Policies for Agents (P4A)
Now supporting PDK 1.8+

Deploy policies for Agentic AI at scale

The community marketplace for MuleSoft Omni Gateway policies and API Governance rulesets. Enforce rules on agent and API traffic at runtime, and check API specs before they ship.

Policies for Agents (P4A)
8
Global Users
4
Connected Organizations
54
Deployments
7
Available Policies
2
Available Rulesets
4
Submitted Ideas

Features

Everything you need to discover, deploy, and manage custom policies for MuleSoft Omni Gateway.

Enterprise Security

Deploy policies with confidence using Connected App authentication and encrypted credentials. Per-tenant isolation via Postgres Row-Level Security.

Multi-Region Support

Connect to US, EU, or custom Anypoint instances. Manage all your environments in one place.

One-Click Deploy

Select a policy, choose your environment, and deploy. We handle the publish and release process — watch the pipeline stream its logs in real time.

Workspaces

Collaborate as a team: shared Anypoint connections, deployments, and policy visibility scoped to your workspace.

Community Ideas

Propose and upvote policy ideas; the catalog grows from what the community actually needs.

Bring Your Own Policy

Submit a GitHub-hosted PDK policy; we validate the repo and build it through our pipeline.

MCP Server

Connect any MCP-compatible agent or LLM. Browse the policy catalog and deploy to your Anypoint org over Model Context Protocol, scoped to a personal access token.

REST API

Drive the portal from your own tools. Manage policies, deployments, and connections over a token-scoped REST API — try every endpoint in the interactive reference.

Rich Policy Documentation

Document every policy in tabbed Markdown — standard Overview, Configuration, Examples, and FAQ tabs plus your own custom tabs. Reorder freely, track completeness, and preview exactly what users will see.

Governance Rulesets

Share and reuse API Governance rulesets (AMF Validation Profiles) that check API specs at design time. Browse community rulesets and publish them to Exchange.

Build a policy with P4A

Drive the whole contributor workflow with Claude Code — install our skills, then write, validate, and submit your PDK policy.

1

Install the Claude Code skills

Clone or symlink our PDK skills into ~/.claude/skills so Claude Code can coach you through the whole workflow.

PDK Skills repo
2

Write & test your policy

Follow the PDK reference for idiomatic Rust policy code and local testing.

PDK Docs
3

Validate the build

Use the MuleSoft Developer Hub to validate the toolchain and build artifacts.

Developer Hub
4

Submit to P4A

Submit your public GitHub repo; we validate it and build it through our pipeline.

Submitting a policy

Policies

Browse our curated collection of policies for MuleSoft AI Gateway. Each policy is validated and ready for deployment.

Sign up to see all policies

Browse every policy. Built for any API, agent, MCP, or LLM.

Rulesets

API Governance rulesets check your API and agent specs at design time, before anything reaches the gateway. Reuse what the community has written, or share your own.

MCP Server Usability

MCP

Usability checks for MCP server manifests: tools, resources and prompts are named and described well enough for agents to choose and call them correctly.

1violation5warnings1info
AgentMCP

MCP Server Safety

MCP

Safety checks for MCP server manifests: declared authentication, declared tool side effects and reach, and closed tool inputs.

2violations2warnings
AgentMCP

Sign up to see all rulesets

See every rule, its severity, and which APIs it applies to.

Ideas

Policies the community wants next. Vote on the ideas you need or propose your own.

Sign up to vote or submit ideas

Help decide what the community builds next.

Leaderboards

What the community values most — the most-liked policies and rulesets and the most-voted ideas.

Top Policies
Ranked by likes
  1. AI Semantic Cache (OpenAI and Azure AI Search)Other
    0 likes
  2. UTCP Bridge PolicyOther
    0 likes
  3. Slack Request Verification PolicySecurity
    0 likes
  4. MCP Hub PolicyOther
    0 likes
  5. MCP Apps Policy (GitLab)Other
    0 likes
Top Rulesets
Ranked by likes
  1. MCP Server SafetyMCP
    0 likes
  2. MCP Server UsabilityMCP
    0 likes
Top Contributors
Ranked by contribution points

Sign up to see top contributors

Top Ideas
Ranked by votes
  1. MCP Tool Token Rate Limit (token-spend)
    0 votes
  2. Ruleset idea
    0 votes

Testimonials

What the community says about building and shipping policies with P4A.

“Love this!”
TB

Tommaso Bolis

Sign up to share

Sign up to unlock the full P4A

Browse every policy, deploy and install on your Anypoint org, vote on ideas, and propose new ones — built for any API, agent, MCP, or LLM. Free account.