameter.

W-22795041

Service catalog counts now display consistently between the UI and MCP server counts.

W-22795809

Provider pages now reload correctly when switching Business Groups.

W-22795416

Provider filters on the Agents portfolio page now return correct results for all providers including Amazon Bedrock AgentCore and Azure AI Foundry.

W-22910173

HTTP Basic Authentication configuration for Client ID Enforcement policies now works correctly.

W-22923781

You can now edit policy configurations for all policy types.

W-22923643

Rate Limiting policy search now works as expected.

W-22923811

OAuth2 OBO Credential Injection now works correctly for outbound policies.

W-22924163

Cross Origin policy forms now properly disable the Support Credentials option when applicable.

W-22924051

Tool response size limits now prevent oversized responses from exceeding client token limits.

W-22947243

Scanner connection tests for Vertex AI now return descriptive error messages on failures.

W-22947245

API instance upstream URLs now update correctly when editing trusted MCP server configurations.

W-22971120

Monitoring and performance modules now load correctly without modularity errors.

W-22999188

The All Versions filter label now displays correctly on monitoring pages instead of showing MISSING_KEY errors.

W-23003583

MCP bridge instances now display availability status correctly.

W-23003437

Asset search now validates query parameters correctly and no longer accepts empty queries.

W-22962129

Agent and MCP detail pages now display enriched metadata correctly.

W-22992220

The Performance page now displays monitoring data correctly for organizations in the India cloud.

W-22997947

Monitoring data now resolves to the correct environment when organizations contain multiple environments of the same type.

W-23007726

The Instances column header now displays Env Type instead of Environment.

W-22418037

The Edit action now appears in the action menu on MCP Server detail pages in EU, Japan, and Canada clouds.

W-22693560

CloudFront URL access for file downloads now works correctly in Japan and Canada clouds.

W-22686958

You can now deploy, edit, and delete MCP servers that share the same name.

W-22603005

Auto-generated MCP tool names no longer contain spaces, ensuring compliance with the MCP specification.

W-22816476

You can now open service detail pages from the Services catalog while viewing the root Business Group context.

W-22696491

Governance Insights reports now display policy rulesets and instances correctly.

W-22710201

The Environment filter on the Gateways catalog page now correctly filters the displayed gateways by the selected environment.

W-22778035

The Provider filter on portfolio pages (Agents, APIs, MCPs) now correctly returns services associated with the selected provider.

W-22815822

The Vitest library is upgraded to 4.1.8 to address a reported security vulnerability.

W-22777847

Automated policies configured at both organization and environment levels now display correctly without duplicated policy activity.

W-22735582

Policy direction (inbound or outbound) now displays correctly under application methods instead of showing generic instance policy labels.

W-22801826

A cross-tenant security vulnerability that allowed unauthorized access to Kong gateway plugin configurations across organizations is resolved.

W-22803601

Public MCP Server and Agent assets no longer allow unmanaged instance creation.

W-22733185

MCP server provisioning status now updates more reliably while reducing unnecessary refresh cycles.

W-22725529

Third-party libraries are updated to resolve reported security vulnerabilities.

W-22618670