# mulesoft Anypoint CLI - Full Documentation --- product: Anypoint CLI version: 3.x --- # Anypoint CLI 3.x > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint Platform provides a scripting and command-line tool for both Anypoint Platform and Anypoint Platform Private Cloud Edition (Anypoint Platform PCE). The command-line interface (CLI) supports both the interactive shell and standard CLI modes and works with: - [Anypoint Exchange](https://docs.mulesoft.com/exchange/) - [Anypoint DataGraph](https://docs.mulesoft.com/datagraph/) - [Access management](https://docs.mulesoft.com/access-management/) - [Anypoint Runtime Manager](https://docs.mulesoft.com/runtime-manager/) - [API Governance](https://docs.mulesoft.com/api-governance/) Use Runtime Manager to manage Mule applications deployed to CloudHub (hosted by MuleSoft) and locally hosted Mule servers. - [VPCs](https://docs.mulesoft.com/cloudhub/virtual-private-cloud) - [CloudHub Load Balancers](https://docs.mulesoft.com/cloudhub/cloudhub-dedicated-load-balancer) - [API Manager 2.x (Crowd Release)](https://docs.mulesoft.com/api-manager/latest/) - [Design Center](https://docs.mulesoft.com/design-center/) ## Prerequisites - Download and install NodeJS and npm (node package manager) on your system. Minimum versions required are: - Node.js LTS version 18.0.0 and later - npm 6.14.8 See the [NodeJS download page](https://nodejs.org/en/download/). - Download and install the Git version management on your system. See the [Git download site](https://git-scm.com/downloads). > [!NOTE] Depending on the configuration of your system, you might need to run these commands using > administrator credentials. ## Installation ```text $ npm install -g anypoint-cli@latest ``` > [!NOTE] Depending on the configuration of your system, you might need to run these commands using > administrator credentials. ## Authentication You can configure Anypoint CLI authentication with username and password, client ID and client secret, or a bearer token. At least one method is required. > [!NOTE] As a part of Multi-factor authentication (MFA) enablement for all users, starting October > 2022, the only way to use Anypoint CLI will be through > [Connected Apps](https://docs.mulesoft.com/access-management/connected-apps-overview). ### Username and Password If you don’t log in using single sign-on (SSO), you can use your username and password to log into the CLI directly.
ParameterDescription

username

Your Anypoint Platform username

You can also pass this value using the environment variable export ANYPOINT_USERNAME=<name>.

password

Your Anypoint Platform password

You can also pass this value using the environment variable export ANYPOINT_PASSWORD=<pwd>.

For information about logging in using SSO, see [About Identity Management](https://docs.mulesoft.com/access-management/external-identity). ### Client ID and Client Secret You can configure a Connected App with the `client_credentials` grant type to use with the CLI.
ParameterDescription

client_id

The ID of the Connected App

You can also pass this value using the environment variable export ANYPOINT_CLIENT_ID=<client_id>.

client_secret

The client secret of the Connected App

You can also pass this value using the environment variable export ANYPOINT_CLIENT_SECRET=<client_secret>.

For more information about Connected Apps, see [Connected Apps](https://docs.mulesoft.com/access-management/connected-apps-overview). ### Bearer Token If you have already generated a bearer token, you can pass it to the CLI directly. When you provide a bearer token, the CLI ignores any provided user or client credentials.
ParameterDescription

bearer

A bearer token for the Anypoint Platform

Your CLI session expires when the bearer token expires.

For information about generating a bearer token, see [How to generate your Authorization Bearer token for Anypoint Platform](https://help.salesforce.com/s/articleView?id=001115323&type=1). ## Optional Arguments The Anypoint CLI takes the following optional arguments:
ParameterDescription

organization

Your organization or sub-organization (business group) within Anypoint Platform. You can specify the root organization name or the name of a specific business group.

You can also pass this value using the environment variable export ANYPOINT_ORG=<name>.

environment

Your Anypoint Platform environment

You can also pass this value using the environment variable export ANYPOINT_ENV=<name>.

host

The host of your Anypoint Platform Installation
By default, this value points to anypoint.mulesoft.com.

  • If you are using Anypoint Platform PCE, pass the address where you are hosting the platform.

  • If you are using Anypoint Platform EU Cloud, pass your EU control plane address.

You can also pass this value using a dedicated environment variable ANYPOINT_HOST=<name>.

## Usage Keep the following in mind while using the Anypoint CLI: 1. Environment variables override credentials file parameters and command-line parameters override environment variables. If you don’t pass a command-line parameter, the default profile properties are used. 2. If not specified, the default environment is production. 3. Your Anypoint session expires based on the **Default session timeout** configured in your Organization settings. For information about your Organization settings, see [Manage Root Organization Settings](https://docs.mulesoft.com/access-management/managing-business-groups#manage-root-organization-settings). 4. The Anypoint CLI works with autocomplete. You can start typing the name of the command or parameter and press Tab for autocomplete or press Tab+Tab for a list of options. ### Credentials File The recommended way of passing these options to your Anypoint Platform CLI installation is using the `credentials` file located inside the `~/.anypoint` directory, which is not automatically created during installation. Follow these steps to create your credentials file: 1. Create a directory called `.anypoint` in the `~/` directory for Linux and OSx, or `C:\Users\USERNAME \` in Windows. 2. Navigate to your `.anypoint` directory and create a blank file named `credentials` with the following structure: ```text { "default": { "username": "yourAnypointUserName", "password": "yourAnypointPassword", "organization": "", "environment": "", "host": "" }, "otherProfile": { "username": "", "password": "", "organization": "", "environment": "", "host": "" }, "connAppProfile": { "client_id": "", "client_secret": "", "organization": "", "environment": "", "host": "" } } ``` Note that the `default` profile is used unless the `ANYPOINT_PROFILE` environment variable is set: ```text > export ANYPOINT_PROFILE="otherProfile" > anypoint-cli ``` Then run the `anypoint-cli` command without any options: ```text > anypoint-cli ``` ### Dedicated Environment Variables If you choose to pass the credentials when running `anypoint-cli`, pass both parameters as environment variables: `ANYPOINT_USERNAME` and `ANYPOINT_PASSWORD`. ```text > export ANYPOINT_USERNAME="username" > export ANYPOINT_PASSWORD="password" > anypoint-cli ``` ### CLI Options If you pass only your username, the Anypoint CLI prompts for your password. ```text > anypoint-cli --username="user" Password: **** ``` ### Pass Commands After setting up a proper way to access Anypoint Platform from the CLI, you can start passing commands. See [Anypoint Platform CLI 3.x List of Commands](https://docs.mulesoft.com/anypoint-cli/3.x/anypoint-platform-cli-commands) for instructions on how to use them. ### Use Anypoint CLI Through a Network Proxy To use the Anypoint CLI through a proxy server, configure the `HTTP_PROXY` and `HTTPS_PROXY` (uppercase) environment variables with the hostname or IP addresses of your proxy servers. Depending on your operating system, use the following commands: - Linux, macOS, or Unix `$ export HTTP_PROXY=http://_proxy-server_:80` or `$ export HTTPS_PROXY=https://_proxy-server_:443` - Windows `> set HTTP_PROXY=http://_proxy-server_:80` or `> set HTTPS_PROXY=https//_proxy-server_:443` If the proxy server requires authentication, use these commands: - Linux, macOS, or Unix `$ export HTTP_PROXY=http://_username_:_password_@_proxy-server_:80` or `$ export HTTPS_PROXY=https://_username_:_password_@_proxy-server_:443` - Windows `> set HTTP_PROXY=http://_username_:_password_@_proxy-server_:80` or `> set HTTPS_PROXY=https://_username_:_password_@_proxy-server_:443` ## Notes - To improve the Anypoint CLI experience, we gather anonymized usage data. You can opt out by setting `collectMetrics` to false in the `credentials` file. ## See Also - [Anypoint Platform CLI List of Commands](https://docs.mulesoft.com/anypoint-cli/3.x/anypoint-platform-cli-commands) --- product: Anypoint CLI version: 3.x --- # Anypoint CLI 3.x List of Commands > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint Platform CLI provides the ability to manage these features in Anypoint Platform: - [Anypoint Platform Account](#account) - [Environments and Business Groups](#env-business-groups) - [API Governance](#api-governance) - [API Manager](#api-mgr) - [Cloudhub 2.0](#cloudhub2-apps) - [CloudHub Applications](#cloudhub-apps) - [CloudHub Dedicated Load Balancers](#cloudhub-dlb) - [CloudHub Anypoint VPCs](#cloudhub-vpc) - [DataGraph Load Balancers](#datagraph-load-balancers) - [DataGraph API Source Management](#datagraph-source) - [Design Center Projects](#design-center) - [Exchange Assets](#exchange-assets) - [Hybrid Applications](#standalone-apps) - [Alerts for Hybrid Applications](#standalone-alerts) - [Local Servers](#servers) - [Local Server Groups](#server-groups) - [Local Cluster Servers](#server-clusters) - [Runtime Fabric Application Management](#rtf-apps) - [Runtime Fabric Instances](#rtf-instances) ## Anypoint Platform Account
CommandDescription

Show account details

Lists business groups

Show details of a business group

Lists environments

Create new environment

Delete an environment

Shows details of an environment

## Environments and Business Groups
CommandDescription

Make specified environment active

Make specified business-group active

## API Governance

Command

Description

governance api evaluate

Evaluates filter criteria to determine which rulesets apply to APIs that meet that criteria

governance api inspect

Inspects an API definition and lists its schemas

governance api validate

Validates an API definition against a specified governance ruleset

governance document

Creates the documentation file for a governance ruleset definition

governance profile create

Creates a governance profile

governance profile delete

Deletes a governance profile

governance profile info

Lists information for a specific governance profile ID

governance profile list

Lists all governance profiles for an organization

governance profile update

Updates a governance profile

governance ruleset clone

Clones a governance ruleset and applies specified updates to rules

governance ruleset info

Lists ruleset rules

governance ruleset init

Initializes a governance ruleset definition based on a data schema

governance ruleset validate

Validates a governance ruleset definition’s format

## API Manager
CommandDescription

Creates an API instance alert

Lists alerts for an API instance

Changes the asset version for an API instance by choosing a new version from Exchange

Classifies an API instance in a given environment

Deletes an API

Deploys an API to CloudHub, hybrid server, or Runtime Fabric

Deprecates an API instance

Shows details of an API

Downloads the API proxy ZIP file to a local directory

Edits an API instance

Lists all APIs in API Manager 2.x

Manages a new API, API version, or new API instance with an asset from Exchange

Promotes an API instance from source environment

Redeploys an API to CloudHub, Hybrid server, or Runtime Fabric

Undeprecates an API instance

Deletes a given API contract

Lists all contracts to a given API instance.

Applies a policy to a given API instance

Shows the description and available configuration properties of a given policy template

Disables policy from a given API instance

Edits the policy configuration of a given API instance

Enables a policy on a given API instance

Lists policies

Removes a policy from a given API instance

Creates an SLA tier

Copies an SLA tier from source to a target API Instance

Deletes an SLA tier from an API instance

Lists the SLA tiers of an API instance

## Cloudhub 2.0
CommandDescription

Deletes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Describes an application

Describes an application in raw JSON response

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## CloudHub Applications
CommandDescription

Lists all alerts in the environment

Describes the history of the alarm

Lists all applications in the environment

Show application details

Show raw application JSON response

Stop a running application

Start an application

Restart a running application

Delete an application

Deploy a new application

Modify an existing application, optionally updating the ZIP file

Download application logs to specified directory

Tail application logs

Copies a CloudHub application

## CloudHub Dedicated Load Balancers
CommandDescription

Lists all load balancers in an organization

Show load balancer details

Show load balancer details in raw JSON response

Create a load balancer

Starts a load balancer

Stops a load balancer

Delete a load balancer

Add an additional certificate to an existing load balancer

Remove a certificate from a load balancer

Set the default certificate that the load balancer will serve

Show the load balancer configuration for a particular certificate

Add an IP or range of IPs to the load balancer allowlist

Remove an IP or range of IPs from the load balancer allowlist

Lists the proxy mapping rules for a load balancer. If no certificateName is given, the mappings for the default SSL endpoint are shown

Add a proxy mapping rule at the specified index. If no certificateName is given, the mappings for the default SSL endpoint are shown

Remove a proxy mapping rule. If no certificateName is given, the mappings for the default SSL endpoint are shown.

Enables dynamic IPs

Disables dynamic IPs

Lists all supported regions

Lists all available runtimes

## CloudHub Anypoint VPCs
CommandDescription

Lists all Anypoint VPCs

Show Anypoint VPC details

Show raw Anypoint VPC JSON response

Create a new Anypoint VPC

Delete an existing Anypoint VPC

Modifies the Anypoint VPC association to Runtime Manager environments.

Modifies the Anypoint VPC association to Runtime Manager environments.

Share an Anypoint VPC with a list of Business Groups.

Share an Anypoint VPC with a list of Business Groups.

Sets the domain names that are resolved using your internal DNS servers. If used with no option, internal DNS will be disabled

Clears the list domain names that are resolved using your internal DNS servers

Show firewall rule for Mule applications in this Anypoint VPC

Add a firewall rule for Mule applications in this Anypoint VPC

Remove a firewall rule for Mule applications in this Anypoint VPC

## DataGraph Load Balancers
CommandDescription

Adds a dedicated load balancer configuration to Anypoint DataGraph

Displays a dedicated load balancer configuration for Anypoint DataGraph

Removes a dedicated load balancer configuration from Anypoint DataGraph

## DataGraph API Source Management
CommandDescription

Adds an API source

Promotes an API source

Updates an API source

Scales API calls made to the unified schema

Downloads the unified schema

Deletes an API source

Gets an API source

Lists all API sources

Returns information about DataGraph

## Design Center Projects
CommandDescription

Creates a new Design Center project

Deletes a Design Center project

Downloads the content of a Design Center project

Publishes a Design Center project to Exchange

Uploads the content of a project to Design Center

List all Design Center projects

## Exchange Assets
CommandDescription

Uploads an Exchange asset

Uploads an Exchange asset using Exchange Experience API v2

Modifies mutable data of an existing Exchange asset

Modifies an Exchange asset

Downloads an Exchange asset

Lists all assets

Downloads an asset’s description page from Exchange

Changes an asset’s description page from Exchange

Uploads an asset’s description page from Exchange

Updates an asset’s description page from Exchange

Deletes an asset’s description page from Exchange

List all pages for a given asset

Copies an Exchange asset

Deletes an asset from Exchange

Deprecates an asset

Undeprecate an asset

Show a given asset’s information

Uploads a resource to an asset portal

Lists published resources in the asset portal

Downloads resource from the asset portal

Deletes resource from the asset portal

## Hybrid Applications > [!CAUTION] In order for the Anypoint Platform CLI to recognize your target servers, each server > needs to be manually registered with the platform.
CommandDescription

Downloads a standalone application artifact binary

Deploys or redeploys an application to an on-premises server, server group, or cluster

Shows a raw standalone application JSON response

Changes a standalone application artifact

Starts a standalone application

Deletes a standalone application

Shows detailed information for a standalone application

Lists all standalone applications in the environment

Restarts a standalone application

Stops a standalone application

Copies a standalone application

## Alerts for Hybrid Applications
CommandDescription

Describes an alert

Creates new alert for standalone runtime

Modifies alert for standalone runtime

Lists all alerts for standalone runtimes in the environment

## Local Servers
CommandDescription

Describes server

Modifies server

Gets server registration token. This token needs to be used to register a new server

Deletes server

Changes an standalone application artifact

## Local Server Groups
CommandDescription

Creates server group from servers

Describes server group

Modifies server group

Adds server to a server group

Deletes server group

Lists all server groups in the environment

Removes server from a server group

## Local Cluster Servers
CommandDescription

Adds server to cluster

Deletes cluster

Lists all clusters in the environment

Removes server from a cluster

Creates new cluster

Describes server cluster

Modifies cluster

## Runtime Fabric Application Management
CommandDescription

Deletes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Describes an application

Describes an application in a raw JSON response

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## Runtime Fabric Instances
CommandDescription

Lists available Runtime Fabric instances

--- product: Anypoint CLI version: 4.x is-latest-version: true --- # Anypoint CLI 4.x List of Commands > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint Platform CLI provides the ability to manage these features in Anypoint Platform: - [Anypoint Platform Accounts](#account) - [Agent Fabric](#agent-fabric) - [API Catalog](#catalog) - [API Governance](#api-gov) - [API Manager](#api-mgr) - [Cloudhub 2.0](#cloudhub-2) - [Cloudhub Apps](#cloudhub-apps) - [Cloudhub Dedicated Load Balancers](#cloudhub-dlb) - [Cloudhub Anypoint VPCs](#cloudhub-vpc) - [Datagraph Load Balancer](#datagraph-load-balancer) - [Design Center](#design-center) - [DX Mule](#dx-mule) - [Exchange Assets](#exchange) - [Hybrid Applications](#standalone-apps) - [Alerts for Hybrid Applications](#standalone-alerts) - [Local Servers](#servers) - [Local Server Clusters](#server-clusters) - [Local Server Groups](#server-groups) - [Managed Omni Gateways](#managed-gateways) - [PDK Policy Projects](#policy-project) ## Anypoint Platform Accounts
CommandDescription

Show details of a business group

Lists business groups

Create new environment

Delete an environment

Shows details of an environment

Lists environments

Show account details

## Agent Fabric
CommandDescription

Builds the agent network project and validates configuration

Creates a new agent network project and generates the initial configuration files

Deploys the agent network project to the target environment

Publishes the agent network project to Anypoint Exchange

Undeploys the agent network project and removes all deployed runtime resources

Unpublishes the agent network project asset versions from Anypoint Exchange

Sets up the gateways for the agent network

## API Catalog
CommandDescription

Configures autocompletion for API Catalog commands

Creates or deletes a credentials configuration file

Creates a descriptor file

Updates a descriptor file

Publishes assets to Exchange

## API Governance

Command

Description

governance:api:evaluate

Evaluates filter criteria to determine which rulesets apply to APIs that meet that criteria

governance:api:inspect

Inspects an API specification and lists its schemas

governance:api:validate

Validates an API specification against a specified governance ruleset

governance:document

Creates the documentation file for a governance ruleset definition

governance:profile:create

Creates an active governance profile

governance:profile:delete

Deletes a governance profile

governance:profile:info

Lists information for a specific governance profile ID

governance:profile:list

Lists all governance profiles for an organization

governance:profile:update

Updates a governance profile

governance:ruleset:clone

Clones a governance ruleset and applies specified updates to rules

governance:ruleset:classes

Lists the target classes available for governance rulesets, grouped by prefix

governance:ruleset:completions

Returns context-aware completions at a cursor position in a ruleset YAML file

governance:ruleset:constraints

Lists valid constraints by property type

governance:ruleset:domains

Lists available metadata domains for governance rulesets

governance:ruleset:generate

Returns context and instructions for generating a ruleset from a natural-language description

governance:ruleset:info

Lists ruleset rules

governance:ruleset:init

Initializes a governance ruleset definition based on a data schema

governance:ruleset:properties

Lists the properties and types for a target class

governance:ruleset:resolve

Resolves a user-facing term to its canonical target class and property path

governance:ruleset:simplify

Simplifies a ruleset by flattening nested paths and removing redundant logical wrappers

governance:ruleset:validate

Validates a governance ruleset definition’s format

governance:ruleset:validate-authoring

Validates a ruleset against the authoring model

governance:ruleset:version

Shows the governance ruleset tooling version

## API Manager
CommandDescription

Creates an API instance alert

Lists alerts for an API instance

Lists the autodiscovery properties

Changes the asset version for an API instance by choosing a new version from Exchange

Classifies an API instance in a given environment

Deletes an API

Deploys an API to CloudHub, CloudHub2, Hybrid Server, or Runtime Fabric

Deprecates an API instance

Shows details of an API

Downloads the API proxy ZIP file to a local directory

Edits an API instance

Lists all APIs in API Manager 2.x

Manages a new API, API version, or new API instance with an asset from Exchange

Promotes an API instance from source environment

Redeploys an API to CloudHub, CloudHub2, Hybrid Server, or Runtime Fabric

Undeprecates an API instance

Adds an owner to a client application

Imports a client application from an external client identity provider

Lists possible owners for a client application in the current organization

Lists client identity providers with import enabled in the current organization

Deletes a given API contract

Lists all contracts to a given API instance

Applies a policy to a given API instance

Shows the description and available configuration properties of a given policy template

Disables policy from a given API instance

Edits the policy configuration of a given API instance

Enables a policy on a given API instance

Lists policies

Removes a policy from a given API instance

Creates an SLA tier

Copies an SLA tier from source to a target API instance

Deletes an SLA tier from an API instance

Lists the SLA tiers of an API instance

Creates an upstream for an API instance

Bulk edits the TLS context for all upstreams of an API instance

Deletes an upstream from an API instance

Edits an upstream of an API instance

Lists all upstreams for an API instance

## Cloudhub 2.0
CommandDescription

Deletes an application

Describes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## Cloudhub Apps
CommandDescription

Describes the history of the alarm

Lists all alerts in the environment

Copies a CloudHub application

Deletes an application

Deploys a new application

Shows application details

Download application logs to specified directory

Lists all applications in the environment

Modifies an existing application, optionally updating the ZIP file

Restarts a running application

Starts an application

Stops a running application

Tail application logs

Lists all supported regions

Lists all available runtimes

## Cloudhub Dedicated Load Balancers
CommandDescription

Adds an IP or range of IPs to the load balancer allowlist

Removes an IP or range of IPs from the load balancer allowlist

Creates a load balancer

Deletes a load balancer

Shows load balancer details

Disables dynamic IPs

Enables dynamic IPs

Lists all load balancers in an organization

Adds a proxy mapping rule at the specified index

Lists the proxy mapping rules for a load balancer

Removes a proxy mapping rule

Adds an additional certificate to an existing load balancer

Shows the load balancer configuration for a particular certificate

Removes a certificate from a load balancer

Sets the default certificate that the load balancer will serve

Starts a load balancer

Stops a load balancer

Adds an IP or range of IPs to the load balancer allowlist

Removes an IP or range of IPs from the load balancer allowlist

## Cloudhub Anypoint VPCs
CommandDescription

Shares an Anypoint VPC with a list of Business Groups

Shares an Anypoint VPC with a list of Business Groups

Creates a new Anypoint VPC

Deletes an existing Anypoint VPC

Show Anypoint VPC details

Sets the domain names that are resolved using your internal DNS servers

Clears the list domain names that are resolved using your internal DNS servers

Modifies the Anypoint VPC association to Runtime Manager environments

Modifies the Anypoint VPC association to Runtime Manager environments

Adds a firewall rule for Mule applications in this Anypoint VPC

Shows firewall rule for Mule applications in this Anypoint VPC

Removes a firewall rule for Mule applications in this Anypoint VPC

Lists all Anypoint VPCs

## Datagraph Load Balancer
CommandDescription

Adds a dedicated load balancer configuration to Anypoint DataGraph

Displays a dedicated load balancer configuration for Anypoint DataGraph

Removes a dedicated load balancer configuration from Anypoint DataGraph

## Design Center
CommandDescription

Creates a new Design Center project

Deletes a Design Center project

Downloads the content of a Design Center project

Lists all Design Center projects

Publishes a Design Center project to Exchange

Uploads the content of a project to Design Center

## DX Mule
CommandDescription

Lists all available Mule runtime versions from Exchange

Downloads a Mule runtime to the local machine

Shows or sets the path to the local Mule runtime installation

Scaffolds a new Mule project with Maven structure and connector dependencies

Introspects a connector’s operations, sources, configs, and connection providers

## Exchange Assets
CommandDescription

Copies an Exchange asset

Deletes an asset from Exchange

Deprecates an asset

Shows a given asset’s information

Downloads an Exchange asset

Lists all assets

Modifies an Exchange asset

Modifies mutable data of an existing Exchange asset

Deletes an asset’s description page from Exchange

Downloads an asset’s description page from Exchange

List all pages for a given asset

Changes an asset’s description page from Exchange

Updates an asset’s description page from Exchange

Uploads an asset’s description page from Exchange

Deletes resource from the asset portal

Downloads resource from the asset portal

Lists published resources in the asset portal

Uploads a resource to an asset portal

Undeprecates an asset

Modifies the status of an existing asset

Uploads an Exchange asset using Exchange Experience API

> [!NOTE] Exchange commands are currently not available for GovCloud. ## Hybrid Applications > [!CAUTION] For the Anypoint Platform CLI to recognize your target servers, each server must be > manually registered with the platform.
CommandDescription

Downloads a standalone application artifact binary

Copies a standalone application

Deletes a standalone application

Deploys or redeploys an application to an on-premises server, server group, or cluster

Shows detailed information for a standalone application

Lists all standalone applications in the environment

Changes a standalone application artifact

Restarts a standalone application

Starts a standalone application

Stops a standalone application

## Alerts for Hybrid Applications
CommandDescription

Creates new alert for standalone runtime

Describes an alert

Lists all alerts for standalone runtimes in the environment

Modifies alert for standalone runtime

## Local Servers
CommandDescription

Describes server

Deletes server

Changes an standalone application artifact

Modifies server

Gets server registration token. This token needs to be used to register a new server

## Local Server Clusters
CommandDescription

Adds server to cluster

Creates new cluster

Describes server cluster

Deletes cluster

Modifies cluster

Lists all clusters in the environment

Removes server from a cluster

## Local Server Groups
CommandDescription

Adds server to a server group

Creates server group from servers

Describes server group

Deletes server group

Lists all server groups in the environment

Modifies server group

Removes server from a server group

## Managed Omni Gateways
CommandDescription

Create a Managed Omni Gateway

Delete a Managed Omni Gateway

Describe a specific Managed Omni Gateway

Edit a Managed Omni Gateway

Lists all Managed Omni Gateways in the environment

Start a Managed Omni Gateway

Stop a Managed Omni Gateway

## PDK Policy Projects
CommandDescription

Creates a custom policy definition project

## See Also - [Anypoint Exchange Documentation](https://docs.mulesoft.com/exchange/) - [Access Management Documentation](https://docs.mulesoft.com/access-management/) - [Anypoint Runtime Manager Documentation](https://docs.mulesoft.com/runtime-manager/) - [VPC Documentation](https://docs.mulesoft.com/cloudhub/virtual-private-cloud) - [CloudHub Load Balancers Documentation](https://docs.mulesoft.com/cloudhub/cloudhub-dedicated-load-balancer) - [API Manager 2.x (Crowd Release) Documentation](https://docs.mulesoft.com/api-manager/latest/) - [Design Center Documentation](https://docs.mulesoft.com/design-center/) --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Anypoint Platform CLI 4.x Overview > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint Platform CLI provides scripting and command-line capabilities for Anypoint Platform and Anypoint Platform Private Cloud Edition (PCE). Use the CLI to automate platform operations, manage applications, and integrate with CI/CD pipelines. The tool enables developers and administrators to perform common tasks efficiently through command-line interfaces. CLI supports both cloud and on-premises deployments, enabling support for various enterprise environments. Use Anypoint Platform CLI commands to automate a subset of product actions through scripts. Anypoint Platform CLI 4.0 and later can be run only in batch mode. Interactive mode is no longer supported. With Anypoint CLI 4.x you can: - Enhance your workflow efficiency: Streamline your API management and development processes with command-line tools. - Ensure consistency across environments and organizations: Apply consistent configurations and policies across different organizations and environments, ensuring stability and reliability in your operations. - Manage your applications effectively: Perform a wide range of operations on your APIs and applications, from deployment to monitoring, all from the command line. > [!WARNING] Anypoint Platform CLI 4.x is not backward compatible. If you are using a version of > Anypoint CLI earlier than Anypoint CLI 4.x, > [read this first to find out about differences.](https://docs.mulesoft.com/anypoint-cli/latest/diff-earlier-ver) ## Before you begin Because the Anypoint CLI is built with Node.js, you must: 1. Install the Node package manager (npm) 2. Install the Anypoint CLI using npm After the Anypoint CLI installation, you can run the commands. For more information, refer to [Install Anypoint CLI](https://docs.mulesoft.com/anypoint-cli/latest/install). ## Syntax The Anypoint Platform CLI command set has the following syntax: ```console $ anypoint-cli-v4 [command] [parameters] [flags] ``` If you run a command and there is an error, the application exits and returns a description of the issue. When using multi-option flags in a command, either put the parameter before the flags: ```console anypoint-cli-v4 governance:api:validate param1 param2 --rulesets value1 --rulesets value2 --rulesets value3 ``` Or use a `--` (two dashes followed by a space) before the parameter: ```console anypoint-cli-v4 governance:api:validate --rulesets value1 --rulesets value2 --rulesets value3 -- param1 param2 ``` > [!NOTE] You can write all commands separated by spaces or colons. For example: > `runtime-mgr:application:list` can also be `runtime-mgr application list`. ## Default Flags Anypoint Platform CLI commands have the following default flags:
FlagDescription

--help

Displays command usage information

--organization

Your organization within Anypoint Platform

You can also pass this value using the environment variable export ANYPOINT_ORG=<name>.

--environment

Your Anypoint Platform environment

You can also pass this value using the environment variable export ANYPOINT_ENV=<name>.

--host

The host of your Anypoint Platform Installation
This value defaults to anypoint.mulesoft.com.

  • If you are using Anypoint Platform PCE, pass the address where you are hosting the platform.

  • If you are using Anypoint Platform EU Cloud, pass your EU control plane URL.

You can also pass this value using a dedicated environment variable ANYPOINT_HOST=<name>. For example, ANYPOINT_HOST=my.anypoint.mulesoft.com.

## Override Order You can use environment variables to define values in Anypoint CLI. Following is the override order if you mix environment variable settings with explicit command line values: - Environment variables override credentials file parameters. - Command-line parameters override environment variables. - If you do not pass a command-line flag, the default profile properties are used. - If you do not specify an environment, the default is production. ## Session Timeout Your Anypoint Platform session expires based on the **Default session timeout** configured in your Organization settings. For information about Root Organization settings, see [Manage Root Organization Settings](https://docs.mulesoft.com/access-management/managing-business-groups#manage-root-organization-settings). ## Anonymized Usage Data To improve the Anypoint CLI experience, MuleSoft gathers anonymized usage data. You can opt out by setting `collectMetrics` to false in the `credentials` file. ## See also 1. [Install](https://docs.mulesoft.com/anypoint-cli/latest/install) Anypoint CLI. 2. [Authenticate to Anypoint Platform](https://docs.mulesoft.com/anypoint-cli/latest/auth). 3. [View the list of commands](https://docs.mulesoft.com/anypoint-cli/latest/anypoint-platform-cli-commands) available for the Anypoint Platform actions you can execute using Anypoint CLI. 4. [Use a Proxy Server](https://docs.mulesoft.com/anypoint-cli/latest/proxy). --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Anypoint Platform CLI Release Notes > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint Platform CLI is a scripting and command-line tool for Anypoint Platform and Anypoint Platform Private Cloud Edition (Anypoint Platform PCE). The following release notes are provided for Anypoint Platform CLI: - [Anypoint Platform CLI 4.x](https://docs.mulesoft.com/release-notes/cli/anypoint-platform-cli-4) - [Anypoint Platform CLI 3.x](https://docs.mulesoft.com/release-notes/cli/anypoint-platform-cli) ## See Also - [Anypoint CLI Documentation](https://docs.mulesoft.com/anypoint-cli/latest/) - [Known Issues](https://help.salesforce.com/s/issues) --- product: Anypoint CLI version: 4.x is-latest-version: true --- # API Catalog CLI > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Configures autocompletion for API Catalog commands

Creates or deletes a credentials configuration file

Creates a descriptor file

Updates a descriptor file

Publishes assets to Exchange

Discover and catalog your API definitions, documentation files, and associated metadata as part of an automated process with API Catalog CLI. You can embed the publish asset command in your automation tools, such as a CI/CD pipeline or custom scripts, to automatically trigger the publishing of your API assets to Exchange. API Catalog CLI is agnostic of CI/CD tools and runtime environments. See [Autocataloging APIs Using API Catalog CLI](https://docs.mulesoft.com/exchange/apicat-about-api-catalog-cli). ## api-catalog autocomplete $ api-catalog autocomplete \[flags\] This command accepts the following flags:
FlagDescription

blank

Displays instructions for configuring autocompletion

bash

Installs autocompletion using Bash shell settings

zsh

Installs autocompletion using Z shell settings

-r, --refresh cache

Removes the current autocompletion configuration. Use this before running the command with a different shell type.

**Examples** $ api-catalog autocomplete $ api-catalog autocomplete bash $ api-catalog autocomplete zsh $ api-catalog autocomplete --refresh-cache > [!WARNING] The API Catalog CLI autocomplete plugin is not currently supported in Windows. ## api-catalog conf Manage authentication credentials in a configuration file (config.json) by adding and removing key value pairs. Set one key value pair per command execution. \> api-catalog conf \[flags\] `` The authentication key name. Possible key names are: username password client\_id client\_secret host environment organization `` The value for the specified authentication key. This command accepts the following flags:
FlagDescription

-d, --delete

Deletes the config file entry for the given key

-h, --help

Shows the help for this command

-k, --key=key

Shows the value that corresponds with the given key

-v, --value=value

Shows the key that corresponds with the given value

## api-catalog create-descriptor \> api-catalog create-descriptor \[flags\] This command accepts the following flags:
FlagDescription

-d, --file=file

Default: catalog.yaml

The name and location in which to save the generated catalog descriptor file

--external

Generates an exchange.json file for each API described in the descriptor file and adds a reference to each of those in the descriptor file using the ref tag in the projects section

## api-catalog update-descriptor \> api-catalog update-descriptor \[flags\] This command accepts the following flag:
FlagDescription

-d, --descriptor-file=descriptor-file

Default: catalog.yaml

The name and location in which to save the updated catalog descriptor file information

## api-catalog publish-asset \> api-catalog publish-asset \[flags\] This command accepts the [general and authentication flags](https://docs.mulesoft.com/exchange/apicat-use-api-catalog-cli#common-options) in addition to the following flags:
FlagDescription

--async

Runs the publish job asynchronously.

-d, --descriptor-file=descriptor-file

or

ANYPOINT_DESCRIPTOR_FILE environment variable

Default: ./catalog.yaml

The name and location of the catalog descriptor file.

  • If the file does not exist, no assets are cataloged.

  • If the file exists but is empty, the command creates and prints the catalog descriptor YAML results. It outputs cataloging information for all API definitions it finds in the full directory tree relative to the current working directory.

  • If a valid YAML file exists, the command catalogs the assets as specified.

--dry-run

Runs the command to verify that the descriptor file is valid. No APIs are published.

--force-publish

Bypasses the comparison and creates a new version of the asset in Exchange regardless of the content.

--force-update-metadata

Updates the asset’s metadata, such as tags, in the latest version in Exchange regardless of the content. This does not republish the asset.

--json

Prints the execution result in JSON format.

-s, --silent

Enables silent logging.

-t, --trigger-criteria=<descriptor-tag>:<value> --trigger-criteria=<descriptor-tag>:value

This flag works in conjunction with the triggerConditions section in the descriptor file. For each run of the api-catalog publish-asset command, the trigger values are compared to trigger condition values in the descriptor file to determine whether to publish the APIs described in the descriptor file. To match multiple conditions, specify separate --trigger-criteria flags for each condition. For the APIs to be published, all trigger conditions set in the descriptor file must be matched by --trigger-criteria flag values.

Example:

--trigger-criteria=branch:main --trigger-criteria=anytag:release/ --trigger=user:admin

-v, --verbose

Enables verbose logging.

--version-strategy-criteria=<descriptor-tag>:<value>

This flag works in conjunction with the versionStrategyConditions section in the descriptor file. The api-catalog publish-asset command compares the version strategy criteria values to version strategy condition values in the descriptor file to determine the version strategy to use to publish the APIs. To match multiple conditions, specify separate --version-strategy-criteria flags for each condition.

Example:

--version-strategy-criteria=branch:main --version-strategy-criteria=anytag:release/ --version-strategy-criteria=user:admin

## General and Authentication Flags Following are the general and authentication flags for commands that authenticate to Anypoint Platform:
FlagDescription

--client_id=client_id

or

ANYPOINT_CLIENT_ID environment variable

Connected app client ID

--client_secret

or

ANYPOINT_CLIENT_SECRET environment variable

Prompt for the connected app secret for the client ID

--collectMetrics

or

COLLECT_METRICS environment variable

Not currently used

--environment=environment

or

ANYPOINT_ENV environment variable

The name of the Anypoint Platform environment where the APIs are cataloged

--host=host

or

ANYPOINT_HOST environment variable

Default:

anypoint.mulesoft.com

The Anypoint Platform base URL without the protocol

For the US Anypoint Platform, use:

anypoint.mulesoft.com

For the European Anypoint Platform, use:

eu1.anypoint.mulesoft.com

--organization=organization

or

ANYPOINT_ORG environment variable

The ID of the Anypoint Platform organization where the APIs are cataloged

-p, --password

or

ANYPOINT_PASSWORD environment variable

Anypoint user password

-u, --username=username

or

ANYPOINT_USERNAME environment variable

Anypoint username

--- product: Anypoint CLI version: 4.x is-latest-version: true --- # Authentication to the Anypoint Platform CLI > For the full documentation index, see: https://docs.mulesoft.com/llms.txt To authenticate to Anypoint CLI, you must use one of the authentication option combinations: - Username and password - Client ID and client secret - Bearer token (command line only) > [!NOTE] As a part of Multi-factor authentication (MFA) enablement for all users, starting October > 2022, the only way to use Anypoint CLI will be through > [Connected Apps](https://docs.mulesoft.com/access-management/connected-apps-overview). The default host, environment, and organization are used if you do not specify them. Pass Anypoint CLI credentials by using the following methods: - [Using a credentials configuration file](#credentials-file) - [Using command-line parameters and Environment Variables](#command-line-parameters) Configuration settings are overridden as follows: - Command-line parameters override all other methods. - Environment variables are used if command-line parameters are not specified and override any credentials configuration file settings. - Credentials configuration file parameters are used if no command-line parameters or environment variables are set. ## Set Credentials Using the Conf command You can authenticate to Anypoint Platform by running the `anypoint-cli-v4` command with the `conf` option to add your credentials to a configuration file and then running the `anypoint-cli-v4` commands you want to use. You can set authentication values in the configuration file using a combination of the following parameters: username password client\_id client\_secret host session.selectedEnvironment.id session.selectedOrganization.id To create your configuration file: - Run the `anypoint-cli-v4 conf` command with the parameters you want to use to set the authentication method. For example, the following command sets the username and password. $ anypoint-cli-v4 conf username $ anypoint-cli-v4 conf password The commands store the credential information in the `config.json` file in the following locations: - MacOS: `~/Library/Preferences/anypoint-cli-v4-nodejs/config.json` - Windows: `%APPDATA%\anypoint-cli-v4-nodejs\Config` - Unix: `~/.config/anypoint-cli-v4-nodejs/` **Examples:** - Set configuration file authentication using username and password - Add authentication values to the configuration file using the following commands: $ anypoint-cli-v4 conf username myUserName $ anypoint-cli-v4 conf password myPassword $ anypoint-cli-v4 conf organization myOrgId - Run a command and the authentication will be done using the configuration file values. $ anypoint-cli-v4 account:environment:list - Set configuration file authentication using client ID and client secret - Add authentication values to the configuration file using the following commands: $ anypoint-cli-v4 conf client\_id myClientID $ anypoint-cli-v4 conf client\_secret myCLientSecret $ anypoint-cli-v4 conf organization myOrgId - Run a command and the authentication will be done using the configuration file values. $ anypoint-cli-v4 account:environment:list The `organization` flag is optional. It defaults to your main organization from Anypoint Platform. > [!NOTE] You can get your `client_id` and `client_secret` via Connected Apps. For more information > see [Connected Apps for Developers](https://docs.mulesoft.com/access-management/connected-apps-developers). > > Connected Apps require the `View Organization` and `View Environment` scopes to authenticate to > Anypoint Platform. ## Command-Line Parameters and Environment Variables You can authenticate to Anypoint Platform through the command line by running the `anypoint-cli-v4` command with a combination of parameters, or by setting a combination of the following environment variables before running the `anypoint-cli-v4` command:
Command-Line ParametersEnvironment Variables

--username

ANYPOINT_USERNAME

--password

ANYPOINT_PASSWORD

--client_id

ANYPOINT_CLIENT_ID

--client_secret

ANYPOINT_CLIENT_SECRET

--bearer

ANYPOINT_BEARER

--organization

ANYPOINT_ORG

--environment

ANYPOINT_ENV

-

ANYPOINT_CERTIFICATE

-

ANYPOINT_HOST

--[no-]collectMetrics

COLLECT_METRICS

> [!NOTE] The `--organization` flag is optional. It defaults to your main organization from Anypoint > Platform. **Examples:** - Authenticate on the command line using username and password $ anypoint-cli-v4 account:environment:list --username myUserName --password myPassword --organization myOrgId - Authenticate on the command line using client ID and client secret $ anypoint-cli-v4 account:environment:list --client\_id myClientID --client\_secret myClientSecret --organization myOrgId - Authenticate on the command line using a bearer token You can generate a bearer token in Anypoint Platform and pass it to Anypoint CLI directly. When you provide a bearer token, Anypoint CLI ignores any provided user or client credentials. $ anypoint-cli-v4 account:environment:list --bearer myBearerToken --organization myOrgId Your Anypoint Platform session expires when the bearer token expires. For information about generating a bearer token, see [How to Generate Your Authorization Bearer Token for Anypoint Platform](https://help.salesforce.com/s/articleView?id=001115323&type=1). - Authenticate by setting the environment variables for username and password $ export ANYPOINT\_USERNAME=myUserName $ export ANYPOINT\_PASSWORD=myPassword $ export ANYPOINT\_ORG=myOrgId $ anypoint-cli-v4 account:environment:list - Authenticate by setting the environment variables for client ID and client secret $ export ANYPOINT\_CLIENT\_ID=myClientID $ export ANYPOINT\_CLIENT\_SECRET=myCLientSecret $ export ANYPOINT\_ORG=myOrgId $ anypoint-cli-v4 account:environment:list --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Agent Fabric Plugin > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands to author, publish, and deploy agent network projects. > [!IMPORTANT] The Agent Fabric commands come from a separate plugin, > `mulesoft-anypoint-cli-agent-fabric-plugin`, that isn’t included in the base Anypoint CLI > installation. Install it before you use these commands, using either of these methods: > > - As an Anypoint CLI plugin: see [Install a Plugin Separately](https://docs.mulesoft.com/anypoint-cli/latest/install#install-plugins). > > - As a standalone tool for > [building agent networks in a CI/CD pipeline](https://docs.mulesoft.com/agent-network/latest/af-build-agent-networks-in-a-ci-cd-environment) > through npm: run `npm install mulesoft-anypoint-cli-agent-fabric-plugin`. > > Run these commands with the `anypoint-cli-agent-fabric-plugin` executable, as shown in the > examples.
CommandDescription

Builds the agent network project and validates configuration

Creates a new agent network project and generates the initial configuration files

Deploys the agent network project to the target environment

Publishes the agent network project to Anypoint Exchange

Undeploys the agent network project and removes all deployed runtime resources

Unpublishes the agent network project asset versions from Anypoint Exchange

Sets up the gateways for the agent network

## agent-network:project:build \> anypoint-cli-agent-fabric-plugin agent-network project build \[flags\] Builds the current agent network project using the Maven wrapper (`mvnw` or `mvnw.cmd`). This command validates the configuration and generates the artifacts required for publishing and deployment. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--bearer <value>

Bearer token
You can also set it with ANYPOINT_BEARER env variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID env variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET env variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS env variable

--no-collectMetrics

--debug

Enable debug mode

--debug

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--forceUpdate

Force update the dependencies

--forceUpdate

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--path <value>

Path to the project
Default: .

--path ./my-agent-network

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

### Example $ anypoint-cli-agent-fabric-plugin agent-network project build ## agent-network:project:create \> anypoint-cli-agent-fabric-plugin agent-network project create --name \[flags\] Creates a new agent network project in the current directory. The command generates a project folder with initial configuration files, including `agent-network.yaml`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

-n, --name <value>

(Required) Name of the project

--name my-agent-network

-o, --output-dir <value>

Output directory for the project

--output-dir ./projects

--api-version <value>

API version
Default: v1

--api-version v2

--asset-id <value>

Asset name (GAV). Valid characters are 'A-Z', 'a-z', '0-9', '_' and '-'.

--asset-id my-asset

--asset-version <value>

Asset version (GAV)
Default: 0.0.0

--asset-version 1.2.0

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--[no-]create-dir

Create a new directory under output-dir using the project name

--create-dir

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--group-id <value>

Group ID (GAV)

--group-id com.myorg

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG env variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--tab-size <value>

Tab size for indenting the API specification
Default: 2

--tab-size 4

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

### Example $ anypoint-cli-agent-fabric-plugin agent-network project create --name my-agent-network ## agent-network:project:deploy \> anypoint-cli-agent-fabric-plugin agent-network project deploy \[flags\] Deploys the agent network application. By default, the command uses single-gateway mode with the `agent-network-gw` gateway. You can override this using the `-g` flag or switch to separate-gateways mode using `-i` and `-e` flags. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

-e, --egress-gw <value>

Name of the target egress gateway (separate-gateways mode; requires --ingress-gw). When no gateway flags are provided, deploy defaults to single-gateway mode using agent-network-gw.

--egress-gw custom-egress

-g, --gateway <value>

Name of the gateway for single-gateway mode (recommended). Mutually exclusive with --ingress-gw and --egress-gw.

--gateway my-gateway

-i, --ingress-gw <value>

Name of the target ingress gateway. Combine with --egress-gw for separate-gateways mode; on its own it selects single-gateway mode using this gateway. When no gateway flags are provided, deploy defaults to single-gateway mode using agent-network-gw.

--ingress-gw custom-ingress

-t, --target-space <value>

Name of the target space to deploy. In single-gateway mode, optional; when provided it must match the gateway’s target space (validated, not used for lookup). In separate-gateways mode, defaults to agent-network-space.

--target-space my-space

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--disable-tracing

Disable tracing functionalities

--disable-tracing

--dont-wait-for-agent-network

Do not wait for the agent network to be ready

--dont-wait-for-agent-network

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--max-retries <value>

Max retries to check the status of the deploying application
Default: 3

--max-retries 5

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--path <value>

Path to the project
Default: .

--path ./my-agent-network

--process-timeout <value>

Process timeout in milliseconds
Default: 600000

--process-timeout 900000

--property <value>

Property to override in name:value format

--property apiKey:sk-xxx

--request-timeout <value>

Request timeout in milliseconds
Default: 60000

--request-timeout 120000

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

--json

Format output as JSON

--json

### Example $ anypoint-cli-agent-fabric-plugin agent-network project deploy $ anypoint-cli-agent-fabric-plugin agent-network project deploy --property apiKey:sk-xxx $ anypoint-cli-agent-fabric-plugin agent-network project deploy --property apiKey:sk-xxx --property role:user $ anypoint-cli-agent-fabric-plugin agent-network project deploy --path ./my-project --property myAgent.url:https://api.example.com ## agent-network:project:publish \> anypoint-cli-agent-fabric-plugin agent-network project publish \[flags\] Publishes the current agent network project to Anypoint Exchange. The command outputs links and details for all created assets. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--debug

Enable debug mode

--debug

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--organization <value>

Organization name
You can also set it with ANYPOINT_ORG env variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--path <value>

Path to the project
Default: .

--path ./my-agent-network

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

--json

Format output as JSON

--json

### Example $ anypoint-cli-agent-fabric-plugin agent-network project publish ## agent-network:project:undeploy \> anypoint-cli-agent-fabric-plugin agent-network project undeploy \[flags\] Undeploys the agent network application, removing all deployed resources. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--api-version <value>

API version used to discover remotely deployed resources when using --gav
Default: v1

--api-version v1

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--dry-run

Preview the deploy-plane resources that would be undeployed without deleting anything

--dry-run

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--gav <value>

Parent asset GAV (groupId:assetId:version). Discovers deployed resources remotely. Requires an environment to be selected

--gav myOrgId:my-network:0.0.0

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--json

Format output as JSON

--json

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--path <value>

Path to the project. Discovers deployed resources remotely from the project lock file. Requires an environment to be selected. Mutually exclusive with --gav

--path ./my-project

--process-timeout <value>

Process timeout in milliseconds
Default: 900000

--process-timeout 900000

--request-timeout <value>

Request timeout in milliseconds
Default: 60000

--request-timeout 60000

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

### Examples Undeploy from the current project: $ anypoint-cli-agent-fabric-plugin agent-network project undeploy --environment Sandbox Undeploy from a specific project path: $ anypoint-cli-agent-fabric-plugin agent-network project undeploy --path ./my-project --environment Sandbox Undeploy using GAV coordinates: $ anypoint-cli-agent-fabric-plugin agent-network project undeploy --gav myOrgId:my-network:0.0.0 --environment Sandbox Preview resources that would be undeployed (dry run): $ anypoint-cli-agent-fabric-plugin agent-network project undeploy --dry-run --environment Sandbox ## agent-network:project:unpublish \> anypoint-cli-agent-fabric-plugin agent-network project unpublish \[flags\] Removes the agent network assets from Anypoint Exchange. By default performs a soft-delete; use `--hard-delete` for irreversible removal. To prevent orphaned runtime references to deleted Exchange assets, run `agent-network project undeploy` before `unpublish`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--api-version <value>

API version used to discover remotely published assets when using --gav
Default: v1

--api-version v1

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--dry-run

Preview the Exchange assets that would be unpublished without deleting anything

--dry-run

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--gav <value>

Parent asset GAV (groupId:assetId:version). Discovers assets remotely. Use --environment to enable the active API instances safety check

--gav myOrgId:my-network:0.0.0

--hard-delete

Permanently delete assets from Exchange. This cannot be undone

--hard-delete

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--json

Format output as JSON

--json

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--path <value>

Path to the project. Reads the published assets from the project lock file. Select an environment to enable the active API instances safety check. Mutually exclusive with --gav

--path ./my-project

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

### Examples Unpublish with soft-delete: $ anypoint-cli-agent-fabric-plugin agent-network project unpublish --environment Sandbox Unpublish from a specific project path: $ anypoint-cli-agent-fabric-plugin agent-network project unpublish --path ./my-project --environment Sandbox Unpublish with hard-delete (irreversible): $ anypoint-cli-agent-fabric-plugin agent-network project unpublish --hard-delete --environment Sandbox Unpublish using GAV coordinates: $ anypoint-cli-agent-fabric-plugin agent-network project unpublish --gav myOrgId:my-network:0.0.0 --environment Sandbox Preview assets that would be unpublished (dry run): $ anypoint-cli-agent-fabric-plugin agent-network project unpublish --dry-run --environment Sandbox ## agent-network:setup:gateways \> anypoint-cli-agent-fabric-plugin agent-network setup gateways \[flags\] Sets up the agent network environment with the required gateways in the specified target space (private space, RTF, or shared space). This step is required only if the target space doesn’t already have gateways. In the typical (happy path) workflow, you run it once per target space before the first deployment. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

-e, --egress-gw <value>

Name of the egress gateway (separate-gateway mode; requires --ingress-gw)

--egress-gw my-egress

-g, --gateway <value>

Name of the gateway for single-gateway mode (recommended). Mutually exclusive with --ingress-gw and --egress-gw.

--gateway my-gateway

-i, --ingress-gw <value>

Name of the ingress gateway (separate-gateway mode)

--ingress-gw my-ingress

-t, --target-space <value>

Name of the target space (private space, RTF, or shared space) where you set up the agent network environment
Default: agent-network-space

--target-space my-space

--bearer <value>

Bearer token
You can also set it with the ANYPOINT_BEARER variable

--bearer myBearerToken

--client_id <value>

Client ID
You can also set it with the ANYPOINT_CLIENT_ID variable

--client_id myClientID

--client_secret <value>

Client Secret
You can also set it with the ANYPOINT_CLIENT_SECRET variable

--client_secret myClientSecret

--[no-]collectMetrics

Collect metrics
You can also set it with the COLLECT_METRICS variable

--no-collectMetrics

--dont-wait-for-gateways-running

Do not wait for the gateways to be running

--dont-wait-for-gateways-running

--environment <value>

Environment name
You can also set it with the ANYPOINT_ENV variable

--environment Sandbox

--host <value>

Host URL
Default: anypoint.mulesoft.com
You can also set it with the ANYPOINT_HOST variable

--host mycompany.anypoint.mulesoft.com

--organization <value>

Organization name
You can also set it with the ANYPOINT_ORG variable

--organization MyOrg

--password <value>

Password
You can also set it with the ANYPOINT_PASSWORD variable

--password myPassword

--username <value>

Username
You can also set it with the ANYPOINT_USERNAME variable

--username myuser@example.com

### Example $ anypoint-cli-agent-fabric-plugin agent-network setup gateways --target-space my-space --- product: Anypoint CLI version: 3.x --- # CLI for Anypoint DataGraph > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports managing these DataGraph features: - [DataGraph API Source Management](https://docs.mulesoft.com/anypoint-cli/3.x/datagraph-source) - [DataGraph Load Balancers](https://docs.mulesoft.com/anypoint-cli/3.x/datagraph-load-balancer) --- product: Anypoint CLI version: 3.x --- # CLI for Anypoint Platform Accounts > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Show account details

Lists business groups

Show details of a business group

Lists environments

Create new environment

Delete an environment

Shows details of an environment

## account user describe \> account user describe \[options\] This command simply returns the information for your account. This includes your username, your full name, your email address, and the creation date of your account. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## account business-group list \> account business-group list \[options\] This command displays all [business groups](https://docs.mulesoft.com/access-management/business-groups). It returns the name of the business group, the type ('Master' or 'Business unit'), and the ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## account business-group describe \> account business-group describe \[options\] This command displays information on the business group you pass in ``. If `` is not specified, the command describes the business group on the current session. Identifier searches for id match first, then name. > [!NOTE] If your business group or organization name contains spaces, you need to enclose its name > between `"` characters. > > > \> account business-group describe "QA Organization" It returns data such as the owner, the type, subscription information, the entitlements of the group and in which environment is running. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## account environment list \> account environment list \[options\] This command lists all your environments in Anypoint Platform. It returns your environment name, Id and whether it’s sandboxed or not. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## account environment create \> account environment create \[options\] This command creates a new environment using the name you set in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes the `--type` option. Use the `--type` option to specify the environment type. Supported values for environment types are: - `design` - `production` - `sandbox` If no type is specified, the command creates a production environment. ## account environment delete \> account environment delete \[options\] This command deletes the environment specified in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## account environment describe \> account environment describe \[options\] This command returns information about the environment specified in `` If no `` is provided, this command returns information about the current session’s environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Anypoint Platform Accounts > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `account` commands to automate your Anypoint Plaform Account processes. For more information about how to use these commands, refer to the [Access Management documentation](https://docs.mulesoft.com/access-management/).
CommandDescription

Show details of a business group

Lists business groups

Create new environment

Delete an environment

Shows details of an environment

Lists environments

Show account details

## account:business-group:describe \> account:business-group:describe \[flags\] Displays information on the business group you pass in `` If `` is not specified, the command describes the business group on the current session. Identifier searches for ID match first, then name. > [!NOTE] If your business group or organization name contains spaces, enclose its name between `"` > characters. > > > \> account:business-group:describe "QA Organization" Returns the business group owner, type, subscription information, the entitlements of the group and in which environment is running. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:business-group:list \> account:business-group:list \[flags\] Displays all [business groups](https://docs.mulesoft.com/access-management/business-groups). It returns the name of the business group, the type ('Master' or 'Business unit'), and the ID. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:environment:create \> account:environment:create \[flags\] Creates a new environment using the name you set in `` Use the `--type` flag to specify the environment type. Supported values for environment types are: - `design` - `production` - `sandbox` If no type is specified, the command creates a sandbox environment. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:environment:delete \> account:environment:delete \[flags\] Deletes the environment specified in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:environment:describe \> account:environment:describe \[flags\] Returns information about the environment specified in `` If no `` is provided, this command returns information about the current session’s environment. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:environment:list \> account:environment:list \[flags\] Lists all your environments in Anypoint Platform. It returns your environment name, Id and whether it’s sandboxed or not. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## account:user:describe \> account:user:describe \[flags\] Returns your account information, including your username, your full name, your email address, and the creation date of your account. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Anypoint Runtime Fabric > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports managing these Runtime Fabric features: - [Runtime Fabric App Management](https://docs.mulesoft.com/anypoint-cli/3.x/runtime-fabric-apps) - [Runtime Fabric Instances](https://docs.mulesoft.com/anypoint-cli/3.x/rtf-instances) --- product: Anypoint CLI version: 3.x --- # CLI for Anypoint Virtual Private Cloud > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Lists all Anypoint VPCs

Show Anypoint VPC details

Show raw Anypoint VPC JSON response

Create a new Anypoint VPC

Delete an existing Anypoint VPC

Modifies the Anypoint VPC association to Runtime Manager environments.

Modifies the Anypoint VPC association to Runtime Manager environments.

Share an Anypoint VPC with a list of Business Groups.

Share an Anypoint VPC with a list of Business Groups.

Sets the domain names that are resolved using your internal DNS servers. If used with no option, internal DNS will be disabled

Clears the list domain names that are resolved using your internal DNS servers

Show firewall rule for Mule applications in this Anypoint VPC

Add a firewall rule for Mule applications in this Anypoint VPC

Remove a firewall rule for Mule applications in this Anypoint VPC

## cloudhub vpc list \> cloudhub VPC list \[options\] This command lists all available Anypoint VPCs. It returns ID, region, and environment of the network and whether it is the default Anypoint VPC or not. ## cloudhub vpc describe \> cloudhub vpc describe \[options\] This command displays information about the Anypoint VPC that is specified in ``. You can start typing your Anypoint VPC’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc describe-json \> cloudhub vpc describe \[options\] This command displays a raw JSON response of the Anypoint VPC that is specified in ``. You can start typing your Anypoint VPC’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc create \> cloudhub vpc create \[options\] \[environments...\] This command creates an Anypoint VPC using the name in ``, in the region specified in ``, with the [size](https://docs.mulesoft.com/cloudhub/vpc-provisioning-concept#faq_how_to_size_vpc) passed in `` in the form of a Classless Inter-Domain Routing (CIDR) block, using [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks) and associates it to the [environments](https://docs.mulesoft.com/access-management/environments) passed as argument(s) thereafter. > [!NOTE] An Anypoint VPC needs to be bound to a business group within your organization. When > creating an Anypoint VPC, make sure to assign it a business group using the > [business-groups add](#cloudhub-vpc-business-groups-add) command. Besides the default `--help` option, this command also takes the `--default` option. When passed, the Anypoint VPC is created as the default Anypoint VPC for the selected environment. ## cloudhub vpc delete \> cloudhub vpc delete This command deletes the Anypoint VPC specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc environments add \> cloudhub vpc environments add \[options\] \[environments...\] This command assigns the Anypoint VPC defined in `` to the environment(s) passed as argument(s) thereafter. The `--default` option allows setting an Anypoint VPC as the default for the organization, which applies to all environments which don’t have an Anypoint VPC explicitly associated. This command also takes the default `--help` option. ## cloudhub vpc environments remove \> cloudhub vpc environments remove \[options\] \[environments...\] This command removes the Anypoint VPC defined in `` from the environment(s) passed as argument(s) thereafter. Besides the default `--help` option, this command also takes the option `--default`, that removes this Anypoint VPC as the default Anypoint VPC for the environment. ## cloudhub vpc business-groups add \> cloudhub vpc business-groups add \[options\] This command assigns the Anypoint VPC defined in `` to the business group(s) passed as argument(s) thereafter. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc business-groups remove \> cloudhub vpc business-groups remove \[options\] This command removes the Anypoint VPC defined in `` from the business group(s) passed as argument(s) thereafter > [!WARNING] This command does not prompt twice before removing the Anypoint VPC from the specified > resource. If you send a remove instruction, it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc dns-servers set \> cloudhub vpc dns-servers set \[options\] This command sets a list of local host names (internal domain names) to be resolved using your DNS servers for which you need to provide their IP addresses (whether private or public addresses). Whenever those private domains are provided, your worker resolves them using your private DNS, so you can still use the internal host names of your private network. > [!NOTE] This feature is supported by workers running Mule versions 3.5.x, 3.6.x, 3.7.4, 3.8.0-HF1, > 3.8.1 and 3.8.2. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

server

IP address for a DNS server to resolve special domains on. Can be specified up to 3 times

domain

A domain to resolve on the special DNS server list. Can be specified multiple times

You can pass as many domains as you need, and up to 3 IP addresses. For example, `$ cloudhub vpc dns-servers set --domain example.com --server 192.168.1.10 `. Every time you run this command, you overwrite your previous DNS set command. To remove a DNS set, you need to use the [vpc dns-servers unset](#cloudhub-vpc-dns-servers-unset) command. ## cloudhub vpc dns-servers unset \> cloudhub vpc dns-servers unset \[options\] This command clears the list of local host names (internal domain names) to be resolved using your DNS servers from the Anypoint VPC passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc firewall-rules describe \> cloudhub vpc firewall-rules describe This command describes all the firewall rules for the Anypoint VPC defined in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc firewall-rules add \> cloudhub vpc firewall-rules add \[options\] \[toPort\] This command adds a firewall rule to the Anypoint VPC defined in `` using the values set in the variables:
OptionDescriptionExample

vpc

Name of the Anypoint VPC to which this load balancer is bound.
If your Anypoint VPC name contains spaces, you need to pass it between ´"´ characters

vpc-demo

cidrBlock

IP address in CIDR notation for the firewall to allow

192.0.1.0/27

protocol

The protocol to use in the rules. It can be tcp or udp

tcp

fromPort

The port from which the firewall will allow requests. It can go from 0 to 65535

8888

toPort

optional In case a port range is needed, the fromPort and toPort variables define such range

8090

> [!CAUTION] When creating an Anypoint VPC, make sure to allow your outbound address. > By default, all IP addresses are blocked, and you need to authorize IP addresses or range of > addresses to your Anypoint VPC firewall rule. You can start typing your Anypoint VPC’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub vpc firewall-rules remove \> cloudhub vpc firewall-rules remove This command removes the firewall rule from the workers inside the Anypoint VPC specified in `` at the index passed in the ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Anypoint Virtual Private Cloud > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `cloudhub-vpc` commands to automate your Anypoint Virtual Private CLoud processes. For more information about how to use these commands, refer to the [CloudHub documentation](https://docs.mulesoft.com/cloudhub/).
CommandDescription

Shares an Anypoint VPC with a list of Business Groups

Shares an Anypoint VPC with a list of Business Groups

Creates a new Anypoint VPC

Deletes an existing Anypoint VPC

Show Anypoint VPC details

Sets the domain names that are resolved using your internal DNS servers

Clears the list domain names that are resolved using your internal DNS servers

Modifies the Anypoint VPC association to Runtime Manager environments

Modifies the Anypoint VPC association to Runtime Manager environments

Adds a firewall rule for Mule applications in this Anypoint VPC

Shows firewall rule for Mule applications in this Anypoint VPC

Removes a firewall rule for Mule applications in this Anypoint VPC

Lists all Anypoint VPCs

## cloudhub:vpc:business-groups:add \> cloudhub:vpc:business-groups:add \[flags\] Assigns the Anypoint VPC defined in `` to the business group(s) passed as argument(s) thereafter This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:business-groups:remove \> cloudhub:vpc:business-groups:remove \[flags\] Removes the Anypoint VPC defined in `` from the business group(s) passed as argument(s) thereafter > [!WARNING] This command does not prompt twice before removing the Anypoint VPC from the specified > resource. If you send a remove instruction, it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:create \> cloudhub:vpc:create \[flags\] \[environments...\] Creates an Anypoint VPC using the name in ``, in the region specified in ``, with the [size](https://docs.mulesoft.com/cloudhub/vpc-provisioning-concept#faq_how_to_size_vpc) passed in `` in the form of a Classless Inter-Domain Routing (CIDR) block, using [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks) and associates it to the [environments](https://docs.mulesoft.com/access-management/environments) passed as argument(s) thereafter. > [!NOTE] An Anypoint VPC needs to be bound to a business group within your organization. When > creating an Anypoint VPC, make sure to assign it a business group using the > [business-groups add](#cloudhub-vpc-business-groups-add) command. This command accepts the `--default` flag. When passed, the Anypoint VPC is created as the default Anypoint VPC for the selected environment. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:delete \> cloudhub:vpc:delete Deletes the Anypoint VPC specified in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:describe \> cloudhub:vpc:describe \[flags\] Displays information about the Anypoint VPC that is specified in `` Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:dns-servers:set \> cloudhub:vpc:dns-servers:set \[flags\] Sets a list of local host names (internal domain names) to be resolved using your DNS servers for which you need to provide their IP addresses (whether private or public addresses). Whenever those private domains are provided, your worker resolves them using your private DNS, so you can still use the internal host names of your private network. > [!NOTE] This feature is supported by workers running Mule versions 3.5.x, 3.6.x, 3.7.4, 3.8.0-HF1, > 3.8.1 and 3.8.2. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--domain

A domain to resolve on the special DNS server list
Can be specified multiple times

--domain example.com

--server

IP address for a DNS server to resolve special domains on
Can be specified up to 3 times

--server 192.168.1.10

Every time you run this command, you overwrite your previous DNS set command. To remove a DNS set, you need to use the [vpc dns-servers unset](#cloudhub-vpc-dns-servers-unset) command. ## cloudhub:vpc:dns-servers:unset \> cloudhub:vpc:dns-servers:unset \[flags\] Clears the list of local host names (internal domain names) to be resolved using your DNS servers from the Anypoint VPC passed in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:environments:add \> cloudhub:vpc:environments:add \[flags\] \[environments...\] Assigns the Anypoint VPC defined in `` to the environment(s) passed as argument(s) thereafter The `--default` flag allows setting an Anypoint VPC as the default for the organization, which applies to all environments which don’t have an Anypoint VPC explicitly associated. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:environments:remove \> cloudhub:vpc:environments:remove \[flag\] \[environments...\] Removes the Anypoint VPC defined in `` from the environment(s) passed as argument(s) thereafter This command accepts the `--default` flag, that removes this Anypoint VPC as the default Anypoint VPC for the environment. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:firewall-rules:add \> cloudhub:vpc:firewall-rules:add \[flags\] \[toPort\] Adds a firewall rule to the Anypoint VPC defined in `` using the values set in the variables:
ValueDescriptionExample

vpc

Name of the Anypoint VPC to which this load balancer is bound
If your Anypoint VPC name contains spaces, you need to pass it between ´"´ characters

vpc-demo

cidrBlock

IP address in CIDR notation for the firewall to allow

192.0.1.0/27

protocol

The protocol to use in the rules. It can be tcp or udp

tcp

fromPort

The port from which the firewall will allow requests. It can go from 0 to 65535

8888

toPort

optional In case a port range is needed, the fromPort and toPort variables define such range

8090

> [!CAUTION] When creating an Anypoint VPC, make sure to allow your outbound address. > By default, all IP addresses are blocked, and you need to authorize IP addresses or range of > addresses to your Anypoint VPC firewall rule. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:firewall-rules:describe \> cloudhub:vpc:firewall-rules:describe Describes all the firewall rules for the Anypoint VPC defined in `` Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:firewall-rules:remove \> cloudhub:vpc:firewall-rules:remove Removes the firewall rule from the workers inside the Anypoint VPC specified in `` at the index passed in the `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:vpc:list \> cloudhub:vpc:list \[flags\] Lists all available Anypoint VPCs It returns ID, region, and environment of the network and whether it is the default Anypoint VPC or not. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for API Governance > For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Command

Description

governance api evaluate

Evaluates filter criteria to determine which rulesets apply to APIs that meet that criteria

governance api inspect

Inspects an API definition and lists its schemas

governance api validate

Validates an API definition against a specified governance ruleset

governance document

Creates the documentation file for a governance ruleset definition

governance profile create

Creates a governance profile

governance profile delete

Deletes a governance profile

governance profile info

Lists information for a specific governance profile ID

governance profile list

Lists all governance profiles for an organization

governance profile update

Updates a governance profile

governance ruleset clone

Clones a governance ruleset and applies specified updates to rules

governance ruleset info

Lists ruleset rules

governance ruleset init

Initializes a governance ruleset definition based on a data schema

governance ruleset validate

Validates a governance ruleset definition’s format

## governance api evaluate `> governance api evaluate [options]` This command evaluates specified filters to determine the rulesets that would be applied to your APIs that meet that criteria. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--api=<api>

The API project against which you want to evaluate. The command uses the criteria in the project’s exchange.json file.

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters against which to evaluate to identify rulesets. Specify a list of comma-separated filters where each filter has a type and value, in the format filtertype:filtervalue.

Available filters include:

  • scope: API type, rest-api or async-api

  • tag: Tag defined for APIs in Exchange

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value

  • status: Lifecycle state of stable, development, or deprecated

  • env-type: Environment type of any, production, or sandbox

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered. APIs in the development lifecycle cannot have instances.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,status:stable,status:development,status:deprecated,scope:rest-api,scope:async-api,env-type:production

> [!NOTE] This command must be run with either the `criteria` or the `api` option. **Example commands:** ```copy anypoint-cli governance api evaluate --criteria `tag:best,category:API Type:Experience API,scope:rest-api` anypoint-cli governance api evaluate --api ~/Downloads/order-api-1.0.0-raml.zip ``` **Example output:** Ruleset GAV 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.0 8a840abd-e63a-4f8b-87ab-24052eda2017/best-practices-ruleset/1.0.0 68ef9520-24e9-4cf2-b2f5-620025690913/required-examples/1.0.0 ## governance api inspect `> governance api inspect [options] ` This command inspects the API definition passed in `api-definition` and lists all its schemas, such as headers, requests, and response payloads. You can use this schema information in the `governance ruleset init` command. See [governance ruleset init](#governance-ruleset-init). This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example command:** ```copy anypoint-cli governance api inspect my-healthcare-api.yaml ``` **Example schema** ```copy types: patientmultipleBirthBoolean: properties: multipleBirthBoolean: description: Whether patient is part of a multiple birth type: boolean patientmultipleBirthInteger: properties: multipleBirthInteger: description: Whether patient is part of a multiple birth type: integer . . . PatientEntry: type: FHIR_commons.Entry properties: resource: Patient PatientBundle: type: FHIR_commons.Bundle properties: entry?: PatientEntry[] ``` **Example output:** 'patientmultipleBirthBoolean', 'PatientBundle', 'patientmultipleBirthInteger', 'PatientEntry' ## governance api validate `> governance api validate [options] ` This command validates the API definition passed in `api-definition` against specified rulesets. You can specify `api-definition` as one of the following: - An API project ZIP file - An API project folder - An asset identifier for an API project, if the `--remote` option is specified. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. You can specify rulesets against which to validate as follows: - To use an existing `exchange.json` file that defines your API project’s ruleset dependencies, ensure that it is included in the folder or ZIP file that you specify in `api-definition`. If the `exchange.json` file is present, the command downloads all dependencies and validates against the rulesets in the project. - To validate directly against rulesets published in Exchange, use the `--remote-rulesets` option. - To validate against local rulesets, use the `--rulesets` option. > [!NOTE] Duplicate rulesets are not detected, so if you use more than one of the preceding ways of > identifying rulesets in the same command execution, some rulesets may be validated multiple times. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--rulesets <ruleset-yaml-file1>,<ruleset-yaml-file2>,…​

Local ruleset definitions. The rulesets option is followed by a comma-separated list of ruleset YAML files.

--remote-rulesets <ruleset-asset-identifier>,<ruleset-asset-identifier>,…​

Remote ruleset definitions. The remote-rulesets option is followed by a comma-separated list of ruleset asset identifiers. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>,<group_id>/<asset_id>/<version>

--remote

Flag to indicate that the validation should be done against a published API. The value passed in api-definition is the API’s asset identifier. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>

**Example commands:** ```copy anypoint-cli governance api validate ~/Downloads/order-api-1.0.0-raml.zip anypoint-cli governance api validate ~/Downloads/order-api-1.0.0-raml anypoint-cli governance api validate --rulesets /MyRulesets/ruleset1.yaml,/MyRulesets/ruleset2.yaml ~/Downloads/order-api-1.0.0-raml.zip anypoint-cli governance api validate --remote-rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 ~/Downloads/order-api-1.0.0-raml.zip anypoint-cli governance api validate --remote-rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 --remote 8a840abd-e63a-4f8b-87ab-24052eda2017/order-api/1.0.0 ``` **Example output:** For a definition that is conformant to the ruleset: Spec conforms with Ruleset For a definition that is nonconformant to the ruleset: Conforms: false Number of results: 3 **(1)** Functional Validations ---------------------- Constraint: http://a.ml/vocabularies/amf/core#declaration-not-found Severity: Violation Message: not supported scalar for documentation Target: null Range: \[(6,3)-(6,3)\] Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml Conformance Validations **(2)** ----------------------- Constraint: file:///exchange\_modules/68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.0/ruleset.yaml#/encodes/validations/api-must-have-documentation **(3)** Severity: Warning **(4)** Message: Provide the documentation for the API. **(5)** Target: amf://id#2 **(6)** Range: \[(2,0)-(6,4)\] **(7)** Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml **(8)** Constraint: file:///exchange\_modules/8a840abd-e63a-4f8b-87ab-24052eda2017/best-practices-ruleset/1.0.0/bestpractices.yaml#/encodes/validations/api-must-have-documentation Severity: Violation Message: Provide the documentation for the API Target: amf://id#2 Range: \[(2,0)-(6,4)\] Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml
1Total of functional and conformance validation issues found
2Conformance issues section
3Ruleset and rule to which this set of issues applies
4Severity level for the issue
5Description of the issue
6AMF model node ID; for information on the AMF model, see Creating Custom Governance Rulesets
7Beginning line number and column and end line number and column in the API definition where the issue occurs, where column is the offset from the beginning of the line and numbering for the offset starts at 0
8The file in which the issue occurs, either the main file or one of its dependencies
## governance document `> governance document [options] ` This command creates the documentation for the API Governance ruleset definition ZIP file specified in `ruleset`. It puts the documentation in the `doc-file` ZIP file for you to upload and publish to Exchange. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example command:** ```copy anypoint-cli governance document ~/temp/ruleset.yaml ~/temp/ruleset.doc.zip ``` **Example output:** validation name \[ 'scalar-parameters' \] Saving to /Users/janedoe/temp/prof-1.doc.zip ## governance profile create `> governance profile create [options] ` This command creates a governance profile using a string value for the new governance profile name specified in `profile-name`. You must include `ruleset-asset-identifiers`, a comma-separated list of ruleset asset identifiers, each of which is the group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: `//,//`, where `` is a specific version or `latest`. If you use `latest` as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile. You can use one of the `notify` options to configure notifications for the profile you are creating. If you do not use a `notify` option, no notifications are configured by the command. Notifications are off by default. See [Get Exchange Asset Identifiers (GAVs)](#exchange-asset-identifiers). Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters to select the list of APIs to which the profile rulesets will apply. Specify a list of comma-separated filters where each filter has a type and value in the format filtertype:filtervalue.

Available filters include:

  • scope: API type, rest-api or async-api

  • tag: Tag defined for APIs in Exchange

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value

  • status: Lifecycle state of stable, development, or deprecated

  • env-type: Environment type of any, production, or sandbox

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered. APIs in the development lifecycle cannot have instances.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,status:stable,status:development,status:deprecated,scope:rest-api,scope:async-api,env-type:production

--tags <tags> Deprecated

The --criteria option replaces the tags option starting with Anypoint CLI version v3.17.0. In versions prior to v3.17.0, the tags option is followed by a comma separated list of tags to be applied to the new governance profile, formatted as follows: tag1,tag2,tag3

--description <description>

The description option is followed by a string that is the new governance profile’s description.

--notify-contact

Enables notifications and sets the recipient to the contact set for the API.

--notify-publisher

Enables notifications and sets the recipient to the API publisher.

--notify-others <email ID,email ID,…​>

Enables notifications and sets the recipient to the specified list of email IDs.

**Example commands:** ```copy anypoint-cli governance profile create "Open API Best Practices" 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 --criteria "tag:oas,category:API Type:Experience API,status:development,scope:rest-api" --description "Profile for OAS Best Practices" anypoint-cli governance profile create "Anypoint Best Practices" 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-api-best-practices/1.0.1 --criteria "tag:raml tag:oas category:API Type:Experience API,status:stable,scope:rest-api" --description "Profile for REST API Best Practices" --notify-publisher --notify-contact --notify-others a@a.a,b@b.com anypoint-cli governance profile create "Primary API Standards" 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/latest,68ef9520-24e9-4cf2-b2f5-620025690913/myorg-best-practices/1.0.2 --criteria "tag:prim,category:API Type:Experience API,status:stable,scope:rest-api,env-id:0683ce02-cd53-4028-a543-832a38a8af30" --description "Profile for Primary API Standards" ``` **Example output:** Profile Added Id 4f98e59d-8efb-420f-ac95-9cd0af15bd45 Name OAS Best Practices Description Profile for OAS Best Practices Rulesets gav://68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 Filter tag:best ## governance profile delete `> governance profile delete [options] ` This command deletes a specific governance profile specified by `profile-id`. To get this ID, run the `governance profile info` or `governance profile list` command. The `governance profile delete` command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example command:** ```copy anypoint-cli governance profile delete 8ffd463f-86b2-4132-afc6-44d179209362 ``` **Example output:** Profile with id 8ffd463f-86b2-4132-afc6-44d179209362 removed ## governance profile info `> governance profile info [options] ` This command lists all information for a governance profile ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example command:** ```copy anypoint-cli governance profile info 19fb211b-8775-43cc-865a-46228921d6ed --output text ``` **Example output:** Id 19fb211b-8775-43cc-865a-46228921d6ed Name Best Practices Description Best Practices Profile Rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.0 8a840abd-e63a-4f8b-87ab-24052eda2017/best-practices-ruleset/1.0.0 68ef9520-24e9-4cf2-b2f5-620025690913/required-examples/1.0.0 Criteria tag:best,category:API Type:Experience API,scope:rest-api NotificationConfig Contact,Publisher ## governance profile list `> governance profile list [options]` This command lists information for all governance profiles for an organization. You need this information when updating a governance profile. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example command:** ```copy anypoint-cli governance profile list -o text ``` **Example output:** Profile Name Profile Id Minimum Security Requirements 1f418cf4-b870-4b31-8734-f55f28d45f8f Best Practices 19fb211b-8775-43cc-865a-46228921d6ed New Best Practices 4eaf9176-3ef9-4021-a67c-6e4bc10d3763 OAS Standards 51ae8795-2278-407e-942f-becba29af986 ## governance profile update `> governance profile update [options] ` This command updates the governance profile specified in `profile-id`. To get this ID, run the `governance profile info` or `governance profile list` command. You can update the governance profile’s general information, rulesets, filter criteria, and notification configuration. You can use one of the `notify` options to update the notification configuration or turn off notifications. Any changes override existing notification configurations. If you do not use a `notify` option, no changes are made to the notification configuration. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--profile-name <profile-name>

The profile-name option is followed by a string that is the new governance profile name.

--ruleset-gavs <ruleset-gavs>

The ruleset-gavs option is a list with the asset identifier for each ruleset, formatted as follows: <group_id>/<asset_id>/<version>,<group_id>/<asset_id>/<version>, where <version> is a specific version or latest. An asset identifier is a unique group ID, asset ID, and version (GAV) that identifies each asset in Exchange. If you use latest as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile.

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters to select the list of APIs to which the profile rulesets will apply. Specify a list of comma-separated filters where each filter has a type and value in the format filtertype:filtervalue.

Available filters include:

  • scope: API type, rest-api or async-api

  • tag: Tag defined for APIs in Exchange

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value

  • status: Lifecycle state of stable, development, or deprecated

  • env-type: Environment type of any, production, or sandbox

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered. APIs in the development lifecycle cannot have instances.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,status:stable,status:development,status:deprecated,scope:rest-api,scope:async-api,env-type:production

--tags <tags> Deprecated

The --criteria option replaces the tags option starting with Anypoint CLI version v3.17.0. In versions prior to v3.17.0, the tags option is followed by a comma separated list of tags to be applied to the new governance profile, formatted as follows: tag1,tag2,tag3

--description <description>

The description option is followed by a string that is the new governance profile description.

--notify-off

Disables notifications.

--notify-contact

Enables notifications and sets the recipient to the contact set for the API.

--notify-publisher

Enables notifications and sets the recipient to the API publisher.

--notify-others <email ID,email ID,…​>

Enables notifications and sets the recipient to the specified list of email IDs.

**Example commands:** ```copy anypoint-cli governance profile update 4eaf9176-3ef9-4021-a67c-6e4bc10d3763 --profile-name "MyOrg Best Practices" anypoint-cli governance profile update 19fb211b-8775-43cc-865a-46228921d6ed --criteria `tag:best,category:API Type:Experience API,status:development,scope:rest-api` anypoint-cli governance profile update 67eff44a-28a3-43d4-93d9-bddedb92c711 --notify-publisher --notify-contact --notify-others a@a.a,b@b.com anypoint-cli governance profile update 67eff44a-28a3-43d4-93d9-bddedb92c711 --notify-off anypoint-cli governance profile update 19fb211b-8775-43cc-865a-46228921d6ed --criteria `tag:best,category:API Type:Experience API,status:production,scope:rest-api,env-type:production` --ruleset-gavs 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/latest,68ef9520-24e9-4cf2-b2f5-620025690913/myorg-best-practices/latest ``` **Example output:** Profile updated 51f9f94c-fb0c-43d4-9895-22c9e64f1537 ### Limitations You cannot configure notifications using the `governance profile update` command. After you create a profile using the CLI, you can configure notifications by editing the profile in the API Governance console. See [Update a Governance Profile Using the API Governance Console](https://docs.mulesoft.com/api-governance/create-profiles#update-a-governance-profile-using-the-api-governance-console). ## governance ruleset clone `> governance ruleset clone [options] ` This command clones a governance ruleset to create a new custom ruleset and applies specified updates to rules based on the options. The new ruleset is written to standard output. The `new-title` parameter gives the title for the new ruleset. The `new description` parameter gives the description for the new ruleset. > [!TIP] Run the `governance ruleset info` command before running this command to get the rule ID > information to use in this command. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--remote

Indicates that the ruleset to clone is published in Exchange and that the ruleset parameter is the asset identifier for the ruleset. An asset identifier is the group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>

--error=<list_rules_to_move_to_error>

The error option is followed by the rule IDs for the rules to move to the error severity level section of the ruleset YAML.

--warning=<list_rules_to_move_to_warning>

The warning option is followed by the rule IDs for the rules to move to the warning severity level section of the ruleset YAML.

--info=<list_rules_to_move_to_info>

The info option is followed by the rule IDs for the rules to move to the info severity level section of the ruleset YAML.

--remove=<list_rules_to_disable>

The remove option is followed by the rule IDs for the rules to comment out, and therefore effectively disable, in the ruleset YAML.

**Example commands:** ```copy anypoint-cli governance ruleset clone ~/Downloads/ruleset.yaml 'New Ruleset from Clone' 'Cloned from ruleset.yaml' --warning=operation-default-response,operation-operationId > mynewruleset.yaml anypoint-cli governance ruleset clone 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.2 'Custom Anypoint Best Practices' 'Cloned from MuleSoft Anypoint Best Practices' --remote --remove=openapi-tags,operation-tags > my-anypoint-best-practices.yaml ``` ## governance ruleset info `> governance ruleset info [options] ` This command lists the ruleset rules in the ruleset definition passed in the `governance-ruleset` parameter. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--remote

Indicates that the ruleset for which to get information is published in Exchange and that the ruleset parameter is the asset identifier for the ruleset. An asset identifier is the group ID, asset ID, and version (GAV) that uniquely identifies an asset in Exchange. For example: <group_id>/<asset_id>/<version>, where <version> is a specific version or latest. If you use latest as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile.

**Example commands:** ```copy anypoint-cli governance ruleset info ~/temp/myruleset.yaml anypoint-cli governance ruleset info 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.2 --remote anypoint-cli governance ruleset info 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/latest --remote ``` **Example output:** Ruleset /Users/myuser/temp/myruleset.yaml Violation operation-default-response Violation operation-operationId Warning operation-singular-tag Warning tag-description Warning info-contact Warning info-description Warning info-license Warning license-url Warning openapi-tags Warning operation-description Warning operation-tags Warning operation-tag-defined ## governance ruleset init `> governance ruleset init [options] ` This command initializes a ruleset based on the data schema passed in the `schema` parameter. Besides the default options `--help`, `-f/--fields` and `-o/--output` options, this command also takes:
OptionDescription

--types <types>

The types option gives the target types to export as rules. You can use the governance api inspect command to identify the types to specify in this option. See governance api inspect.

--name <name>

The name option is the name of the ruleset. Defaults to GeneratedRuleset.

**Example command:** ```copy anypoint-cli governance ruleset init --types patientmultipleBirthBoolean,patientBundle,patientmultipleBirthInteger --name=my-ruleset mydataschema ``` ## governance ruleset validate `> governance ruleset validate [options] ` This command validates the ruleset definitions passed using the `governance-ruleset` parameter. You can pass one of the following as the `governance-ruleset` parameter: - A ruleset definition YAML file - A ZIP file that contains an API project with an `exchange.json` file that specifies the ruleset as the main file - A folder that contains an API project with an `exchange.json` file that specifies the ruleset as the main file This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. **Example commands:** ```copy anypoint-cli governance ruleset validate ~/temp/myruleset.yaml anypoint-cli governance ruleset validate ~/temp/myruleset.zip anypoint-cli governance ruleset validate ~/temp/myrulesetfolder ``` **Example output for a valid ruleset:** Ruleset conforms with Dialect **Example output for a nonvalid ruleset:** Ruleset does not conform with Dialect ModelId: file:///Users/janedoe/temp/prof-1-bad.yaml Profile: Validation Profile 1.0 Conforms: false Number of results: 1 Level: Violation - Constraint: http://a.ml/amf/default\_document#/declarations/profileNode\_profile\_required\_validation Message: Property 'profile' is mandatory Severity: Violation Target: file:///Users/janedoe/temp/prof-1-bad.yaml#/encodes Property: http://schema.org/name Range: \[(3,0)-(11,19)\] Location: file:///Users/janedoe/temp/prof-1-bad.yaml ### Get Exchange Asset Identifiers (GAVs) To get the GAVs for Exchange assets: - If you are using the Exchange CLI, run the `anypoint-cli exchange asset list` command. - If you are using the Exchange web UI, select the asset in Exchange and then copy the group ID and asset ID from the URL. Add the version node for the version you are viewing. For example, the GAV for the OpenAPI Best Practices ruleset in Exchange is `68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for API Governance > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `governance` commands to automate your API Governance processes. For more information about how to use these commands, refer to the [API Governance documentation](https://docs.mulesoft.com/api-governance/).

Command

Description

governance:api:evaluate

Evaluates filter criteria to determine which rulesets apply to APIs that meet that criteria

governance:api:inspect

Inspects an API specification and lists its schemas

governance:api:validate

Validates an API specification against a specified governance ruleset

governance:document

Creates the documentation file for a governance ruleset definition

governance:profile:create

Creates an active governance profile

governance:profile:delete

Deletes a governance profile

governance:profile:info

Lists information for a specific governance profile ID

governance:profile:list

Lists all governance profiles for an organization

governance:profile:update

Updates a governance profile

governance:ruleset:clone

Clones a governance ruleset and applies specified updates to rules

governance:ruleset:classes

Lists the target classes available for governance rulesets, grouped by prefix

governance:ruleset:completions

Returns context-aware completions at a cursor position in a ruleset YAML file

governance:ruleset:constraints

Lists valid constraints by property type

governance:ruleset:domains

Lists available metadata domains for governance rulesets

governance:ruleset:generate

Returns context and instructions for generating a ruleset from a natural-language description

governance:ruleset:info

Lists ruleset rules

governance:ruleset:init

Initializes a governance ruleset definition based on a data schema

governance:ruleset:properties

Lists the properties and types for a target class

governance:ruleset:resolve

Resolves a user-facing term to its canonical target class and property path

governance:ruleset:simplify

Simplifies a ruleset by flattening nested paths and removing redundant logical wrappers

governance:ruleset:validate

Validates a governance ruleset definition’s format

governance:ruleset:validate-authoring

Validates a ruleset against the authoring model

governance:ruleset:version

Shows the governance ruleset tooling version

## governance:api:evaluate `> governance:api:evaluate [flags]` Evaluates specified filters to determine the rulesets that would be applied to your APIs that meet that criteria. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--api=<api>

The API project against which you want to evaluate. The command uses the criteria in the project’s exchange.json file.

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters to select the list of APIs to which the profile rulesets apply. Specify a list of comma-separated filters where each filter has a type and value in the format filtertype:filtervalue.

Available filters include:

  • scope: API type. Supported values are: async-api, http-api, or rest-api.

  • tag: Tag defined for APIs in Exchange.

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value.

  • env-type: Environment type. Supported values are: any, production, or sandbox.

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,scope:rest-api,scope:async-api,env-type:production

> [!NOTE] This command must be run with either the `--criteria` or the `--api` flag. **Example commands:** `anypoint-cli-v4 governance:api:evaluate --criteria "tag:best,category:API Type:Experience API,scope:rest-api"` `anypoint-cli-v4 governance:api:evaluate --api order-api-1.0.0-raml.zip` where `order-api-1.0.0-raml.zip` contains an API and its `exchange.json` file **Example output:** ╔════════════════════════════════════════════════════════════════════╗ ║ Ruleset GAV ║ ╟────────────────────────────────────────────────────────────────────╢ ║ 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.5.1 ║ ╟────────────────────────────────────────────────────────────────────╢ ║ 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.1 ║ ╚════════════════════════════════════════════════════════════════════╝ ## governance:api:inspect `> governance:api:inspect [flags] ` Inspects the API specification passed in `api-specification` and lists all its schemas, such as headers, requests, and response payloads. You can use this schema information in the `governance:ruleset:init` command. See [governance:ruleset:init](#governance-ruleset-init). This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:api:inspect my-healthcare-api.yaml ``` **Example schema** ```copy types: patientmultipleBirthBoolean: properties: multipleBirthBoolean: description: Whether patient is part of a multiple birth type: boolean patientmultipleBirthInteger: properties: multipleBirthInteger: description: Whether patient is part of a multiple birth type: integer . . . PatientEntry: type: FHIR_commons.Entry properties: resource: Patient PatientBundle: type: FHIR_commons.Bundle properties: entry?: PatientEntry[] ``` **Example output:** 'patientmultipleBirthBoolean', 'PatientBundle', 'patientmultipleBirthInteger', 'PatientEntry' ## governance:api:validate `> governance:api:validate [flags]` Validates the API specification passed in `api-specification` against specified rulesets. > [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use "-- " (two dashes followed by a space) before the > parameter. You can specify `api-specification` as one of the following: - An API project ZIP file - An API project folder - An asset identifier for an API project, if the `--remote` flag is specified. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. You can specify rulesets against which to validate as follows: - To use an existing `exchange.json` file that defines your API project’s ruleset dependencies, ensure that the `exchange.json` file is included in the folder or ZIP file that you specify in `api-specification`. If the `exchange.json` file is present, the command downloads all of the ruleset dependencies and validates against those rulesets. The ruleset dependencies are present in the `exchange.json` file only if dependencies are defined for that API project in API Designer. See [Add Rulesets to Your Project](https://docs.mulesoft.com/api-governance/find-conformance-issues#add-rulesets). - To validate directly against rulesets published in Exchange, use the `--remote-rulesets` flag. - To validate against local rulesets, use the `--rulesets` flag. > [!NOTE] Duplicate rulesets are not detected, so if you use more than one of the preceding ways of > identifying rulesets in the same command execution, some rulesets might be validated multiple > times. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--rulesets <ruleset-yaml-file1> <ruleset-yaml-file2> …​

Local ruleset definitions. The rulesets flag is followed by a list of ruleset YAML files separated by spaces.

--remote-rulesets <ruleset-asset-identifier> <ruleset-asset-identifier> …​

Remote ruleset definitions. The remote-rulesets flag is followed by a list of ruleset asset identifiers separated by spaces. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>,<group_id>/<asset_id>/<version>

--remote

Flag to indicate that the validation should be done against a published API. The value passed in api-specification is the API’s asset identifier. An asset identifier is a group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>

**Example commands:** ```copy anypoint-cli-v4 governance:api:validate /MyApis/order-api-1.0.0-raml.zip anypoint-cli-v4 governance:api:validate /MyApis/order-api-1.0.0-raml anypoint-cli-v4 governance:api:validate /MyApis/order-api-1.0.0-raml.zip --rulesets /MyRulesets/ruleset1.yaml /MyRulesets/ruleset2.yaml anypoint-cli-v4 governance:api:validate /MyApis/order-api-1.0.0-raml.zip --remote-rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 anypoint-cli-v4 governance:api:validate 8a840abd-e63a-4f8b-87ab-24052eda2017/order-api/1.0.0 --remote-rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 --remote ``` **Example output:** For a specification that is conformant to the ruleset: Spec conforms with Ruleset For a specification that is nonconformant to the ruleset: Conforms: false Number of results: 3 **(1)** Functional Validations ---------------------- Constraint: http://a.ml/vocabularies/amf/core#declaration-not-found Severity: Violation Message: not supported scalar for documentation Target: null Range: \[(6,3)-(6,3)\] Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml Conformance Validations **(2)** ----------------------- Constraint: file:///exchange\_modules/68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.0/ruleset.yaml#/encodes/validations/api-must-have-documentation **(3)** Severity: Warning **(4)** Message: Provide the documentation for the API. **(5)** Target: amf://id#2 **(6)** Range: \[(2,0)-(6,4)\] **(7)** Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml **(8)** Constraint: file:///exchange\_modules/8a840abd-e63a-4f8b-87ab-24052eda2017/best-practices-ruleset/1.0.0/bestpractices.yaml#/encodes/validations/api-must-have-documentation Severity: Violation Message: Provide the documentation for the API Target: amf://id#2 Range: \[(2,0)-(6,4)\] Location: file:///Users/myuser/Downloads/order-api-1.0.0-raml/order-api-1.0.0-raml
1Total of functional and conformance validation issues found
2Conformance issues section
3Ruleset and rule to which this set of issues applies
4Severity level for the issue
5Description of the issue
6AMF model node ID; for information on the AMF model, see Creating Custom Governance Rulesets
7Beginning line number and column and end line number and column in the API specification where the issue occurs, where column is the offset from the beginning of the line and numbering for the offset starts at 0
8The file in which the issue occurs, either the main file or one of its dependencies
## governance:document `> governance:document [flags] ` Creates the documentation for the API Governance ruleset definition ZIP file specified in `ruleset`. It puts the documentation in the `doc-file` ZIP file for you to upload and publish to Exchange. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:document /myrulesetfolder/mynewruleset.yaml /myrulesetfolder/ruleset.doc.zip ``` **Example output:** validation name \[ 'security-fields-operation-empty' \] validation name \[ 'access-tokens-oauth2-cleartext' \] validation name \[ 'insecure-oauth2-grants' \] validation name \[ 'api-keys-in-cookie' \] validation name \[ 'api-keys-in-query' \] validation name \[ 'api-keys-in-header' \] validation name \[ 'api-negotiates-authentication' \] validation name \[ 'insecure-basic-auth' \] validation name \[ 'bearer-token-cleartext' \] validation name \[ 'http-token-cleartext' \] validation name \[ 'oauth1-deprecated' \] validation name \[ 'oauth2-redirections-non-encrypted' \] validation name \[ 'unknown-security-scheme' \] validation name \[ 'valid-server-urltemplate' \] validation name \[ 'valid-oauth2-redirection-urls' \] Saving to myRulesetFolder/ruleset.doc.zip ## governance:profile:create `> governance:profile:create [flags] ` Creates an active governance profile using a string value for the new governance profile name specified in `profile-name`. You must include `ruleset-asset-identifiers`, a comma-separated list of ruleset asset identifiers, each of which is the group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: `//,//`, where `` is a specific version or `latest`. If you use `latest` as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile. See [Get Exchange Asset Identifiers](#exchange-asset-identifiers). You can use one of the `notify` flags to configure notifications for the profile you are creating. If you do not use a `notify` flag, no notifications are configured by the command. Notifications are off by default. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters to select the list of APIs to which the profile rulesets apply. Specify a list of comma-separated filters where each filter has a type and value in the format filtertype:filtervalue.

Available filters include:

  • scope: API type. Supported values are: async-api, http-api, or rest-api.

  • tag: Tag defined for APIs in Exchange.

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value.

  • env-type: Environment type. Supported values are: any, production, or sandbox.

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,scope:rest-api,scope:async-api,env-type:production

--description <description>

The description flag is followed by a string that is the new governance profile’s description.

--notify-contact

Enables notifications and sets the recipient to the contact set for the API.

--notify-publisher

Enables notifications and sets the recipient to the API publisher.

--notify-others <email ID,email ID,…​>

Enables notifications and sets the recipient to the specified list of email IDs.

**Example commands:** ```copy anypoint-cli-v4 governance:profile:create "OAS Best Practices" 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 --criteria "tag:oas,category:API Type:Experience API,scope:rest-api" --description "Profile for OAS Best Practices" anypoint-cli-v4 governance:profile:create "Open API Best Practices" 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 --criteria "tag:oas,category:API Type:Experience API,scope:rest-api" --description "Profile for OAS Best Practices" anypoint-cli-v4 governance:profile:create "Anypoint Best Practices" 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-api-best-practices/1.0.1 --criteria "tag:raml tag:oas category:API Type:Experience API,scope:rest-api" --description "Profile for REST API Best Practices" --notify-publisher --notify-contact --notify-others a@a.a,b@b.com anypoint-cli-v4 governance:profile:create "Primary API Standards" 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/latest,68ef9520-24e9-4cf2-b2f5-620025690913/myorg-best-practices/1.0.2 --criteria "tag:prim,category:API Type:Experience API,scope:rest-api" --description "Profile for Primary API Standards" ``` **Example output:** Profile Added Id 4f98e59d-8efb-420f-ac95-9cd0af15bd45 Name OAS Best Practices Description Profile for OAS Best Practices Rulesets gav://68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1 Filter tag:best ## governance:profile:delete `> governance:profile:delete [flags] ` Deletes a specific governance profile specified by `profile-id`. To get this ID, run the `governance:profile:info` or `governance:profile:list` command. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:profile:delete 8ffd463f-86b2-4132-afc6-44d179209362 ``` **Example output:** Profile with id 8ffd463f-86b2-4132-afc6-44d179209362 removed ## governance:profile:info `> governance:profile:info [flags] ` Lists all information for a governance profile ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--output <output-format>

Format for the command output. Supported values are table (default) and json.

**Example command:** ```copy anypoint-cli-v4 governance:profile:info 19fb211b-8775-43cc-865a-46228921d6ed ``` **Example output:** Id 19fb211b-8775-43cc-865a-46228921d6ed Name Best Practices Description Best Practices Profile Rulesets 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.0 8a840abd-e63a-4f8b-87ab-24052eda2017/best-practices-ruleset/1.0.0 68ef9520-24e9-4cf2-b2f5-620025690913/required-examples/1.0.0 Criteria tag:best,category:API Type:Experience API,scope:rest-api NotificationConfig Contact,Publisher ## governance:profile:list `> governance:profile:list [flags]` Lists information for all governance profiles for an organization. You need this information when updating a governance profile. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--output <output-format>

Format for the command output. Supported values are table (default) and json.

**Example command:** ```copy anypoint-cli-v4 governance:profile:list ``` **Example output:** Profile Name Profile Id Minimum Security Requirements 1f418cf4-b870-4b31-8734-f55f28d45f8f Best Practices 19fb211b-8775-43cc-865a-46228921d6ed New Best Practices 4eaf9176-3ef9-4021-a67c-6e4bc10d3763 OAS Standards 51ae8795-2278-407e-942f-becba29af986 ## governance:profile:update `> governance:profile:update [flags] ` Updates the governance profile specified in `profile-id`. To get this ID, run the `governance:profile:info` or `governance:profile:list` command. You can update the governance profile’s general information, rulesets, filter criteria, and notification configuration. You can use one of the `notify` flags to update the notification configuration or turn off notifications. Any changes override existing notification configurations. If you do not use a `notify` flag, no changes are made to the notification configuration. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--profile-name <profile-name>

The profile-name flag is followed by a string that is the new governance profile name.

--ruleset-gavs <ruleset-gavs>

The ruleset-gavs flag is followed by a list with the asset identifier for each ruleset, formatted as follows: <group_id>/<asset_id>/<version>,<group_id>/<asset_id>/<version>, where <version> is a specific version or latest. An asset identifier is a unique group ID, asset ID, and version (GAV) that identifies each asset in Exchange. If you use latest as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile.

--criteria <filtertype:filtervalue>,…​

Enables you to apply filters to select the list of APIs to which the profile rulesets apply. Specify a list of comma-separated filters where each filter has a type and value in the format filtertype:filtervalue.

Available filters include:

  • scope: API type. Supported values are: async-api, http-api, or rest-api.

  • tag: Tag defined for APIs in Exchange.

  • category: Category defined for APIs in Exchange, where the filter value is specified in two parts as categoryName:value.

  • env-type: Environment type. Supported values are: any, production, or sandbox.

  • env-id: The ID for the environment name in API Manager. You can get this value using API Manager > Environment information. See Reviewing Environment Concepts.

    If env-type or env-id is used, the API Instance filter is set in the profile, so that only APIs that have instances are filtered.

    To deselect the API Instance filter in the profile using the CLI, update the profile using the --criteria flag with neither env-type nor env-id.

Example: tag:tag1,category:category1:value,category:category2:value2,scope:rest-api,scope:async-api,env-type:production

--description <description>

The description flag is followed by a string that is the new governance profile description.

--notify-off

Disables notifications.

--notify-contact

Enables notifications and sets the recipient to the contact set for the API.

--notify-publisher

Enables notifications and sets the recipient to the API publisher.

--notify-others <email ID,email ID,…​>

Enables notifications and sets the recipient to the specified list of email IDs.

**Example commands:** ```copy anypoint-cli-v4 governance:profile:update 4eaf9176-3ef9-4021-a67c-6e4bc10d3763 --profile-name "MyOrg Best Practices" anypoint-cli-v4 governance:profile:update 19fb211b-8775-43cc-865a-46228921d6ed --criteria `tag:best,category:API Type:Experience API,scope:rest-api` anypoint-cli-v4 governance profile update 67eff44a-28a3-43d4-93d9-bddedb92c711 --notify-publisher --notify-contact --notify-others a@a.a,b@b.com anypoint-cli-v4 governance profile update 67eff44a-28a3-43d4-93d9-bddedb92c711 --notify-off anypoint-cli-v4 governance profile update 19fb211b-8775-43cc-865a-46228921d6ed --criteria `tag:best,category:API Type:Experience API,scope:rest-api,env-type:production` --ruleset-gavs 68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/latest,68ef9520-24e9-4cf2-b2f5-620025690913/myorg-best-practices/latest ``` **Example output:** Profile updated 51f9f94c-fb0c-43d4-9895-22c9e64f1537 ## governance:ruleset:classes `> governance:ruleset:classes [flags]` Lists the target classes available for governance rulesets, grouped by prefix. Prints the total count of targetable classes. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--domain <domain>

Filters the list to classes belonging to the specified domain. Supported values are api-spec, mcp, api-project, governance, and community. To see all available domains, run the governance:ruleset:domains command.

**Example commands:** ```copy anypoint-cli-v4 governance:ruleset:classes anypoint-cli-v4 governance:ruleset:classes --domain api-spec ``` ## governance:ruleset:clone `> governance:ruleset:clone [flags] ` Clones a governance ruleset to create a new custom ruleset and applies specified updates to rules based on the flags. The new ruleset is written to standard output. The `new-title` parameter gives the title for the new ruleset. The `new description` parameter gives the description for the new ruleset. > [!TIP] Run the `governance:ruleset:info` command before running this command to get the rule ID > information to use in this command. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--remote

Indicates that the ruleset to clone is published in Exchange and that the ruleset parameter is the asset identifier for the ruleset. An asset identifier is the group ID, asset ID, and version (GAV) that uniquely identifies each asset in Exchange. For example: <group_id>/<asset_id>/<version>

--error=<list_rules_to_move_to_error>

The error flag is followed by the rule IDs for the rules to move to the error severity level section of the ruleset YAML.

--warning=<list_rules_to_move_to_warning>

The warning flag is followed by the rule IDs for the rules to move to the warning severity level section of the ruleset YAML.

--info=<list_rules_to_move_to_info>

The info flag is followed by the rule IDs for the rules to move to the info severity level section of the ruleset YAML.

--remove=<list_rules_to_disable>

The remove flag is followed by the rule IDs for the rules to comment out, and therefore effectively disable, in the ruleset YAML.

**Example commands:** ```copy anypoint-cli-v4 governance:ruleset:clone ~/Downloads/ruleset.yaml 'New Ruleset from Clone' 'Cloned from ruleset.yaml' --warning=operation-default-response,operation-operationId > mynewruleset.yaml anypoint-cli-v4 governance:ruleset:clone 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.2 'Custom Anypoint Best Practices' 'Cloned from MuleSoft Anypoint Best Practices' --remote --remove=openapi-tags,operation-tags > my-anypoint-best-practices.yaml ``` ## governance:ruleset:completions `> governance:ruleset:completions [flags] ` Returns context-aware completions at a specific cursor position in the ruleset YAML file specified in `ruleset`. Intended for editor and tooling integration. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--offset <offset>

The cursor offset in the file. Required.

--line-text <line-text>

The current line text up to the cursor. Required.

**Example command:** ```copy anypoint-cli-v4 governance:ruleset:completions my-ruleset.yaml --offset 120 --line-text " targetClass: " ``` ## governance:ruleset:constraints `> governance:ruleset:constraints [flags]` Lists the valid constraints for each property type: `scalar`, `node`, `scalarArray`, and `nodeArray`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--type <type>

Filters the list to constraints for the specified property type. Supported values are scalar, node, scalarArray, and nodeArray.

**Example commands:** ```copy anypoint-cli-v4 governance:ruleset:constraints anypoint-cli-v4 governance:ruleset:constraints --type scalar anypoint-cli-v4 governance:ruleset:constraints --type nodeArray ``` ## governance:ruleset:domains `> governance:ruleset:domains` Lists the available metadata domains for governance rulesets. For each domain, the command prints the name, description, class count, and (when applicable) spec kind. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:ruleset:domains ``` ## governance:ruleset:generate `> governance:ruleset:generate [flags] ` Returns the context and step-by-step instructions for generating a governance ruleset in Validation Profile 1.0 YAML format from the natural-language description provided in `intent`. When an API spec is provided, the command detects the spec type to include as context. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--api-spec <api-spec>

Path to an API spec for context extraction. The command detects whether the spec is RAML or OpenAPI.

--attempt <attempt>

Retry attempt number. Values greater than 1 append a note to fix errors from the previous attempt. Defaults to 1.

**Example commands:** ```copy anypoint-cli-v4 governance:ruleset:generate "Every operation must have a description" anypoint-cli-v4 governance:ruleset:generate "Require rate-limit policy" --api-spec openapi.yaml ``` ## governance:ruleset:info `> governance:ruleset:info [flags]` Lists the ruleset rules in the ruleset definition passed in the `governance-ruleset` parameter. > [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use "-- " (two dashes followed by a space) before the > parameter. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--remote

Indicates that the ruleset for which to get information is published in Exchange and that the ruleset parameter is the asset identifier for the ruleset. An asset identifier is the group ID, asset ID, and version (GAV) that uniquely identifies an asset in Exchange. For example: <group_id>/<asset_id>/<version>, where <version> is a specific version or latest. If you use latest as the version, the profile automatically uses the latest version of the ruleset when versions are published after you create the profile.

**Example commands:** ```copy anypoint-cli-v4 governance:ruleset:info myrulesetfolder/myruleset.yaml anypoint-cli-v4 governance:ruleset:info 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/1.0.2 --remote anypoint-cli-v4 governance:ruleset:info 68ef9520-24e9-4cf2-b2f5-620025690913/anypoint-best-practices/latest --remote ``` **Example output:** Ruleset myrulesetfolder/myruleset.yaml Ruleset conforms with Dialect ╔═══════════╤═══════════════════════════════════╗ ║ Violation │ security-fields-operation-empty ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ access-tokens-oauth2-cleartext ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ insecure-oauth2-grants ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ api-keys-in-cookie ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ api-keys-in-query ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ api-keys-in-header ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ api-negotiates-authentication ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ insecure-basic-auth ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ bearer-token-cleartext ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ http-token-cleartext ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ oauth2-redirections-non-encrypted ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ unknown-security-scheme ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ valid-server-urltemplate ║ ╟───────────┼───────────────────────────────────╢ ║ Violation │ valid-oauth2-redirection-urls ║ ╟───────────┼───────────────────────────────────╢ ║ Warning │ unknown-security-scheme ║ ╟───────────┼───────────────────────────────────╢ ║ Warning │ oauth1-deprecated ║ ╚═══════════╧═══════════════════════════════════╝ ## governance:ruleset:init `> governance:ruleset:init [flags] ` Initializes a ruleset based on the data schema passed in the `schema` parameter. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescription

--types <types>

The types flag gives the target types to export as rules. You can use the governance:api:inspect command to identify the types to specify for this flag. See governance:api:inspect.

--name <name>

The name flag is the name of the ruleset. This defaults to GeneratedRuleset.

**Example command:** ```copy anypoint-cli-v4 governance:ruleset:init --types patientmultipleBirthBoolean,patientBundle,patientmultipleBirthInteger --name=my-ruleset mydataschema ``` ## governance:ruleset:properties `> governance:ruleset:properties [flags] ` Lists the properties and their types for the target class specified in `targetClass`. Property types are `scalar`, `node`, `scalarArray`, `nodeArray`, or `dynamic`. For node types, the range (target class) is also shown. Use the `governance:ruleset:classes` command to see available target classes. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example commands:** ```copy anypoint-cli-v4 governance:ruleset:properties apiContract.Operation anypoint-cli-v4 governance:ruleset:properties mcp.Tool ``` ## governance:ruleset:resolve `> governance:ruleset:resolve [flags] ` Resolves the user-facing term specified in `term` to its canonical target class and property path. Matching is fuzzy: case-insensitive, ignoring spaces, dashes, and underscores. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example commands:** ```copy anypoint-cli-v4 governance:ruleset:resolve consumerUrl anypoint-cli-v4 governance:ruleset:resolve rate-limit-policy ``` ## governance:ruleset:simplify `> governance:ruleset:simplify [flags] ` Simplifies the ruleset YAML file specified in `ruleset` by flattening nested property paths and removing redundant logical wrappers. The command lists the simplifications applied and then prints the simplified ruleset YAML to standard output. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:ruleset:simplify my-ruleset.yaml ``` ## governance:ruleset:validate `> governance:ruleset:validate [flags] ` Validates the ruleset definitions passed using the `governance-ruleset` parameter. You can pass one of the following as the `governance-ruleset` parameter: - A ruleset definition YAML file - A ZIP file that contains an API project with an `exchange.json` file that specifies the ruleset as the main file - A folder that contains an API project with an `exchange.json` file that specifies the ruleset as the main file This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example commands:** ```copy anypoint-cli-v4 governance:ruleset:validate ~/myrulesetfolder/myruleset.yaml anypoint-cli-v4 governance:ruleset:validate ~/myrulesetfolder/myruleset.zip anypoint-cli-v4 governance:ruleset:validate ~/myrulesetfolder/myrulesetfolder ``` **Example output for a valid ruleset:** Ruleset User/myuser/myrulesetfolder/myruleset.yaml Ruleset conforms with Dialect **Example output for a nonvalid ruleset:** Ruleset does not conform with Dialect ModelId: file:///Users/myuser/myrulesetfolder/prof-1-bad.yaml Profile: Validation Profile 1.0 Conforms: false Number of results: 1 Level: Violation - Constraint: http://a.ml/amf/default\_document#/declarations/profileNode\_profile\_required\_validation Message: Property 'profile' is mandatory Severity: Violation Target: file:///Users/myuser/myrulesetfolder/prof-1-bad.yaml#/encodes Property: http://schema.org/name Range: \[(3,0)-(11,19)\] Location: file:///Users/myuser/myrulesetfolder/prof-1-bad.yaml ## governance:ruleset:validate-authoring `> governance:ruleset:validate-authoring [flags] ` Validates the ruleset YAML file specified in `ruleset` against the authoring model, checking target classes, property paths, constraint compatibility, and severity assignments. Prints diagnostics with line numbers. The command exits with code `1` if any errors are found; warnings and informational messages do not cause a failure. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:ruleset:validate-authoring my-ruleset.yaml ``` ## governance:ruleset:version `> governance:ruleset:version` Shows the governance ruleset tooling version. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). **Example command:** ```copy anypoint-cli-v4 governance:ruleset:version ``` ### Get Exchange Asset Identifiers To get the full asset identifier (group ID/asset ID/version) for Exchange assets: - If you are using Anypoint CLI, run the `exchange:asset:list` command. - If you are using the Anypoint Platform web UI, select the asset in Exchange and copy the group ID and asset ID from the URL. Then, add the version node for the version you are viewing. For example, the asset identifier for the OpenAPI Best Practices ruleset in Exchange is `68ef9520-24e9-4cf2-b2f5-620025690913/open-api-best-practices/1.0.1`. --- product: Anypoint CLI version: 3.x --- # CLI for API Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Creates an API instance alert

Lists alerts for an API instance

Changes the asset version for an API instance by choosing a new version from Exchange

Classifies an API instance in a given environment

Deletes an API

Deploys an API to CloudHub, hybrid server, or Runtime Fabric

Deprecates an API instance

Shows details of an API

Downloads the API proxy ZIP file to a local directory

Edits an API instance

Lists all APIs in API Manager 2.x

Manages a new API, API version, or new API instance with an asset from Exchange

Promotes an API instance from source environment

Redeploys an API to CloudHub, Hybrid server, or Runtime Fabric

Undeprecates an API instance

Deletes a given API contract

Lists all contracts to a given API instance.

Applies a policy to a given API instance

Shows the description and available configuration properties of a given policy template

Disables policy from a given API instance

Edits the policy configuration of a given API instance

Enables a policy on a given API instance

Lists policies

Removes a policy from a given API instance

Creates an SLA tier

Copies an SLA tier from source to a target API Instance

Deletes an SLA tier from an API instance

Lists the SLA tiers of an API instance

## api-mgr alert add \> api-mgr alert add \[options\] This command creates an API instance alert with the name passed in `name` for the API Instance Id passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

enabled

Sets whether the alert should be enabled or not.
Possible values are true or false.

severity <val>

Alert severity.
Supported values: Info, Warning, Critical.

type <val>

Alert type/condition.
Supported values: request-count, response-code, policy-violation, response-time

operator <val>

Condition operator explaining values relation to threshold.
Supported values: gt, lt, eq

threshold <num>

Condition occurrences threshold number.

periods <num>

Number of consecutive periods condition should occur for.

duration <num>

Condition occurrence period duration.

durationUnit <val>

Condition occurrence period duration unit.
Supported values: days, hours, minutes.

recipient [username]

Username to send alert notification to.
You can pass this option multiple times to specify multiple usernames.

email [emailAddress]

Email to send alert notification to.
You can pass this option multiple times to specify multiple emails.

responseTime [num]

Response time to trigger response-time alert type.

responseCode [code]

Response codes to trigger response-code alert type.
You can pass this option multiple times to specify multiple codes.

policyId [num]

ID of a policy applied to API instance to trigger response-code alert type.

## api-mgr alert list \> api-mgr alert list \[options\] Lists alerts for the API instance passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--offset

Offsets the amount of APIs passed

api-mgr alert list --offset 3

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

api-mgr alert list --sort updatedDate

## api-mgr api change-specification \> api-mgr api change-specification \[options\] Changes the asset version for the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr api classify \> api-mgr api classify \[options\] Classifies the API instance passed in `` in the environment passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr api delete \> api-mgr api delete \[options\] This command deletes the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr api deploy \> api-mgr api deploy \[options\] This command deploys the API instance passed in to the deployment target specified using the options described below. > [!NOTE] This command is only supported for endpoints with proxy. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

target <id>

Hybrid or RTF deployment target ID.

api-mgr api deploy --target 1598794 643404

applicationName <name>

Application name

api-mgr api deploy --applicationName myMuleApp 643404

environmentName <name>

Target environment name. Should only be used when deploying APIs from unclassified environments.

api-mgr api deploy --environmentName TestEnv 643404

gatewayVersion <version>

The CloudHub Gateway version

api-mgr api deploy --gatewayVersion: 9.9.9.9 643404

overwrite

Update application if it exists.
It takes true or false values.

api-mgr api deploy --overwrite: true 643404

## api-mgr api deprecate \> api-mgr api deprecate \[options\] Deprecates the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr api describe \> api-mgr api describe \[options\] Shows details of the API Instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr api download-proxy \> api-mgr api download-proxy \[options\] This command downloads the API proxy ZIP file of the API Instance passed in `` to a local directory specified in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes a `gatewayVersion` option to specify the gateway version you want to download. For example: `api-mgr api download-proxy --gatewayVersion: 4.0.1 643404 /tmp/` ## api-mgr api edit \> api-mgr api edit \[options\] Edits the API instance passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

-p, --withProxy

Indicates whether the endpoint should use a proxy.
This option takes true or false values.

-r, --referencesUserDomain

Indicates whether a proxy should reference a user domain.
This option takes true or false values.

-m, --muleVersion4OrAbove

Indicates whether you are managing this API in Mule 4 or above.
This option takes true or false values.

--deploymentType <value>

Deployment type.
Supported values are cloudhub, hybrid, or rtf.

--endpointUri <value>

Consumer endpoint URI.

--uri <value>

Implementation URI.

--scheme <value>

Proxy scheme.
Supported values are http, or https.

--port <value>

Proxy port.

--path <value>

Proxy path.

--responseTimeout <value>

Your maximum response timeout.

--apiInstanceLabel <value>

(Optional) API instance label.

--serviceName <value>

WSDL service name.

--serviceNamespace <value>

WSDL service namespace.

--servicePort <value>

WSDL service port.

## api-mgr api list \> api-mgr api list \[options\] Lists all APIs in API Manager 2.x. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--assetId <value>

Asset ID by which filter results.

--apiVersion <value>

API version by which filter results.

--instanceLabel <value>

API instance label by which filter results.

--limit <num>

Number of results to retrieve.

--offset

Offsets the amount of APIs passed

--sort
Supported values are: id, name, createdDate, and updatedDate

Sorts the results in the field name passed

## api-mgr api manage \> api-mgr api manage \[options\] Manages a new API, API version, or new API instance with the Exchange asset passed in ``, and the version passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--type <value>

Endpoint type.
Accepted values are http, raml, or wsdl.

-p, --withProxy

Indicates whether the endpoint should use a proxy.
This option takes true or false values.

-r, --referencesUserDomain

Indicates whether a proxy should reference a user domain.
This option takes true or false values.

-m, --muleVersion4OrAbove

Indicates whether you are managing this API in Mule 4 or above.
This option takes true or false values.

--deploymentType <value>

Deployment type.
Supported values are cloudhub, hybrid, or rtf.

--endpointUri <value>

Consumer endpoint URI.

--uri <value>

Implementation URI.

--scheme <value>

Proxy scheme.
Supported values are http, or https.

--port <value>

Proxy port.

--path <value>

Proxy path.

--responseTimeout <value>

Response timeout.

--apiInstanceLabel <value>

(Optional) API instance label.

--serviceName <value>

WSDL service name.

--serviceNamespace <value>

WSDL service namespace.

--servicePort <value>

WSDL service port.

## api-mgr api promote \> api-mgr api promote \[options\] Promotes the API instance passed in `` from the source environment in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

-a, --copyAlerts

Indicates whether to copy alerts.
This option takes true or false values. Default Value is true

-p, --copyPolicies

Indicates whether to copy policies.
This option takes true or false values. Default Value is true

-t, --copyTiers

Indicates whether to copy tiers.
This option takes true or false values. Default Value is true

## api-mgr api redeploy \> api-mgr api redeploy \[options\] Redeploys the API Instance passed in `` to the deployment target set up in the options described below. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--target <id>

Hybrid or RTF deployment target ID.

--applicationName <name>

Application name.

--environmentName <name>

Target environment name.
Must be provided to redeploy APIs from unclassified environments.

--gatewayVersion <version>

CloudHub Gateway version.

--overwrite

Update application if exists.
This option takes true or false values. Default Value is true

## api-mgr api undeprecate \> api-mgr api undeprecate \[options\] Undeprecates the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr contract delete \> api-mgr contract delete \[options\] This command deletes the contract between the API Instance passed in ``, and the client passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr contract list \> api-mgr contract list \[options\] \[searchText\] Lists all contracts of the API passed in ``. > [!TIP] You can specify keywords in searchText to limit results to APIs containing those specific > keywords. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--limit

Number of results to retrieve

exchange asset list --limit 2

--offset

Offsets the amount of APIs passed

api-mgr contract list --offset 3 643404

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

api-mgr contract list --sort createdDate

## api-mgr policy apply \> api-mgr policy apply \[options\] Applies the policy passed in `` to the API instance passed in ``.
OptionDescription

--policyVersion <value>

Mule 4 policy version.

--groupId <value>

Mule 4 policy group ID.
If no value is provided, this value defaults to MuleSoft group ID.

-c, --config [configJSON]

Pass the configuration data as a JSON string.
For example, api-mgr policy apply -c '{"property": "value"}'

--configFile [file]

Pass the configuration data as a file.
For example, api-mgr policy apply --configFile ./config.json

-p, --pointcut [dataJSON]

Pass pointcut data as JSON strings.
For example api-mgr policy apply (…​) -p '[{"methodRegex":"GET\|PUT","uriTemplateRegex":"/users*"}]'

The following example defines a rate limit of one request every ten seconds: { "rateLimits": \[{ "maximumRequests": 1, "timePeriodInMilliseconds": 10000 }\], "clusterizable": true, "exposeHeaders": false } ## api-mgr policy describe \> api-mgr policy describe \[options\] This command shows the description and available configuration properties of the policy passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--policyVersion <value>

Mule4 policy version.

--groupId <value>

Mule4 policy group ID.
Defaults to MuleSoft group ID when not provided.

## api-mgr policy disable \> api-mgr policy disable \[options\] This command disables the policy passed in `` from the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr policy edit \> api-mgr policy edit \[options\] This command edits the policy configuration passed in `` of the API Instance passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

-c, --config [configJSON]

Pass the configuration data as a JSON string.
For example, api-mgr policy apply -c '{"property": "value"}'

-p, --pointcut [dataJSON]

Pass pointcut data as JSON strings.
For example api-mgr policy apply (…​) -p '[{"methodRegex":"GET\|PUT","uriTemplateRegex":"/users*"}]'

## api-mgr policy enable \> api-mgr policy enable \[options\] This command enables the policy passed in `` for the API Instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr policy list \> api-mgr policy list \[options\] \[apiInstanceId\] This command lists all policies for all APIs in API Manager 2.x. When the `[apiInstanceId]` parameter is specified, this command lists the policies applied to that API instance. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes the `-m, --muleVersion4OrAbove` option which takes `true` or `false` values. ## api-mgr policy remove \> api-mgr policy remove \[options\] This command removes the policy specified in `` from the API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr tier add \> api-mgr tier add \[options\] This command creates an SLA tier for the API instance passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

-a, --autoApprove

Indicates whether the SAL tier should be auto-approved.
This command only takes true or false values.

--name <value>

Tier name

--description <value>

Tier description

-l, --limit <value>

Single instance of an SLA tier limit in the form --limit A,B,C where:

  • A is a boolean indicating whether or not this limit should be visible.

  • B is a number of requests per "C" time period.

  • C is the time period unit. Time period options are:

    • ms(millisecond)

    • sec(second)

    • min(minute)

    • hr(hour)

    • d(day)

    • wk(week)

    • mo(month)

    • yr(year)

For example: --limit true,100,min is a visible limit of 100 requests per minute.

To create multiple limits, you can provide multiple --limit options.
For example: -l true,100,sec -l false,20,min
## api-mgr tier copy \> api-mgr tier copy \[options\] This command copies the SLA tier from the API instance passed in `` to the API instance Id passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr tier delete \> api-mgr tier delete \[options\] This command deletes the SLA tier passed in `` from API instance passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## api-mgr tier list \> api-mgr tier list \[options\] \[searchText\] This command lists the SLA tiers of the API instance passed in ``. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

Example

--limit

Number of results to retrieve

api-mgr tier list --limit 2

--offset

Offsets the amount of APIs passed

api-mgr tier list --offset 3

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

api-mgr tier list --sort id

--- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for API Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `api-mgr` commands to automate your API Manager processes. For more information about how to use these commands, refer to the [API Manager documentation](https://docs.mulesoft.com/api-manager/latest/).
CommandDescription

Creates an API instance alert

Lists alerts for an API instance

Lists the autodiscovery properties

Changes the asset version for an API instance by choosing a new version from Exchange

Classifies an API instance in a given environment

Deletes an API

Deploys an API to CloudHub, CloudHub2, Hybrid Server, or Runtime Fabric

Deprecates an API instance

Shows details of an API

Downloads the API proxy ZIP file to a local directory

Edits an API instance

Lists all APIs in API Manager 2.x

Manages a new API, API version, or new API instance with an asset from Exchange

Promotes an API instance from source environment

Redeploys an API to CloudHub, CloudHub2, Hybrid Server, or Runtime Fabric

Undeprecates an API instance

Adds an owner to a client application

Imports a client application from an external client identity provider

Lists possible owners for a client application in the current organization

Lists client identity providers with import enabled in the current organization

Deletes a given API contract

Lists all contracts to a given API instance

Applies a policy to a given API instance

Shows the description and available configuration properties of a given policy template

Disables policy from a given API instance

Edits the policy configuration of a given API instance

Enables a policy on a given API instance

Lists policies

Removes a policy from a given API instance

Creates an SLA tier

Copies an SLA tier from source to a target API instance

Deletes an SLA tier from an API instance

Lists the SLA tiers of an API instance

Creates an upstream for an API instance

Bulk edits the TLS context for all upstreams of an API instance

Deletes an upstream from an API instance

Edits an upstream of an API instance

Lists all upstreams for an API instance

## api-mgr:alert:add \> api-mgr:alert:add \[flags\] Creates an API instance alert with the name passed in `name` for the API instance ID passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--duration

Condition occurrence period duration.

--duration 60

--durationUnit

Condition occurrence period duration unit.
Supported values: days, hours, and minutes.

--durationUnit minutes

--email

Email to send alert notification to.
Pass this flag multiple times to specify multiple emails.

--enabled

Sets whether the alert is enabled. Include the flag to enable the alert.

--enabled

--operator

Condition operator that explains values in relation to threshold.
Supported values: gt, lt, eq.

--operator gt

--output

Specifies the response format, supported values are table (default) and json

--output json

--periods

Number of consecutive periods condition should occur for.

--periods 34

--policyId

ID of a policy applied to the API instance that triggers a policy-violation alert type.

--policyId http-basic-authentication

--recipient

Username to send alert notification to.
Pass this flag multiple times to specify multiple usernames.

--recipient mulesoftuser

--responseCode

Response codes to trigger response-code alert type.
Pass this flag multiple times to specify multiple codes.

--responseCode 400

--responseTime

Response time to trigger response-time alert type.

--responseTime 60

--severity

Alert severity.
Supported values: Info, Warning, Critical.

--severity Critical

--threshold

Condition occurrences threshold number.

--threshold 3

--type

Alert type/condition.
Supported values: request-count, response-code, policy-violation, response-time

--type response-code

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## api-mgr:alert:list \> api-mgr:alert:list \[flags\] Lists alerts for the API instance passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--limit

Number of results to retrieve, default is 10 results

--limit 5

--offset

Offsets the amount of APIs passed

--offset 3

--output

Specifies the response format
Supported values are table (default) and json

--output json

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

--sort name

## api-mgr:api:autodiscovery \> api-mgr:api:autodiscovery \[flags\] This command lists the autodiscovery properties required for a gateway to track the API Instance Id passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--gatewayVersion

Specifies the gateway version to download

--gatewayVersion 4.0.1 643404 /tmp/

--output

Specifies the response format
Supported values are table (default) and json

--output table

## api-mgr:api:change-specification \> api-mgr:api:change-specification \[flags\] Changes the asset version for the API instance passed in `` by choosing a new version from Exchange passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:classify \> api-mgr:api:classify \[flags\] Classifies the API instance passed in `` in the environment passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:delete \> api-mgr:api:delete \[flags\] Deletes the API instance passed in ``. If the API instance is deployed, this command undeploys the API instance before deleting it. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:deploy \> api-mgr:api:deploy \[flags\] Deploys the API instance passed in '' to the deployment target specified using the flags described next. Deploy any undeployed API using this command regardless of whether it was created using the API Manager CLI or API Manager UI. > [!NOTE] This command is only supported for endpoints with proxy. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--applicationName

Application name

--applicationName myMuleApp 643404

--environmentName

Target environment name, only for when deploying API instances from unclassified environments

--environmentName TestEnv 643404

--gatewayVersion

The CloudHub Gateway version

--gatewayVersion: 9.9.9.9 643404

--javaVersion

Gateway Java version
This flag only works if the target flag was set as RTF, CH, or CH2

--javaVersion 17 643404

--releaseChannel

Set the name of the release channel to be used for the selected Mule version. + Supported values are NONE, EDGE, and LTS
This flag only works if the target flag was set as RTF, CH, or CH2

--releaseChannel EDGE 643404

--overwrite

Update application if it exists
Include the flag to enable it

--overwrite

--output

Specifies the response format, supported values are table (default) and json

--output json

--target

Hybrid, RTF, CH, or CH2 deployment target ID

--target 1598794 643404

## api-mgr:api:deprecate \> api-mgr:api:deprecate \[flags\] Deprecates the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:describe \> api-mgr:api:describe \[flags\] Shows details of the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:download-proxy \> api-mgr:api:download-proxy \[flags\] This command downloads the API proxy ZIP file of the API instance passed in `` to a local directory specified in ``. You cannot download the API proxy of an Omni Gateway API instance. This command accepts the `--gatewayVersion` flag to specify the gateway version to download. For example: `api-mgr:api:download-proxy --gatewayVersion: 4.0.1 643404 /tmp/` This command also accepts the `--output` flag to specify the response format Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:api:edit \> api-mgr:api:edit \[flag\] Edits the API instance passed in ``. Editing a deployed Omni Gateway API instance redeploys the instance. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-f, --isFlex

Indicates whether this is an Omni Gateway API instance.
Include the flag to enable it

--isFlex

-m, --muleVersion4OrAbove

Indicates whether this is a Mule 4 API instance.
Include the flag to enable it

--muleVersionOrAbove

-p, --withProxy

Indicates whether the endpoint should use a proxy.
Include the flag to enable it

--withProxy

-r, --referencesUserDomain

Indicates whether a proxy should reference a user domain.
Include the flag to enable it

--referencesUserDomain

--apiInstanceLabel

API instance label

--apiInstanceLabel exampleLabel

--deploymentType

Deployment type
Options: cloudhub, hybrid, rtf (required)

--deploymentType cloudhub

--endpointUri

Consumer endpoint URI (required)

--endpointUri /udp://localhost:65432

--inboundSecretGroupId

Inbound secret group ID

--inboundSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--inboundTlsContextId

Outbound TLS context ID
Supply the --inboundSecretGroupId of the TLS context’s secret group. To remove a TLS context, apply the flag with the following value: --inboundTlsContextId "null".

--inboundTlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--outboundSecretGroupId

Outbound secret group ID.

--outboundSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--outboundTlsContextId

Outbound TLS context ID.
Supply the --outboundSecretGroupId of the TLS context’s secret group. To remove a TLS context, apply the flag with the following value: --outboundTlsContextId "null".

--outboundTlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Specifies the response format, supported values are table (default) and json

--output json

--path

Proxy path (required)

--path /http://localhost:3000

--port

Proxy port (required)

--port 8080

--providerId

Client Identity Provider Id that the API is associated with
Default is Anypoint Platform Client Provider

--providerId 1787c36ab544466698e380131040faad

--responseTimeout

Maximum response timeout(required)

--responseTimeout 10

--routing

API instance routes as a JSON array. Each route defines a label, routing rules, and upstream references with weights.

--routing '[{"label":"Rule 1","rules":{"path":"/path"},"upstreams":[{"id":"upstream-id","weight":100}]}]'

--scheme

Proxy scheme (required)
Supported values: http, https.

--scheme http

--serviceName

WSDL service name
Omni Gateway does not support this flag

--serviceName ExampleServerName

--serviceNamespace

WSDL service namespace. Omni Gateway does not support this flag.

--serviceNamespace exampleServiceName

--servicePort

WSDL service port
Omni Gateway does not support this flag

--servicePort 443

--type

Endpoint type
Supported options: http, raml, wsdl, mcp, a2a, llm, grpc

--type http

--updateApisInSamePort

Updates the TLS context of API instances sharing the port of this API.

--updateApisInSamePort

--uri

Implementation URI.

--uri /udp://localhost:65432

## api-mgr:api:list \> api-mgr:api:list \[flags\] Lists all APIs in API Manager 2.x. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--apiVersion

API version that filters results

--apiVersion 1.0.2

--assetId

Asset ID that filters results

--assetId ([group_id]/)<asset_id>/<version>

--instanceLabel

API instance label that filters results

--instanceLabel exampleLabel

--limit

Number of results to retrieve

--limit 50

--offset

Offsets the amount of APIs passed

--offset 3

--output

Specifies the response format, supported values are table (default) and json

--output json

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

--sort updatedDate

## api-mgr:api:manage \> api-mgr:api:manage \[flags\] Manages a new API, API version, or new API instance with the Exchange asset passed in ``, and the version passed in ``. > [!NOTE] Omni Gateway API instances created with Anypoint CLI do not support multiple upstream > services. To create Omni Gateway API instances with multiple upstream services, see: > > - [Add an API in Connected Mode](https://docs.mulesoft.com/api-manager/latest/create-instance-task-flex) > > - [Add an API in Local Mode](https://docs.mulesoft.com/gateway/latest/local-publish-api-multiple-services). In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-f, --isFlex

Indicates whether this is an Omni Gateway API instance.
Include the flag to enable it

--isFlex

-m, --muleVersion4OrAbove

Indicates whether this is a Mule 4 API instance.
Include the flag to enable it

--muleVersionOrAbove

-p, --withProxy

Indicates whether the endpoint should use a proxy.
Include the flag to enable it

--withProxy

-r, --referencesUserDomain

Indicates whether a proxy should reference a user domain.
Include the flag to enable it

--referencesUserDomain

`--apiInstanceLabel `

API instance label

--apiInstanceLabel exampleLabel

--deploymentType

Deployment type
Options: cloudhub2, cloudhub, hybrid, rtf (required)

--deploymentType hybrid

--endpointUri

Consumer endpoint URI (required)

--endpointUri /udp://localhost:65432

--inboundSecretGroupId

Inbound secret group ID

--inboundSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--inboundTlsContextId

Outbound TLS Context ID
Supply the --inboundSecretGroupId of the TLS Context’s secret group. To remove a TLS Context, apply the flag with the following value: --inboundTlsContextId "null".

--inboundTlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--outboundSecretGroupId

Outbound secret group ID.

--outboundSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--outboundTlsContextId

Outbound TLS context ID.
Supply the --outboundSecretGroupId of the TLS context’s secret group. To remove a TLS context, apply the flag with the following value: --outboundTlsContextId "null".

--outboundTlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Specifies the response format, supported values are table (default) and json

--output json

--path

Proxy path (required)

--path /http://localhost:3000

--port

Proxy port (required)

--port 8080

--providerId

Client Identity Provider Id that the API is associated with
Default is Anypoint Platform Client Provider

--providerId 1787c36ab544466698e380131040faad

--responseTimeout

Maximum response timeout(required)

--responseTimeout 10

--scheme

Proxy scheme (required)
Supported values: http, https.

--scheme http

--serviceName

WSDL service name
Omni Gateway does not support this flag

--serviceName ExampleServerName

--serviceNamespace

WSDL service namespace. Omni Gateway does not support this flag.

--serviceNamespace exampleServiceName

--servicePort

WSDL service port
Omni Gateway does not support this flag

--servicePort 443

--type

Endpoint type
Supported options: http, raml, wsdl, mcp, a2a, llm, grpc

--type http

--uri

Implementation URI

--uri /udp://localhost:65432

## api-mgr:api:promote \> api-mgr:api:promote \[flags\] Promotes the API instance passed in `` from the source environment in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-a, --copyAlerts

Indicates whether to copy alerts
Include the flag to enable it

--copyAlerts

-p, --copyPolicies

Indicates whether to copy policies
Include the flag to enable it

--copyPolicies

-t, --copyTiers

Indicates whether to copy tiers
Include the flag to enable it

--copyTiers

--output

Specifies the response format, supported values are table (default) and json

--output json

--providerId

Indicates the provider’s ID associated with the API.

--providerId 1787c36ab544466698e380131040faad

## api-mgr:api:redeploy \> api-mgr:api:redeploy \[flags\] Redeploys the API instance passed in `` to the deployment target set up in the flags described below. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--applicationName

Application name

--applicationName Muleapp 643404

--environmentName

Target environment name
Include to redeploy APIs from unclassified environments

--environmentName mulesoftEnvironment 643404

--gatewayVersion

CloudHub Gateway version

--gatewayVersion 9.9.9 643404

--javaVersion

Gateway Java version
This flag only works if the target flag was set as RTF, CH, or CH2

--javaVersion 17 643404

--overwrite

Update application if it exists
Include the flag to enable it

--overwrite

--output

Specifies the response format, supported values are table (default) and json

--output json

--releaseChannel

Set the name of the release channel to be used for the selected Mule version. + Supported values are NONE, EDGE, and LTS
This flag only works if the target flag was set as RTF, CH, or CH2

--releaseChannel EDGE 643404

--target

Hybrid, RTF, CH, or CH2 deployment target ID

--target 1598794 643404

## api-mgr:api:undeprecate \> api-mgr:api:undeprecate \[flags\] Undeprecates the API instance passed in ``. This commands accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:application:add-owner \> api-mgr:application:add-owner \[flags\] Adds the owner passed in `` with the entity type passed in `` to the client application passed in ``. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:application:import \> api-mgr:application:import \[flags\] Imports the client application passed in `` from the external client identity provider passed in ``. The client identity provider must have the import feature enabled. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--description

Description of the client application to import.

--description "Example application description"

--url

URL of the client application to import.

## api-mgr:application:possible-owners-list \> api-mgr:application:possible-owners-list \[flags\] Lists the possible owners for a client application in the current organization. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--search

Search string to filter results.

--search example

--limit

Number of results to retrieve.

--limit 10

--offset

Number of results to skip.

--offset 10

## api-mgr:client-provider:list-importable \> api-mgr:client-provider:list-importable \[flags\] Lists the client identity providers that have the import feature enabled in the current organization. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:contract:delete \> api-mgr:contract:delete \[flags\] This command deletes the contract between the API instance passed in ``, and the client passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:contract:list \> api-mgr:contract:list \[flags\] \[searchText\] Lists all contracts of the API passed in ``. > [!TIP] You can specify keywords in searchText to limit results of APIs containing those specific > keywords. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--limit

Number of results to retrieve

--limit 2

--offset

Offsets the amount of APIs passed

--offset 3

--output

Specifies the response format, supported values are table (default) and json

--output json

--sort

Sorts the contracts by the criteria associated with their client applications
Supported values are: id, name, createdDate, and updatedDate

--sort id

## api-mgr:policy:apply \> api-mgr:policy:apply \[flags\] Applies the policy passed in `` to the API instance passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-c, --config

Pass the configuration data as a JSON string

--config '{\"username\":\"user\",\"password\":\"teste\"}'

--configFile

Pass the configuration data as a file

--configFile ./config.json

--groupId

Mule 4 policy group ID
This value defaults to the MuleSoft group ID.

--groupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Specifies the response format, supported values are table (default) and json

--output json

-p, --pointcut [dataJSON]

Pass pointcut data as JSON strings

--pointcut '[{"methodRegex":"GET|PUT","uriTemplateRegex":"/users*"}]'

--policyVersion

Mule 4 policy version.

--policyVersion 1.0.2

--upstreamId

Configure upstream

--upstreamId 550e8400-e29b-41d4-a716-446655440000

The following example defines a rate limit of one request every ten seconds: { "rateLimits": \[{ "maximumRequests": 1, "timePeriodInMilliseconds": 10000 }\], "clusterizable": true, "exposeHeaders": false } > [!NOTE] Even if you plan to use the default values, you must configure all required policy > parameters when applying a policy with Anypoint CLI, ## api-mgr:policy:describe \> api-mgr:policy:describe \[flags\] Shows the description and available base configuration properties of the policy name passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--groupId

Mule 4 policy group ID

+ Defaults to the MuleSoft group ID.

--groupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--policyVersion

Mule 4 policy version

--policyVersion 1.0.2

--output

Specifies the response format
Supported values are table (default) and json.

--output json

## api-mgr:policy:disable \> api-mgr:policy:disable \[flags\] Disables the policy passed in `` from the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:policy:edit \> api-mgr:policy:edit \[flags\] Edits the policy configuration passed in `` for the API instance passed in ``. > [!NOTE] If you are udpating an included Mule Gateway policy, you can include only the changed > values in the configuration. However, if you are updating a custom policy, you must send the full > configuration each time a custom policy is edited. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-c, --config

Pass the configuration data as a JSON string

--config '{\"username\":\"user\",\"password\":\"teste\"}'

--configFile

Pass the configuration data as a file

--configFile ./config.json

--output

Specifies the response format, supported values are table (default) and json

--output json

-p, --pointcut

Pass pointcut data as JSON strings

-p '[{"methodRegex":"GET|PUT","uriTemplateRegex":"/users*"}]'

## api-mgr:policy:enable \> api-mgr:policy:enable \[flags\] Enables the policy passed in `` for the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:policy:list \> api-mgr:policy:list \[flags\] \[apiInstanceId\] Lists all policies for all APIs in API Manager 2.x. Specify the `--apiInstanceId` flag to list the policies applied to that API instance. Without the `--apiInstanceId` flag, the command lists all policies for all APIs. This command accepts the `-m, --muleVersion4OrAbove` flag. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:policy:remove \> api-mgr:policy:remove \[flags\] This command removes the policy specified in `` from the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:tier:add \> api-mgr:tier:add \[flags\] This command creates an SLA tier for the API instance passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

-a, --autoApprove

Indicates whether the SAL tier should be auto-approved
Include the flag to enable it

--autoApprove

--name

Tier name

--name muleSLAtier

--description

Tier description

--description tier example description

-l, --limit

Single instance of an SLA tier limit in the form --limit A,B,C where:

  • A is a boolean indicating whether this limit is visible to the user.

  • B is a number of requests per "C" time period.

  • C is the time period unit. Time period options are:

    • ms(millisecond)

    • sec(second)

    • min(minute)

    • hr(hour)

    • d(day)

    • wk(week)

    • mo(month)

    • yr(year)

--limit true,100,min

To create multiple limits, you can provide multiple --limit options.
For example: -l true,100,sec -l false,20,min.

--output

Specifies the response format, supported values are table (default) and json

--output json

## api-mgr:tier:copy \> api-mgr:tier:copy \[flags\] Copies the SLA tier from the API instance passed in `` to the API instance Id passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:tier:delete \> api-mgr:tier:delete \[flags\] This command deletes the SLA tier passed in `` from API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:tier:list \> api-mgr:tier:list \[flags\] \[searchText\] This command lists the SLA tiers of the API instance passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--limit

Number of results to retrieve

--limit 2

--offset

Offsets the amount of APIs passed

--offset 3

--output

Specifies the response format, supported values are table (default) and json

--output json

--sort

Sorts the results in the field name passed
Supported values are: id, name, createdDate, and updatedDate

--sort id

## api-mgr:upstream:add \> api-mgr:upstream:add \[flags\] Creates an upstream for the API instance passed in `` with the URI passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--label

Label for the upstream

--label my-upstream

--tlsContextId

TLS context ID to set on the upstream

--tlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--tlsContextSecretGroupId

Secret group ID for the TLS context specified in --tlsContextId

--tlsContextSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Format for the response, supported values are table (default) and json

--output json

## api-mgr:upstream:bulk-edit \> api-mgr:upstream:bulk-edit \[flags\] Bulk edits the TLS context for all upstreams of the API instance passed in `` using a single API update. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts these flags:
FlagDescriptionExample

--tlsContextId (required)

TLS context ID to set on all upstreams. Pass null to remove the TLS context from all upstreams.

--tlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--tlsContextSecretGroupId

Secret group ID for the TLS context specified in --tlsContextId

--tlsContextSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Format for the response, supported values are table (default) and json

--output json

## api-mgr:upstream:delete \> api-mgr:upstream:delete \[flags\] Deletes the upstream passed in `` from the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## api-mgr:upstream:edit \> api-mgr:upstream:edit \[flags\] Edits the upstream passed in `` for the API instance passed in ``. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--uri

Upstream URI

--label

Label for the upstream

--label my-upstream

--tlsContextId

TLS context ID to set on the upstream. Pass null to remove the TLS context.

--tlsContextId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--tlsContextSecretGroupId

Secret group ID for the TLS context specified in --tlsContextId

--tlsContextSecretGroupId 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--output

Format for the response, supported values are table (default) and json

--output json

## api-mgr:upstream:list \> api-mgr:upstream:list \[flags\] Lists all upstreams for the API instance passed in ``. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for CloudHub > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports managing these CloudHub features: - [CloudHub Applications](https://docs.mulesoft.com/anypoint-cli/3.x/cloudhub-apps) - [CloudHub Dedicated Load Balancers](https://docs.mulesoft.com/anypoint-cli/3.x/cloudhub-dlb) - [Anypoint Virtual Private Cloud](https://docs.mulesoft.com/anypoint-cli/3.x/cloudhub-vpc) --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for CloudHub > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports managing these CloudHub features: - [CloudHub Applications](https://docs.mulesoft.com/anypoint-cli/latest/cloudhub-apps) - [CloudHub Dedicated Load Balancers](https://docs.mulesoft.com/anypoint-cli/latest/cloudhub-dlb) - [Anypoint Virtual Private Cloud](https://docs.mulesoft.com/anypoint-cli/latest/cloudhub-vpc) --- product: Anypoint CLI version: 3.x --- # CLI for Cloudhub 2.0 > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands for for deploying and managing applications in applications in Cloudhub 2.0.
CommandDescription

Deletes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Describes an application

Describes an application in a raw JSON response

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## runtime-mgr application delete \> runtime-mgr application delete \[options\] Deletes the running application specified in ``. To get this ID, run the `runtime-mgr application list` command. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application deploy \> runtime-mgr application deploy \[options\] Deploys the application specified in `` to the deployment target specified using the following options:
ValueDescriptionExample

ArtifactId

Artifact ID of the application retrieved from Exchange.

mule-test-plugin

deploymentTargetID

ID of the deployment target.
You can get this ID directly from Runtime Manager.

app.runetime

name

Name of the application to deploy.

testCloudhub2app

runtimeVersion

Runtime version of the deployment target.

1.0.1

Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes these options:
ValueDescriptionExample

assetVersion

Version of the Exchange application to use.
Default: latest application version

2.0.4

clustered

Enables clustered nodes, which requires at least two replicas.
Default:.disabled
Supported values: true, false

false

disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled
Supported values: true, false

true

forwardSslSession

Enables SSL session forwarding.
Default: disabled
Values: true, false

false

groupID

Group ID of the asset to deploy.
Default: selected organization ID

org.mule.test

lastMileSecurity

Enables Last Mile Security.
Default: disabled
Supported values: true, false

true

objectStoreV2

Enables Object Store v2.
Default: disabled
Supported values: true, false

true

pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

/http://localhost:3000

property

Sets a property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--property "gcp.privateKey:dGVzdA\=\="

propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

/Users/mule/Documents/properties.txt

publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

my-superapp-example:/status?limit=10

replicas

Number of replicas. Must be above 0.
Default: 1

2

replicaSize

Size of replicas in Vcores.
Default: 0.1

0.5

scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

testscope1:WARN,testscope2:DEBUG

scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: one tupple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

/Users/mule/Documents/cert.txt

secureProperty

Sets a secure property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--secureProperty "gcp.privateKey:dGVzdA\=\="

updateStrategy

Updates the strategy used.
Default: rolling

recreate

## runtime-mgr application describe \> runtime-mgr application describe \[options\] Displays information about the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application describe-json \> runtime-mgr application describe-json \[options\] Displays a raw JSON response from the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application download-logs \> runtime-mgr application download-logs \[options\] Downloads logs for the application specified in `` from the specification specified in `` to the selected directory. To get the ``, run the `runtime-mgr application list` command. To get the `` run the `runtime-mgr application describe` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application list \> runtime-mgr application list \[options\] Lists all applications in your organization. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application modify \> runtime-mgr application modify \[options\] Updates the settings of an existing application specified in ``. To get the ``, run the `runtime-mgr application list` command. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes these options:
ValueDescriptionExample

ArtifactId

ID of the application retrieved from Exchange.

mule-maven-plugin

assetVersion

Version of the Exchange application to use.
Default: latest application version

2.0.4

clustered

Enables clustered nodes, which requires at least two replicas.
Default: disabled
Supported values: true, false

false

disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled
Supported values: true, false

true

forwardSslSession

Enables SSL session forwarding.
Default: disabled
Values: true, false

false

groupID

Group ID of the asset to deploy.
Default: selected organization ID.

org.mule.testgroup

lastMileSecurity

Enables Last Mile Security.
Default: disabled
Supported values: true, false

true

objectStoreV2

Enables object store v2.
Default: disabled
Supported values: true, false

true

pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

/http://localhost:3000.

property

Sets a property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--property "gcp.privateKey:dGVzdA\=\="

propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

/Users/mule/Documents/properties.txt

publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

my-superapp-example: /status?limit=10

replicas

Number of replicas. Must be above 0.
Default: 1

2

replicaSize

Size of replicas in Vcores.
Default: 0.1

0.5

runtimeVersion

Runtime version of the deployment target.

1.0.1

scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

testscope1:WARN,testscope2:DEBUG

scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: 1 tupple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

/Users/mule/Documents/cert.txt

secureProperty

Sets a secure property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--secureProperty "gcp.privateKey:dGVzdA\=\="

updateStrategy

Updates the strategy used.
Default: rolling

recreate

## runtime-mgr application start \> runtime-mgr application start \[options\] Starts running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default option `--help`. ## runtime-mgr application stop \> runtime-mgr application stop \[options\] Stops running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default option `--help`. ## runtime-mgr application tail-logs \> runtime-mgr:application:tail-logs \[options\] Tails application logs for the application specificied in `` from the specification specified in ``. To get the ``, run the `runtime-mgr application list` command. To get the `` run the `runtime-mgr application describe` command. This command accepts only the default option `--help`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Cloudhub 2.0 > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands for deploying and managing applications in Cloudhub 2.0. For more information about how to use these commands, refer to the [CloudHub documentation](https://docs.mulesoft.com/cloudhub/).
CommandDescription

Deletes an application

Describes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## runtime-mgr:application:delete \> runtime-mgr:application:delete \[flags\] Deletes the running application specified in ``. To get this ID, run the `runtime-mgr application list` command. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:describe \> runtime-mgr:application:describe \[flags\] Displays information about the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command has the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:deploy \> runtime-mgr:application:deploy \[flags\] Deploys the application specified in `` to the deployment target specified using the following options: > [!NOTE] To deploy applications using a connected app, the connected app must have CloudHub and > Runtime Manager permission accordingly.
ValueDescriptionExample

--artifactId

Artifact ID of the application retrieved from Exchange.

--artifactId mule-test-plugin

--deploymentTargetId

ID of the deployment target.
You can get this ID directly from Runtime Manager.

--deploymentTargetId cloudhub-ap-northeast-1

--instanceType

Instance type
Only UBP organizations can use this flag. Non-UBP organizations use the --replicaSize flag

--instanceType mule.micro

--name

Name of the application to deploy.

--name testcloudhub2app

--replicaSize

Size of replicas in Vcores.
Default: 0.1

--replicaSize 0.5

--runtimeVersion

Runtime version of the deployment target.

--runtimeVersion 4.4.0

--secureProperty

Sets an encrypted property.

--secureProperty secureTestProperty:true

In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--assetVersion

Version of the Exchange application to use.

--assetVersion 2.0.4

--[no-]clustered

Enables clustered nodes, which requires at least two replicas.
Default:.disabled

--no-clustered

--[no-]disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled

--disableAmLogForwarding

--[no-]forwardSslSession

Enables SSL session forwarding.
Default: disabled

--no-forwardSslSession

--groupId

Group ID of the asset to deploy.
Default: selected organization ID

--groupId org.mule.test

--[no-]lastMileSecurity

Enables Last Mile Security.
Default: disabled

--no-lastMileSecurity

--[no-]objectStoreV2

Enables Object Store v2.
Default: disabled

--no-objectStoreV2

--javaVersion

Set the name of the Java version to be used for the selected Mule version. Supported values are 8 and 17. If you do not specify a value, CloudHub API imposes the default value. The default Java version for Mule 4.6 and earlier versions is '8'. If you don’t specify a Mule version, the default Mule version for the selected Java version is used. If the Java version you select is not available for the specified Mule version, you get an error.

--javaVersion 8

--pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

--pathRewrite /api

--property

Replaces all existing properties with the specified property.
Format: name:value

--property testproperty:true

--propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

--propertiesFile /Users/mule/Documents/properties.txt

--publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

--releaseChannel

Set the name of the release channel to be used for the selected Mule version. Supported values are NONE, EDGE, and LTS. If you do not specify a value, CloudHub API imposes the default value. The default release channel is EDGE. If you don’t specify a Mule version, the default Mule version for the selected release channel is used. If the selected release channel doesn’t exist, you get an error.

--releaseChannel LTS

--replicas

Number of replicas. Must be above 0.
Default: 1

--replicas 2

--replicaSize

Size of replicas in Vcores.
Default: 0.1

--replicaSize 0.5

--scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

--scopeLoggingConfig testscope1:WARN,testscope2:DEBUG

--scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: one tuple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

--scopeLoggingConfigFile /Users/mule/Documents/cert.txt

--updateStrategy

Updates the strategy used.
Default: rolling

--updateStrategy recreate

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## runtime-mgr:application:download-logs \> runtime-mgr:application:download-logs \[flags\] Downloads logs for the application specified in `` from the specification specified in `` to the selected directory. To get the ``, run the `runtime-mgr application list` command. To get the `` run the `runtime-mgr application describe` command. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:list \> runtime-mgr:application:list \[flags\] Lists all applications in your organization. This command has the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:modify \> runtime-mgr:application:modify \[flags\] Updates the settings of an existing application specified in ``. To get the ``, run the `runtime-mgr application list` command. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--artifactId

ID of the application retrieved from Exchange.

--artifactId mule-maven-plugin

--assetVersion

Version of the Exchange application to use.

--assetVersion 2.0.4

--[no-]clustered

Enables clustered nodes, which requires at least two replicas.
Default: disabled

--no-clustered

--[no-]disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled

--disableAmLogForwarding

--[no-]forwardSslSession

Enables SSL session forwarding.
Default: disabled

--no-forwardSslSession

--groupId

Group ID of the asset to deploy.
Default: selected organization ID.

--groupId org.mule.testgroup

--instanceType

Instance type
Only UBP organizations can use this flag. Non-UBP organizations use the --replicaSize flag

--instanceType mule.nano

--[no-]lastMileSecurity

Enables Last Mile Security.
Default: disabled

--no-lastMileSecurity

--[no-]objectStoreV2

Enables object store v2.
Default: disabled

--no-objectStoreV2

--pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

--pathRewrite /api

--property

Replaces all existing properties with the specified property.
Format: name:value

--property testproperty:true

--propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

--propertiesFile /Users/mule/Documents/properties.txt

--publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

--replicas

Number of replicas. Must be above 0.
Default: 1

--replicas 2

--replicaSize

Size of replicas in Vcores.
Default: 0.1

--replicaSize 0.5

--runtimeVersion

Runtime version of the deployment target.

--runtimeVersion 4.4.0

--secureProperty

Sets an encripted property.

--secureProperty secureTestProperty:true

--scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

--scopeLoggingConfig testscope1:WARN,testscope2:DEBUG

--scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: 1 tuple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

--scopeLoggingConfigFile /Users/mule/Documents/cert.txt

--updateStrategy

Updates the strategy used.
Default: rolling

--updateStrategy recreate

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## runtime-mgr:application:start \> runtime-mgr:application:start \[flags\] Starts running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:stop \> runtime-mgr:application:stop \[flags\] Stops running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:application:logs \> runtime-mgr:application:logs \[flags\] Tails application logs for the application specificied in `` from the specification specified in ``. To get the ``, run the `runtime-mgr application list` command. To get the ``, run the `runtime-mgr application describe` command. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for CloudHub Applications > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Lists all alerts in the environment

Describes the history of the alarm

Lists all applications in the environment

Show application details

Show raw application JSON response

Stop a running application

Start an application

Restart a running application

Delete an application

Deploy a new application

Modify an existing application, optionally updating the ZIP file

Download application logs to specified directory

Tail application logs

Copies a CloudHub application

## runtime-mgr cloudhub-alert list \> runtime-mgr cloudhub-alert list \[options\] This command lists all alerts associated with your current environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-alert-history describe \> runtime-mgr cloudhub-alert-history describe \[options\] This command describes the history of the alarm passed in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application list \> runtime-mgr cloudhub-application list \[options\] This command lists all applications available in your Anypoint Platform CLI. It returns your application name, its status, the number of vCores assigned and the last time it was updated. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application describe \> runtime-mgr cloudhub-application describe \[options\] This command displays information on the application you pass in ``. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. The command returns data such as the application’s domain, its status, the last time it was updated, the Mule version, the ZIP file name, the region, monitoring, and workers; as well as `TRUE` or `FALSE` information for persistent queues and static IPs enablement. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application describe-json \> runtime-mgr cloudhub-application describe-json \[options\] This command returns the raw JSON response of the application you specify in ``. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application stop \> runtime-mgr cloudhub-application stop \[options\] This command stops the running application you specify in `` You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application start \> runtime-mgr cloudhub-application start \[options\] This command starts the running application you specify in `` You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application restart \> runtime-mgr cloudhub-application restart \[options\] This command restarts the running application you specify in `` You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application delete \> runtime-mgr cloudhub-application delete \[options\] This command deletes the running application you specify in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application deploy \> runtime-mgr cloudhub-application deploy \[options\] This command deploys the Mule deployable archive ZIP file that you specify in `` using the name you set in ``. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. You will have to provide the absolute or relative path to the deployable ZIP file in your local hard drive and the name you give to your application has to be unique. > [!NOTE] If successful, this command’s output includes the deployment status of `UNDEPLOYED`, which > indicates that CloudHub uploaded the application successfully. The options this command can take are:
OptionDescription

--runtime

Name and version of the runtime environment.
Use this option to specify the name and version of the runtime you want to deploy. If you don’t specify a runtime version, CloudHub API deploys the latest version available considering the values you select for --javaVersion and --releaseChannel.
Some examples of this value are 2.1.1-API-Gateway, 3.9.1-visualizer, 4.1.1, 4.5, 4.6-e-java8, 4.6-java8, and 4.6-e-java17.
Tap your tab key after this option for the CLI to show you all your available options. (This value is the latest CloudHub Runtime version by default.)

--releaseChannel

Set the name of the release channel to be used for the selected Mule version. Supported values are NONE, EDGE, and LTS. If you do not specify a value, CloudHub API imposes the default value. The default release channel is EDGE. If you don’t specify a Mule version, the default Mule version for the selected release channel is used. If the selected release channel doesn’t exist, you get an error.

--javaVersion

Set the name of the Java version to be used for the selected Mule version. Supported values are 8 and 17. If you do not specify a value, CloudHub API imposes the default value. The default Java version for Mule 4.6 and earlier versions is '8'. If you don’t specify a Mule version, the default Mule version for the selected Java version is used. If the Java version you select is not available for the specified Mule version, you get an error.

--workers

Number of workers. (This value is '1' by default)

--workerSize

Size of the workers in vCores. (This value is '1' by default)

--region

Name of the region to deploy to.
For a list of all supported regions, use the cloudhub region list command.

--property

Set a property (name:value). Can be specified multiple times.
The property to be set must be passed enclosed in quotes and characters : and = must be escaped.
(e.g. --property "salesforce.password:qa\=34534").

Character : is not supported for the property’s name.

--propertiesFile

Overwrite all properties with values from this file. The file format is 1 or more lines in name:value format. Set the absolute path of the properties file in your local hard drive.

--persistentQueues

Enable or disable persistent queues. Can take true or false values. (This value is false by default)

--persistentQueuesEncrypted

Enable or disable persistent queue encryption. Can take true or false values. (This value is false by default)

--staticIPsEnabled

Enable or disable static IPs. Can take true or false values. (This value is false by default)

--objectStoreV1

Enable or disable Object Store V1. Can take true or false values.
objectStoreV2 cannot also be provided when using objectStoreV1.

--objectStoreV2

Enable or disable Object Store V2. Can take true or false values.
objectStoreV1 cannot also be provided when using objectStoreV2.

--autoRestart

Automatically restart app when not responding. Can take true or false values. (This value is true by default.)

--timeout

Set the timeout value in miliseconds. Can take values between 60000 and 300000.

--help

output usage information

Note that from Anypoint Platform CLI you won’t be able to allocate static IPs. You can simply enable and disable them. After typing any option, you can double tap the `tab` key for a full list of all possible options. For example: \> deploy --runtime \[tab\]\[tab\] Lists all possible runtimes you can select. > [!IMPORTANT] If you deploy without using any options, your application will deploy using all your > default values. ## runtime-mgr cloudhub-application modify \> runtime-mgr cloudhub-application modify \[options\] \[zipfile\] This command updates the settings of an existing application. Optionally you can update it by uploading a new ZIP file. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command can take all the same options as the `deploy` option. > [!NOTE] This command’s output includes `Status`, which is the application’s previous deployment > status state. You can also start typing your option and press `tab` for Anypoint Platform CLI to autocomplete it for you. ## runtime-mgr cloudhub-application download-logs \> runtime-mgr cloudhub-application download-logs \[options\] This command downloads logs the for application specified in `` to the specified directory. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. Keep in mind that contrarily to what you see in the UI, the logs you download from the CLI won’t separate system logs from worker logs. ## runtime-mgr cloudhub-application tail-logs \> runtime-mgr cloudhub-application tail-logs \[options\] This command tails application logs. You can start typing your application’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cloudhub-application copy \> runtime-mgr cloudhub-application copy \[options\] This command copies the CloudHub application passed in `source` to the target passed in `target`. Arguments `source` and `target` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. For example: \> runtime-mgr cloudhub-application copy Services:QA/application-1 Development:QA/application-2 Copies the application named `application-1` from the QA environment of the Services organization to the QA environment of the Development organization. If the Anypoint Platform CLI is using the QA environment in the Services organization, the command can simply take the application name as a `source`: \> runtime-mgr cloudhub-application copy application-1 Development/QA/application-2 > [!NOTE] Running this command requires your user to have read/write access to the `/tmp` directory > of the OS where CLI is installed. In addition to the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--property

Set a property (name:value). Can be specified multiple times.

Enclose the property in quotes and escape the : and = characters, for example:

--property "salesforce.password:qa\=34534"

> [!NOTE] When copying an application containing safely hidden application properties, pass the > properties in the `copy` command using the `--property` option. For information about safely > hidden application properties, see > [Safely Hide Application Properties](https://docs.mulesoft.com/cloudhub/secure-application-properties). --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for CloudHub Applications > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `cloudhub` commands to automate your CloudHub Applications processes. For more information about how to use these commands, refer to the [CloudHub documentation](https://docs.mulesoft.com/cloudhub/).
CommandDescription

Describes the history of the alarm

Lists all alerts in the environment

Copies a CloudHub application

Deletes an application

Deploys a new application

Shows application details

Download application logs to specified directory

Lists all applications in the environment

Modifies an existing application, optionally updating the ZIP file

Restarts a running application

Starts an application

Stops a running application

Tail application logs

Lists all supported regions

Lists all available runtimes

## runtime-mgr:cloudhub-alert-history:describe \> runtime-mgr:cloudhub-alert-history:describe \[flags\] Describes the history of the alarm passed in `` Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-alert:list \> runtime-mgr:cloudhub-alert:list \[flags\] Lists all alerts associated with your current environment Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:copy \> runtime-mgr:cloudhub-application:copy \[flags\] Copies the CloudHub application passed in `source` to the target passed in `target` Arguments `source` and `target` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID For example: \> runtime-mgr:cloudhub-application:copy Services:QA/application-1 Development:QA/application-2 Copies the application named `application-1` from the QA environment of the Services organization to the QA environment of the Development organization. If the Anypoint Platform CLI is using the QA environment in the Services organization, the command can simply take the application name as a `source`: \> runtime-mgr:cloudhub-application:copy application-1 Development/QA/application-2 > [!NOTE] Running this command requires your user to have read/write access to the `/tmp` directory > of the OS where CLI is installed. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--property

Set a property (name:value).

--property "salesforce.password:qa\=34534"

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. > [!NOTE] When copying an application containing safely hidden application properties, pass the > properties in the `copy` command using the `--property` flag. For information about safely hidden > application properties, see > [Safely Hide Application Properties](https://docs.mulesoft.com/cloudhub/secure-application-properties). ## runtime-mgr:cloudhub-application:delete \> runtime-mgr:cloudhub-application:delete \[flags\] Deletes the running application you specify in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:deploy \> runtime-mgr:cloudhub-application:deploy \[flags\] Deploys the Mule deployable archive ZIP file that you specify in `` using the name you set in `` You will have to provide the absolute or relative path to the deployable ZIP file in your local hard drive and the name you give to your application has to be unique. > [!NOTE] If successful, this command’s output includes the deployment status of `UNDEPLOYED`, which > indicates that CloudHub uploaded the application successfully. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--runtime

Name and version of the runtime environment.
Use this flag to specify the name and version of the runtime you want to deploy
If you don’t specify a runtime version, CloudHub API deploys the latest version available considering the values you select for --javaVersion and --releaseChannel.

--runtime 2.1.1-API-Gateway, --runtime 4.6-e-java8 (Edge), --runtime 4.6-e-java17 (Edge), --runtime 4.6-java8 (LTS), --runtime 4.6-java17 (LTS)

--releaseChannel

Set the name of the release channel to be used for the selected Mule version
Supported values are NONE, EDGE, and LTS
If you don’t specify a value, CloudHub API imposes the default value. The default release channel is EDGE
If you don’t specify a Mule version, the default Mule version for the selected release channel is used. If the selected release channel doesn’t exist, you get an error.

--releaseChannel EDGE

--javaVersion

Set the name of the Java version to be used for the selected Mule version
Supported values are 8 and 17
If you don’t specify a value, CloudHub API imposes the default value. The default Java version for Mule 4.6 and earlier versions is '8'.
If you don’t specify a Mule version, the default Mule version for the selected Java version is used. If the Java version you select is not available for the specified Mule version, you get an error.

--javaVersion 8

--workers

Number of workers
Default value is '1'

--workers 3

--workerSize

Size of the workers in vCores
(Default value is '1'

--workerSize 2

--region

Name of the region to deploy to

--region Canada

--property

Set a property (name:value)
Character : is not supported for the property’s name

--property "salesforce.password:qa\=34534"

`--propertiesFile

Overwrite all properties with values from this file
The file format is 1 or more lines in name:value format
Set the absolute path of the properties file in your local hard drive

--propertiesFile exampleFile.JSON

--[no-]persistentQueues

Enable or disable persistent queues
Default value is disabled

--[no-]persistentQueues

`--[no-]persistentQueuesEncrypted `

Enable or disable persistent queue encryption
Default value is disabled

--[no-]persistentQueuesEncrypted

--[no-]staticIPsEnabled

Enable or disable static IPs
Default value is disabled

--[no-]staticIPsEnabled

--[no-]objectStoreV1

Enable or disable Object Store V
objectStoreV2 can’t also be provided when using objectStoreV1 flag

--[no-]objectStoreV1

--[no-]objectStoreV2

Enable or disable Object Store V2
objectStoreV1 can’t also be provided when using objectStoreV2 flag

--[no-]objectStoreV2

--[no-]autoRestart

Automatically restart app when not responding
Default value is enabled

--[no-]autoRestart

--output

Specify the response format
Supported values are table (default) and json

--output json

--timeout

Set the timeout value in miliseconds
Can take values between 60000 and 300000

--timeout 90000

> [!NOTE] You won’t be able to allocate static IPs Anypoint Platform CLI. You can simply enable and > disable them. > [!IMPORTANT] If you deploy without using any flags, your application deploys using all your > default values. > [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## runtime-mgr:cloudhub-application:describe \> runtime-mgr:cloudhub-application:describe \[flags\] Displays information on the application you pass in `` Use the flag `-o json` to get the raw JSON response of the application you specify in ``. The command returns data such as the application’s domain, its status, the last time it was updated, the Mule version, the ZIP file name, the region, monitoring, and workers; as well as `TRUE` or `FALSE` information for persistent queues and static IPs enablement. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:download-logs \> runtime-mgr:cloudhub-application:download-logs \[flags\] Downloads logs the for application specified in `` to the specified directory Contrarily to what you see in the UI, the logs you download from the CLI won’t separate system logs from worker logs. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:list \> runtime-mgr:cloudhub-application:list \[flags\] Lists all applications available in your Anypoint Platform CLI It returns your application name, its status, the number of vCores assigned and the last time it was updated. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:modify \> runtime-mgr:cloudhub-application:modify \[zipfile\] \[flags\] Updates the settings of an existing application Optionally, you can update it by uploading a new ZIP file. This command can take all the same flags as the `deploy` command. > [!NOTE] This command’s output includes `Status`, which is the application’s previous deployment > status state. > [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--runtime

Name and version of the runtime environment.
Use this flag to specify the name and version of the runtime you want to deploy
If you don’t specify a runtime version, CloudHub API deploys the latest version available considering the values you select for --javaVersion and --releaseChannel.

--runtime 2.1.1-API-Gateway, --runtime 4.6-e-java8 (Edge), --runtime 4.6-e-java17 (Edge), --runtime 4.6-java8 (LTS), --runtime 4.6-java17 (LTS)

--releaseChannel

Set the name of the release channel to be used for the selected Mule version
Supported values are NONE, EDGE, and LTS
If you don’t specify a value, CloudHub API imposes the default value. The default release channel is EDGE
If you don’t specify a Mule version, the default Mule version for the selected release channel is used. If the selected release channel doesn’t exist, you get an error.

--releaseChannel EDGE

--javaVersion

Set the name of the Java version to be used for the selected Mule version
Supported values are 8 and 17
If you don’t specify a value, CloudHub API imposes the default value. The default Java version for Mule 4.6 and earlier versions is '8'.
If you don’t specify a Mule version, the default Mule version for the selected Java version is used. If the Java version you select is not available for the specified Mule version, you get an error.

--javaVersion 8

--workers

Number of workers
Default value is '1'

--workers 3

--workerSize

Size of the workers in vCores
(Default value is '1'

--workerSize 2

--region

Name of the region to deploy to

--region Canada

--property

Set a property (name:value)
Character : is not supported for the property’s name

--property "salesforce.password:qa\=34534"

`--propertiesFile

Overwrite all properties with values from this file
The file format is 1 or more lines in name:value format
Set the absolute path of the properties file in your local hard drive

--propertiesFile exampleFile.JSON

--[no-]persistentQueues

Enable or disable persistent queues
Default value is disabled

--[no-]persistentQueues

`--[no-]persistentQueuesEncrypted `

Enable or disable persistent queue encryption
Default value is disabled

--[no-]persistentQueuesEncrypted

--[no-]staticIPsEnabled

Enable or disable static IPs
Default value is disabled

--[no-]staticIPsEnabled

--[no-]objectStoreV1

Enable or disable Object Store V
objectStoreV2 can’t also be provided when using objectStoreV1 flag

--[no-]objectStoreV1

--[no-]objectStoreV2

Enable or disable Object Store V2
objectStoreV1 can’t also be provided when using objectStoreV2 flag

--[no-]objectStoreV2

--[no-]autoRestart

Automatically restart app when not responding
Default value is enabled

--[no-]autoRestart

--output

Specify the response format
Supported values are table (default) and json

--output json

--timeout

Set the timeout value in miliseconds
Can take values between 60000 and 300000

--timeout 90000

## runtime-mgr:cloudhub-application:restart \> runtime-mgr:cloudhub-application:restart \[flags\] Restarts the running application you specify in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:start \> runtime-mgr:cloudhub-application:start \[flags\] Starts the running application you specify in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:stop \> runtime-mgr:cloudhub-application:stop \[flags\] Stops the running application you specify in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cloudhub-application:tail-logs \> runtime-mgr:cloudhub-application:tail-logs \[flags\] Tails application logs This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:region:list \> cloudhub:region:list \[flags\] Lists all supported regions Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:runtime:list \> cloudhub:runtime:list \[flags\] Lists all supported runtimes This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for CloudHub Dedicated Load Balancers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt > [!NOTE] Where possible, we changed noninclusive terms to align with our company value of Equality. > We maintained certain terms to avoid any effect on customer implementations.
CommandDescription

Lists all load balancers in an organization

Show load balancer details

Show load balancer details in raw JSON response

Create a load balancer

Starts a load balancer

Stops a load balancer

Delete a load balancer

Add an additional certificate to an existing load balancer

Remove a certificate from a load balancer

Set the default certificate that the load balancer will serve

Show the load balancer configuration for a particular certificate

Add an IP or range of IPs to the load balancer allowlist

Remove an IP or range of IPs from the load balancer allowlist

Add an IP or range of IPs to the load balancer allowlist

Remove an IP or range of IPs from the load balancer allowlist

Lists the proxy mapping rules for a load balancer. If no certificateName is given, the mappings for the default SSL endpoint are shown

Add a proxy mapping rule at the specified index. If no certificateName is given, the mappings for the default SSL endpoint are shown

Remove a proxy mapping rule. If no certificateName is given, the mappings for the default SSL endpoint are shown.

Enables dynamic IPs

Disables dynamic IPs

Lists all supported regions

Lists all available runtimes

## cloudhub load-balancer list \> cloudhub load-balancer list \[options\] This command lists all load balancers in your Anypoint Platform. It displays load balancer’s name, domain, its state, and the Anypoint VPC ID to which the load balancer is bound. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub load-balancer describe \> cloudhub load-balancer describe \[options\] This command displays information about the load balancer that is specified in ``. You can start typing your load balancer’s name and press\`tab\` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. It displays load balancer’s name, domain, its state and the Anypoint VPC Id to which the load balancer is bound. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub load-balancer describe-json \> cloudhub load-balancer describe \[options\] This command displays a raw JSON response from the load balancer that is specified in ``. You can start typing your load balancer’s name and press\`tab\` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub load-balancer create \> cloudhub load-balancer create \[options\] This command creates a load balancer using the specified values in the variables.
OptionDescriptionExample

vpc

Name of the Anypoint VPC to which this load balancer is bound.
If your Anypoint VPC name contains spaces, you need to pass it between ´"´ characters.

vpc-demo

name

Name for the load balancer.

newtestloadbalancer

certificate

Absolute path to the .pem file of your server certificate in your local hard drive.
Your certificate files need to be PEM encoded and not encrypted.

/Users/mule/Documents/cert.pem

privateKey

Absolute path to the .pem file of your private key of the server certificate in your local hard drive.
Your private key file needs to be passphraseless.

/Users/mule/Documents/privateKey.pem

> [!CAUTION] The name for the load balancer that you pass in `` must be unique. > By default, your load balancer listens external requests on HTTPS and communicates with your > workers internally through HTTP. > If you configured your Mule application within the Anypoint VPC to listen on HTTPS, make sure you > set `upstreamProtocol` to HTTPS when creating the mapping list using the > [load-balancer mappings add](#cloudhub-load-balancer-mappings-add) command. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

http

Specifies the Load balancer HTTP behavior. It can be set to on (accepts HTTP requests and forwards it to your configured default sslendpoint), off (refuses all HTTP requests), or redirect (redirects to HTTPS).

clientCertificate

Client certificate file

verificationMode

Specifies the client verification mode. It can be set to on (verify always), off (don’t verify), or optional (verification optional).

crl

Certificate revocation list file

--transportDownstreamProtocols

TLS version used for communication between customer and DLB
Supported values: TLSv1.2, TLSv1.3

--transportDownstreamProtocols=TLSv1.2

--transportUpstreamProtocols

TLS version used for communication between DLB and Mule worker
Supported values: TLSv1.2, TLSv1.3

--transportUpstreamProtocols=TLSv1.2

dynamic-ips

Uses dynamic IPs, which are not persistent through restarts

> [!NOTE] CloudHub does not implement the Online Certificate Status Protocol (OCSP). To keep your > certification revocation list up to date, it’s recommended to use the > [CloudHub API](https://anypoint.mulesoft.com/exchange/portals/anypoint-platform/f1e97bc6-315a-4490-82a7-23abe036327a.anypoint-platform/cloudhub-api/) > to update your certificates programmatically. For more configuration information, see [Configure SSL Endpoints and Certificates](https://docs.mulesoft.com/cloudhub/lb-ssl-endpoints). ## cloudhub load-balancer start \> cloudhub load-balancer start \[options\] This command starts the load balancer specified in ``. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer stop \> cloudhub load-balancer stop \[options\] This command stops the load balancer specified in ``. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer delete \> cloudhub load-balancer delete \[options\] This command deletes the load balancer specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer ssl-endpoint add \> cloudhub load-balancer ssl-endpoint add \[options\] This command adds an SSL endpoint to the load balancer specified in ``, using the certificate and private key passed.
OptionDescriptionExample

name

Name for the load balancer.

newtestloadbalancer

certificate

Absolute path to the .pem file of your certificate in your local hard drive.
Your certificate files need to be PEM encoded and not encrypted.

/Users/mule/Documents/cert.pem

privateKey

Absolute path to the .pem file of your private key in your local hard drive.
Your private key file needs to be passphraseless.

/Users/mule/Documents/privateKey.pem

> [!NOTE] CloudHub does not implement the Online Certificate Status Protocol (OCSP). To keep your > certification revocation list up to date, it’s recommended to use the > [CloudHub API](https://anypoint.mulesoft.com/exchange/portals/anypoint-platform/f1e97bc6-315a-4490-82a7-23abe036327a.anypoint-platform/cloudhub-api/) > to update your certificates programmatically. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

clientCertificate

Client certificate file

verificationMode

Specifies the client verification mode. It can be set to on (verify always) off (don’t verify) or optional (Verification optional).

crl

Certificate Revocation List file

For more configuration information, see [Configure SSL Endpoints and Certificates](https://docs.mulesoft.com/cloudhub/lb-ssl-endpoints). ## cloudhub load-balancer ssl-endpoint remove \> cloudhub load-balancer ssl-endpoint remove \[options\] This command removes the ssl certificate specified in `` from the load balancer specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer ssl-endpoint set-default \> cloudhub load-balancer ssl-endpoint set-default \[options\] This command sets the certificate specified in `` as the default certificate for the load balancer passed in ``. You can start typing your load balancer’s name and press\`tab\` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

http

Specifies the Load balancer HTTP behavior

## cloudhub load-balancer ssl-endpoint describe \> cloudhub load-balancer ssl-endpoint describe \[options\] This command shows information about the configuration of the load balancer passed in `` for the the certificate specified in ``. You can start typing your load balancer’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer whitelist add \> cloudhub load-balancer whitelist add \[options\] This command adds a range of IP addresses specified in `` to the allowlist of the load balancer specified in ``. > [!NOTE] The allowlist works at the load balancer level, not at the CN certificate level. Make sure > you only pass IP addresses formatted in > [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks). You can start typing your load balancer’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer whitelist remove \> cloudhub load-balancer whitelist remove This command removes an IP or range of IPs addresses specified in `` to the allowlist of the load balancer specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer allowlist add \> cloudhub load-balancer allowlist add \[options\] This command adds a range of IP addresses specified in `` to the allowlist of the load balancer specified in ``. > [!NOTE] The allowlist works at the load balancer level, not at the CN certificate level. Make sure > you only pass IP addresses formatted in > [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks). You can start typing your load balancer’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` > [!NOTE] We favor the use of the term "allowlist" in adherence to our Inclusive Product Language > Program. ## cloudhub load-balancer allowlist remove \> cloudhub load-balancer allowlist remove This command removes an IP or range of IPs addresses specified in `` to the allowlist of the load balancer specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` > [!NOTE] We favor the use of the term "allowlist" in adherence to our Inclusive Product Language > Program. ## cloudhub load-balancer mappings describe \> cloudhub load-balancer mappings describe \[certificateName\] This command lists the mapping rules for the load balancer specified in ``. If no `certificateName` is passed, Anypoint Platform CLI returns the mappings for the default SSL endpoint. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer mappings add \> cloudhub load-balancer mappings add \[options\] \[certificateName\] This command adds a proxy mapping rule to the load balancer specified in `` in the CN passed under the `certificateName` option. If no `certificateName` is passed, Anypoint Platform CLI adds the mappings to the default SSL endpoint.
OptionDescriptionExample

name

Name of the load balancer to which this rule is applied.

testloadbalancer

inputUri

Name of the URI of your input URL

example.com

appName

Name of the app of your output URL to which the request is forwarded

{app}-example

appUri

URI of the app of your output URL to which the request is forwarded

/

For the values in the example above, for an input call to `my-superapp.api.example.com/status?limit=10`, the endpoint `my-superapp-example: /status?limit=10` will be called for the application. This command also takes the `--upstreamProtocol` option. The `--upstreamProtocol` option sets the protocol used by your application to communicate internally with your load balancer. If no upstream protocol is set, HTTP is used as default.
OptionDescription

--upstreamProtocol <protocol>

Look for upstream applications in HTTP port 8091 or HTTPS port 8092. Supported Values: http, https

--certificateName <certificate name>

Optional parameter

## cloudhub load-balancer mappings remove \> cloudhub load-balancer mappings remove \[options\] \[certificateName\] This command removes the proxy mapping rules from the load balancer specified in `` at the priority index specified in `` and the CN specified as the `certificateName` option. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` If no `certificateName` is passed, Anypoint Platform CLI removes the mappings for the default SSL endpoint. ## cloudhub load-balancer dynamic-ips enable \> cloudhub load-balancer dynamic-ips enable \[options\] This command enables dynamic IPs for the load balancer specified in ``. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub load-balancer dynamic-ips disable \> cloudhub load-balancer dynamic-ips disable \[options\] This command disables dynamic IPs for the load balancer specified in ``. This command does not take any options, except for the default ones: `--help`, `-f`/`--fields` and `-o`/`--output` ## cloudhub region list \> cloudhub region list \[options\] This command lists all supported regions. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## cloudhub runtime list \> cloudhub runtime list \[options\] This command lists all supported runtimes. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for CloudHub Dedicated Load Balancers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `cloudhub:load-balancer` commands to automate your CloudHub Dedicated Load Balancers processes. For more information about how to use these commands, refer to the [CloudHub documentation](https://docs.mulesoft.com/cloudhub/).
CommandDescription

Adds an IP or range of IPs to the load balancer allowlist

Removes an IP or range of IPs from the load balancer allowlist

Creates a load balancer

Deletes a load balancer

Shows load balancer details

Disables dynamic IPs

Enables dynamic IPs

Lists all load balancers in an organization

Adds a proxy mapping rule at the specified index

Lists the proxy mapping rules for a load balancer

Removes a proxy mapping rule

Adds an additional certificate to an existing load balancer

Shows the load balancer configuration for a particular certificate

Removes a certificate from a load balancer

Sets the default certificate that the load balancer will serve

Starts a load balancer

Stops a load balancer

Adds an IP or range of IPs to the load balancer allowlist

Removes an IP or range of IPs from the load balancer allowlist

## cloudhub:load-balancer:allowlist:add \> cloudhub:load-balancer:allowlist:add \[flags\] Adds a range of IP addresses specified in `` to the allowlist of the load balancer specified in `` > [!NOTE] The allowlist works at the load balancer level, not at the CN certificate level. Make sure > you only pass IP addresses formatted in > [CIDR notation](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing#IPv4_CIDR_blocks). This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:allowlist:remove \> cloudhub:load-balancer:allowlist:remove Removes an IP or range of IPs addresses specified in `` to the allowlist of the load balancer specified in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:create \> cloudhub:load-balancer:create \[flags\] Creates a load balancer using the specified values in the following variables:
ValueDescriptionExample

vpc

Name of the Anypoint VPC to which this load balancer is bound.
If your Anypoint VPC name contains spaces, you need to pass it between ´"´ characters.

vpc-demo

name

Name for the load balancer.

newtestloadbalancer

certificate

Absolute path to the .pem file of your server certificate in your local hard drive.
Your certificate files need to be PEM encoded and not encrypted.

/Users/mule/Documents/cert.pem

privateKey

Absolute path to the .pem file of your private key of the server certificate in your local hard drive.
Your private key file needs to be passphraseless.

/Users/mule/Documents/privateKey.pem

> [!CAUTION] The name for the load balancer that you pass in `` must be unique. > By default, your load balancer listens external requests on HTTPS and communicates with your > workers internally through HTTP. > If you configured your Mule application within the Anypoint VPC to listen on HTTPS, make sure you > set `upstreamProtocol` to HTTPS when creating the mapping list using the > [load-balancer mappings add](#cloudhub-load-balancer-mappings-add) command. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--clientCertificate

Client certificate file

--clientCertificate /Users/mule/Documents/CertificateFile.pem

--crl

Certificate revocation list file

--crl /Users/mule/Documents/crlFile.pem

--http

Specifies the Load balancer HTTP behavior. It can be set to on (accepts HTTP requests and forwards it to your configured default sslendpoint), off (refuses all HTTP requests), or redirect (redirects to HTTPS).

--http off

--transportDownstreamProtocols

TLS version used for communication between customer and DLB
Supported values: TLSv1.2, TLSv1.3

--transportDownstreamProtocols=TLSv1.2

--transportUpstreamProtocols

TLS version used for communication between DLB and Mule worker
Supported values: TLSv1.2, TLSv1.3

--transportUpstreamProtocols=TLSv1.2

--[no-]dynamic-ips

Uses dynamic IPs, which are not persistent through restarts

--[no-]dynamic-ips

--verificationMode

Specifies the client verification mode. It can be set to on (verify always), off (don’t verify), or optional (verification optional).

--verificationMode optional

> [!NOTE] CloudHub does not implement the Online Certificate Status Protocol (OCSP). To keep your > certification revocation list up to date, it’s recommended to use the > [CloudHub API](https://anypoint.mulesoft.com/exchange/portals/anypoint-platform/f1e97bc6-315a-4490-82a7-23abe036327a.anypoint-platform/cloudhub-api/) > to update your certificates programmatically. For more configuration information, see [Configure SSL Endpoints and Certificates](https://docs.mulesoft.com/cloudhub/lb-ssl-endpoints). ## cloudhub:load-balancer:delete \> cloudhub:load-balancer:delete \[flags\] Deletes the load balancer specified in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:describe \> cloudhub:load-balancer:describe \[flags\] Displays information about the load balancer that is specified in `` Use the flag `-o json` to get the raw JSON response of the application you specify in `` It displays load balancer’s name, domain, its state and the Anypoint VPC Id to which the load balancer is bound. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:dynamic-ips:disable \> cloudhub:load-balancer:dynamic-ips:disable \[flags\] Disables dynamic IPs for the load balancer specified in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:dynamic-ips:enable \> cloudhub:load-balancer:dynamic-ips:enable \[flags\] Enables dynamic IPs for the load balancer specified in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:list \> cloudhub:load-balancer:list \[flags\] Lists all load balancers in your Anypoint Platform It displays load balancer’s name, domain, its state, and the Anypoint VPC ID to which the load balancer is bound. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:mappings:add \> cloudhub:load-balancer:mappings:add \[flags\] \[certificateName\] Adds a proxy mapping rule to the load balancer specified in `` in the CN passed under the `certificateName` flag. If no `certificateName` is passed, Anypoint Platform CLI adds the mappings to the default SSL endpoint.
ValueDescriptionExample

name

Name of the load balancer to which this rule is applied.

testloadbalancer

inputUri

Name of the URI of your input URL

example.com

appName

Name of the app of your output URL to which the request is forwarded

{app}-example

appUri

URI of the app of your output URL to which the request is forwarded

/

For the values in the example above, for an input call to `my-superapp.api.example.com/status?limit=10`, the endpoint `my-superapp-example: /status?limit=10` will be called for the application. If no upstream protocol is set, HTTP is used as default.
FlagDescriptionExample

`--certificateName `

Certificate name

--certificateName exampleName

--upstreamProtocol <protocol>

Set the protocol used by your application to communicate internally with your load balancer
Supported Values: http, https

--upstreamProtocol http

## cloudhub:load-balancer:mappings:describe \> cloudhub:load-balancer:mappings:describe \[certificateName\] Lists the mapping rules for the load balancer specified in `` If no `certificateName` is passed, Anypoint Platform CLI returns the mappings for the default SSL endpoint. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:mappings:remove \> cloudhub:load-balancer:mappings:remove \[flags\] \[certificateName\] Removes the proxy mapping rules from the load balancer specified in `` at the priority index specified in `` and the CN specified as the `certificateName` flag If no `certificateName` is passed, Anypoint Platform CLI removes the mappings for the default SSL endpoint. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:ssl-endpoint:add \> cloudhub:load-balancer:ssl-endpoint:add \[flags\] Adds an SSL endpoint to the load balancer specified in ``, using the certificate and private key passed:
ValueDescriptionExample

name

Name for the load balancer.

newtestloadbalancer

certificate

Absolute path to the .pem file of your certificate in your local hard drive.
Your certificate files need to be PEM encoded and not encrypted.

/Users/mule/Documents/cert.pem

privateKey

Absolute path to the .pem file of your private key in your local hard drive.
Your private key file needs to be passphraseless.

/Users/mule/Documents/privateKey.pem

> [!NOTE] CloudHub does not implement the Online Certificate Status Protocol (OCSP). To keep your > certification revocation list up to date, it’s recommended to use the > [CloudHub API](https://anypoint.mulesoft.com/exchange/portals/anypoint-platform/f1e97bc6-315a-4490-82a7-23abe036327a.anypoint-platform/cloudhub-api/) > to update your certificates programmatically. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--clientCertificate

Client certificate file

--clientCertificate /Users/mule/Documents/CertificateFile.pem

--crl

Certificate Revocation List file

--clientCertificate /Users/mule/Documents/crlFile.pem

--verificationMode

Specifies the client verification mode. It can be set to on (verify always) off (don’t verify) or optional (Verification optional).

--verificationMode on

For more configuration information, see [Configure SSL Endpoints and Certificates](https://docs.mulesoft.com/cloudhub/lb-ssl-endpoints). ## cloudhub:load-balancer:ssl-endpoint:describe \> cloudhub:load-balancer:ssl-endpoint:set-describe \[flags\] Shows information about the configuration of the load balancer passed in `` for the certificate specified in `` Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:ssl-endpoint:remove \> cloudhub:load-balancer:ssl-endpoint:remove \[flags\] Removes the ssl certificate specified in `` from the load balancer specified in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:ssl-endpoint:set-default \> cloudhub:load-balancer:ssl-endpoint:set-default \[flags\] Sets the certificate specified in `` as the default certificate for the load balancer passed in `` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--http

Specifies the Load balancer HTTP behavior
It can be set to on (accepts HTTP requests and forwards it to your configured default sslendpoint), off (refuses all HTTP requests), or redirect (redirects to HTTPS)

--http redirect

## cloudhub:load-balancer:start \> cloudhub:load-balancer:start \[flags\] Starts the load balancer specified in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:stop \> cloudhub:load-balancer:stop \[flags\] Stops the load balancer specified in `` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:whitelist:add \> cloudhub:load-balancer:whitelist:add \[flags\] Adds a range of IP addresses specified in `` to the allowlist of the load balancer specified in ``. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## cloudhub:load-balancer:whitelist:remove \> cloudhub:load-balancer:whitelist:remove \[flags\] Removes an IP or range of IPs specified in `` from the allowlist of the load balancer specified in ``. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for DataGraph API Source Management > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Adds an API source

Promotes an API source

Updates an API source

Scales API calls made to the unified schema

Downloads the unified schema

Deletes an API source

Gets an API source

Lists all API sources

Returns information about DataGraph

Validates an API source for the unified schema

## datagraph sources add \> datagraph sources add > [!NOTE] DataGraph supports only `stable` state API versions. This command adds an API source, specified by ``, in which `g` is the group ID, `a` the asset ID, and `v` the version ID of the API source. The group ID is optional. If you don’t specify a group ID, the command uses the current organization ID. In addition to the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options, this command accepts the following options:
OptionsDescription

--auth-none

Use if your API is public.

--auth-basic

Use if you authenticate to your API either by passing the basic authentication header or by passing a username and password.

Required:

  • --credentials <username>:<password>

--auth-oauth

Use if you authenticate to your API by passing OAuth 2.0 client_id, client_secret, and authorization server values.

Required:

  • --credentials <client_id>:<client_secret>

  • --server <authorization server URL>

    Not Required:

  • --scope <server>

--auth-pass-through

Use if you authenticate to your API by passing authorization headers.

Required:

  • --mapping: <comma-separated list of key-value pairs, for example, key1:value1,key2:value2>

--auth-headers

Use if you authenticate to your API by passing custom header parameters and values.

Required for headers:

  • --custom-headers: <comma-separated list of header-value pairs, for example, header1:value1,header2:value2>

    Or

  • --custom-headers-file: <location of the file containing header-value pairs, one per line>

--auth-query-params

Use if you authenticate to your API by passing query parameters and values.

Required for query params:

  • --credentials <client_id:client_secret>

--url <url>

Configures the URL for the backend API.

--discover-url

Automatically discovers the URL of the backend API based on the instances running in the current environment. If more than one API is running, DataGraph uses the first URL.

--ca

Specify a comma-separated list of certificate authority (CA) files to add to the API’s truststore, for example, file.ca,file2.ca.

--cert

Specify the filename of the client certificate to use for mutual transport layer security (mTLS), for example, cert.ca.

--key

Specify the filename of the private key to use for mTLS, for example key.pem.

--key-password

Specify the password to decrypt an encrypted private key.

--ignore-invalid-edits

Use to apply valid edits made in the extensions in the API specification and to ignore any edits that are invalid.

> [!NOTE] All headers and query params defined in the command line, and all header and query param > files, are appended. If there are repeated keys, the values provided in the command line takes > precedence. ### Example Command ```copy datagraph sources add 18dc11ee-4a09-4aae-9c6c-4371a87eafa8/product-api/1.0.0/ --url http://test.com ``` ### Example Output { "apiVersion": "v1", "assetId": "product-api", "createDate": "2022-05-20T18:05:41", "endpoint": "http://test.com", "environmentId": "", "groupId": "", "name": "Product API", "organizationId": "", "securityScheme": "NO\_AUTH", "sourceId": "deca7be1-c299-4441-bc7b-dba733e3a11f", "updateDate": "2022-05-20T18:05:41", "version": "1.0.0", "origin": "CLI" } ## datagraph sources promote \> datagraph sources promote This command promotes an API source `` to the target environment ``. In addition to the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options, this command accepts the following options:
OptionsDescription

--auth-none

Use if your API is public.

--auth-basic

Use if you authenticate to your API either by using the basic authentication header or by using a username and password.

Required:

  • --credentials <username>:<password>

--auth-oauth

Use if you authenticate to your API by passing OAuth 2.0 client_id, client_secret, and authorization server values.

Required:

  • --client-credentials <client_id>:<client_secret>

  • --server <authorization server URL>

    Not Required:

  • --scope <server>

--auth-pass-through

Use if you authenticate to your API by passing authorization headers.

Required:

  • --mapping: <comma-separated list of key-value pairs, for example, key1:value1,key2:value2>

--auth-headers

Use if you authenticate to your API by passing custom header parameters and values.

Required for headers:

  • --custom-headers: <comma-separated list of header-value pairs, for example, header1:value1,header2:value2>

    Or

  • --custom-headers-file: <location of the file containing header header-value pairs, one per line>

--auth-query-params

Use if you authenticate to your API by passing query parameters and values.

Required for query params:

  • --credentials <client_id:client_secret>

--url

Configures the URL for the backend API.

--discover-url

Automatically discovers the URL of the backend API based on the instances running in the current environment. If more than one API is running, DataGraph uses the first URL.

--ca

Specify a list of CA files to add to the API’s truststore.

--cert

Specify the client certificate to use for mTLS.

--key

Specify the private key to use for mTLS.

--key-password

Specify the password to decrypt an encrypted private key.

--empty-ca

Deletes all CA certificates.

--empty-mtls

Deletes the client certificate, private key, and private key password information.

> [!NOTE] All headers and query params defined in the command line, and all header and query param > files, are appended. If there are repeated keys, the values provided in the command line takes > precedence. ### Example Command In this example, the `environmentId` is changed after running the `promote` command. ```copy datagraph sources promote d1d27987-939a-4b41-b3ef-411568ee5bdd e7e8da65-9cf1-569e-c9d2-brd2r0rc7rd6 --auth-none ``` ### Example Output { "apiVersion": "1.0", "assetId": "order-e2e", "createDate": "2022-05-27T18:56:03", "endpoint": "http://test.com", "environmentId": "e7e8da65-9cf1-569e-c9d2-brd2r0rc7rd6", "groupId": "", "name": "Order E2E", "organizationId": "", "securityScheme": "NO\_AUTH", "sourceId": "1ff021b3-9296-43fd-9d64-2f9027c25740", "updateDate": "2022-05-27T18:56:03", "version": "1.0.0", "origin": "CLI" } ## datagraph sources update \> datagraph sources update > [!NOTE] DataGraph supports only `stable` state API versions. The `update` command updates only > patch and minor versions of an API source. This command updates the version of an API source ``. In addition to the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options, this command accepts the following options:
OptionsDescription

--auth-none

Use if your API is public.

--auth-basic

Use if you authenticate to your API by passing either the basic authentication header or both a username and password.

Required:

  • --credentials <username>:<password>

--auth-oauth

Use if you authenticate to your API by passing OAuth 2.0 client_id, client_secret, and authorization server values.

Required:

  • --credentials <client_id>:<client_secret>

  • --server <authorization server URL>

    Not Required:

  • --scope <server>

--auth-pass-through

Use if you authenticate to your API by passing authorization headers.

Required:

  • --mapping: <comma-separated list of key-value pairs, for example, key1:value1,key2:value2>

--auth-headers

Use if you authenticate to your API by passing custom header parameters and values.

Required for headers:

  • --custom-headers: <comma-separated list of header-value pairs, for example, header1:value1,header2:value2>

    Or

  • --custom-headers-file: <location of the file containing header-value pairs, one per line>

--auth-query-params

Use if you authenticate to your API by passing query parameters and values.

Required for query params:

  • --credentials <client_id:client_secret>

--url

Configures the URL for the backend API.

--discover-url

Automatically discovers the URL of the backend API based on the instances running in the current environment. If more than one API is running, DataGraph uses the first URL.

--ca

Specify a list of CA files to add to the API’s truststore.

--cert

Specify the client certificate to use for mTLS.

--key

Specify the private key to use for mTLS.

--key-password

Specify the password to decrypt an encrypted private key.

--empty-ca

Deletes all CA certificates.

--empty-mtls

Deletes the client certificate, private key, and private key password information.

--keep-edits

Keeps edits that are present in the current version of the API source instead of extracting those edits from the API specification.

--override-ui-edits

Change the origin of the API source to the CLI. Ff the origin of the API source is the DataGraph UI, use this option to override the UI edits with the edits in the API specification.

--ignore-invalid-edits

Use to apply valid edits made in the extensions in the API specification and to ignore any edits that are invalid.

> [!NOTE] All headers and query params defined in the command line, and all header and query param > files, are appended. If there are repeated keys, the values provided in the command line takes > precedence. ### Example Command The following command updates the URL of the source API and changes its authentication from `auth-none` to `auth-basic`, adding a client ID and secret. ```copy > datagraph sources update b6cb82a6-51dc-4968-861a-aa04447c3442 --url http://test2.com --version 1.0.0 --auth-basic --credentials client-test:client-secret ``` ### Example Output { "apiVersion": "v1", "assetId": "product-api", "createDate": "2022-05-20T18:56:57Z", "endpoint": "http://test2.com", "environmentId": "", "groupId": "", "name": "Product API", "organizationId": "", "securityScheme": "BASIC", "sourceId": "b6cb82a6-51dc-4968-861a-aa04447c3442", "updateDate": "2022-05-27T18:31:39", "version": "1.0.0", "origin": "CLI" } ## datagraph scale \> datagraph scale This command enables you to configure the number of concurrent API calls permitted for a unified schema. Increasing or decreasing API calls enables you to process higher workloads and optimize your consumption when needed. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Command ```copy datagraph scale 300 ``` ### Example Output { "message": "Api calls updated" } ## datagraph schema-download \> datagraph schema-download This command downloads the unified schema for the current environment. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Output directive @key(fields: String) on OBJECT "An Item" type Item { itemId: Int! "A Product" product: OrderProduct! quantity: Int! } "An Order" type Order { items: \[Item!\]! orderId: String! customerId: String! } "A Product" type OrderProduct { productId: String! name: String! } type Query { orders(ordersCount: Int): \[Order!\] ordersByOrderId(orderId: String!): Order ordersProductsByOrderId(productsCounts: Int, orderId: String!): \[OrderProduct!\] } ## datagraph sources delete \> datagraph sources delete This command deletes the specified API source. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Command ```copy datagraph sources delete d40df394-785d-4c91-8aeb-f07568dd57c ``` ### Example Output { "message": "Source deleted successfully", "sourceId": "620afe93-b196-42eb-ae77-b68a0a937b6a" } ## datagraph sources get \> datagraph sources get This command gets the specified API source. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Command ```copy datagraph sources get d1d27987-939a-4b41-b3ef-411568ee5bdd ``` ### Example Output { "apiVersion": "1.0", "assetId": "order-e2e", "createDate": "2022-05-20T16:49:00Z", "hasKeystore": false, "endpoint": "http://test.com", "environmentId": "", "groupId": "", "name": "Order E2E", "organizationId": "", "hasTruststore": false, "securityScheme": "NO\_AUTH", "sourceId": "d1d27987-939a-4b41-b3ef-411568ee5bdd", "updateDate": "2022-05-20T16:49:00Z", "version": "1.0.0", "origin": "CLI" } ## datagraph sources list ```copy > datagraph sources list ``` This command lists all API sources for the current environment. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Output { "apiVersion": "1.0", "assetId": "order-e2e", "createDate": "2022-05-20T16:49:00.000Z", "endpoint": "http://test.com", "environmentId": "", "groupId": "", "name": "Order E2E", "organizationId": "", "securityScheme": "NO\_AUTH", "sourceId": "d1d27987-939a-4b41-b3ef-411568ee5bdd", "updateDate": "2022-05-20T16:49:00.000Z", "version": "1.0.0", "origin": "CLI" }, { "apiVersion": "v1", "assetId": "product-api", "createDate": "2022-05-20T18:05:41.000Z", "endpoint": "http://test.com", "environmentId": "", "groupId": "", "name": "Product API", "organizationId": "", "securityScheme": "NO\_AUTH", "sourceId": "deca7be1-c299-4441-bc7b-dba733e3a11f", "updateDate": "2022-05-20T18:05:41.000Z", "version": "1.0.0", "origin": "CLI" } ## datagraph describe ```copy > datagraph describe ``` This command returns the following information about DataGraph: - `endpoint`: Displays the GraphQL endpoint that accepts requests. - `deploymentError`: If a DataGraph deployment fails, this field describes the error; otherwise, it’s empty. - `deploymentStatus`: Shows whether DataGraph is deploying, running, or has errors. - `logLevels`: Displays a list of the configured log levels. - `envStatus`: Displays the status of the current environment. - `dlbEndpoint`: Displays the load balancer endpoint. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Output { "deploymentStatus": "STARTED", "dlbEndpoint": "datagraph-example.us-e1.prod.cloudhub.io", "endpoint": "datagraph-example.us-e1.prod.cloudhub.io", "envStatus": "STARTED" } ## datagraph validate \> datagraph validate asset This command validates if it’s possible to add an API source to the unified schema. To do so, the command: - Translates the API source into a GraphQL schema. - Validates any API extensions applied in the API specification. - Runs a conflict check against the unified schema. If any of these steps generates a conflict or error, the command returns the result. If it finds no conflicts or errors, it returns a success message. The API source to validate is specified by ``, in which `g` is the group ID, `a` the asset ID, and `v` the version ID of the API source. The group ID is optional. If you don’t specify a group ID, the command uses the current organization ID. This command takes the default `--help`, `-f/--fields`, `-o/--output`, and `--verbose` options. ### Example Command ```copy datagraph validate asset 73b0d8f2-5a2f-4107-884d-fcd80f30bc51/sales-api/1.0.0 ``` ### Example Output { "code": "success" } --- product: Anypoint CLI version: 3.x --- # CLI for DataGraph Load Balancers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Adds a dedicated load balancer configuration to Anypoint DataGraph

Displays a dedicated load balancer configuration for Anypoint DataGraph

Removes a dedicated load balancer configuration from Anypoint DataGraph

## datagraph load-balancer-config add ```copy > datagraph load-balancer-config add ``` This command adds a dedicated load balancer configuration specified by `` to Anypoint DataGraph. The `dlbUrl` is a valid URL that includes the DLB domain and the mapping rule `inputUri`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## datagraph load-balancer-config describe ```copy > datagraph load-balancer-config describe [options] ``` This command displays a dedicated load balancer URL for Anypoint DataGraph. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## datagraph load-balancer-config remove ```copy > datagraph load-balancer-config remove [options] ``` This command removes a dedicated load balancer configuration from Anypoint DataGraph. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for DataGraph Load Balancers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `datagraph` commands to automate your DataGraph Load Balancers processes. For more information about how to use these commands, refer to the [DataGraph documentation](https://docs.mulesoft.com/datagraph/).
CommandDescription

Adds a dedicated load balancer configuration to Anypoint DataGraph

Displays a dedicated load balancer configuration for Anypoint DataGraph

Removes a dedicated load balancer configuration from Anypoint DataGraph

## datagraph:load-balancer-config:add ```copy > datagraph:load-balancer-config:add ``` Adds a dedicated load balancer configuration specified by `` to Anypoint DataGraph The `dlbUrl` is a valid URL that includes the DLB domain and the mapping rule `inputUri`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## datagraph:load-balancer-config:describe ```copy > datagraph:load-balancer-config:describe [flags] ``` Displays a dedicated load balancer URL for Anypoint DataGraph This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## datagraph:load-balancer-config:remove ```copy > datagraph:load-balancer-config:remove [flags] ``` Removes a dedicated load balancer configuration from Anypoint DataGraph. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Design Center Projects > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Creates a new Design Center project

Deletes a Design Center project

Downloads the content of a Design Center project

Publishes a Design Center project to Exchange

Uploads the content of a project to Design Center

List all Design Center projects

## designcenter project create \> designcenter project create \[options\] This Command creates a new Design Center project with the name specified in ``. > [!IMPORTANT] This command does not support Mule application types. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--type (required)

The project type.
This field is required.

Supported values are:

  • raml

  • raml-fragment

designcenter project create --type raml

--fragment-type

The fragment type. Always use with --type raml-fragment, even for OAS 3.0 and JSON schema fragments.

This field is required if the type option was set as raml-fragment

Supported fragments type are:

  • trait

  • resource-type

  • library

  • type

  • user-documentation

  • oas-components

  • json-schema

designcenter project create --type raml-fragment --fragment-type user-documentation

## designcenter project delete \> designcenter project delete \[options\] This Command deletes the Design Center project specified in `name`. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## designcenter project download \> designcenter project download \[options\] This command downloads the Design Center project passed in `name` to your local directory specified in `targetDir`. Use the `--branch` option to select the branch you want to download content from. Use the `--resolveDependenciesTimeout=X` flag to specify the duration, in minutes, for the commands to wait for the resolution of dependencies before downloading a project. If the specified time passes, your project downloads without the missing dependencies. This command also accepts the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## designcenter project publish \> designcenter project publish \[options\] This Command publishes the Design Center project passed in `projectName` to Exchange. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes: > [!TIP] Options that are not specified are extracted from exchange.json
OptionDescriptionExample

--name

The name for the asset

designcenter project publish --name sampleProject

--main

The name of the main file name.

designcenter project publish --main sample.xml

--apiVersion

The API version if your project is an API specification project.

designcenter project publish --main sample.raml --apiVersion 1.0

--tags

Comma separated list of tags.

designcenter project publish --tags test,sample,integration

--groupId

The asset’s groupId.

designcenter project publish --groupId com.mulesoft.com

--assetId

The asset’s assetId.

designcenter project publish --assetId project

--version

The asset’s version.

designcenter project publish --version 1.0

--branch

The asset’s branch.

designcenter project publish --branch main

## designcenter project upload \> designcenter project upload \[options\] This Command uploads content from a Design Center project from your local directory passed in `projDir` into an already existing Design Center project identified with `name`. By default, this command ignores all hidden files and directories. To include hidden files and directories, use the `--include-dot-files` option. When the `--include-dot-files` option is used, the command uploads hidden files and folders from your specified directory. Use the `--branch` option to select the branch you want to upload content to. This command also accepts the default `--help`, `-f`/`--fields` and `-o`/`--output` options. ## designcenter project list \> designcenter project list \[options\] \[searchText\] This Command lists all your Design Center projects. You can start typing your project’s name and press `tab` for Anypoint Platform CLI to autocomplete it, or you can double tap `tab` for a full list of all the values you can pass. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--pageIndex

Number of page to retrieve

designcenter project list --pageIndex 3

--pageSize

Number of results to retrieve per page

designcenter project list --pageSize 5

--- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Design Center Projects > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `designcenter` commands for managing APIs from Design Center. For more information about how to use these commands, refer to the [Design Center documentation](https://docs.mulesoft.com/design-center/).
CommandDescription

Creates a new Design Center project

Deletes a Design Center project

Downloads the content of a Design Center project

Lists all Design Center projects

Publishes a Design Center project to Exchange

Uploads the content of a project to Design Center

## designcenter:project:create \> designcenter:project:create \[flags\] Creates a new Design Center project with the name specified in `` > [!IMPORTANT] This command does not support Mule application types. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--type (required)

The project type.
This field is required.

Supported values are:

  • raml

  • raml-fragment

  • OAS

--type raml

--fragmentType

The fragment type
Always use with --type raml-fragment, even for OAS 3.0 and JSON schema fragments.

This field is required if the type flag was set as raml-fragment

Supported fragments type are:

  • trait

  • resource-type

  • library

  • type

  • user-documentation

  • oas-components

  • json-schema

--type raml-fragment --fragmentType user-documentation

--version

This flag is only available for OAS APIs.
Supported values: 2.0, 3.0

--version 2.0

--format

This flag is only available for OAS APIs.
Supported values: YAML, JSON

--format YAML

--output

Specify the response format

--output json

## designcenter:project:delete \> designcenter:project:delete \[flags\] Deletes the Design Center project specified in `name` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## designcenter:project:download \> designcenter:project:download \[flags\] Downloads the Design Center project passed in `name` to your local directory specified in `targetDir` Use the `--resolveDependenciesTimeout=X` flag to specify the duration, in minutes, for the commands to wait for the resolution of dependencies before downloading a project. If the specified time passes, your project downloads without the missing dependencies. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## designcenter:project:list \> designcenter:project:list \[flags\] \[searchText\] Lists all your Design Center projects In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--pageIndex

Number of page to retrieve

--pageIndex 3

--pageSize

Number of results to retrieve per page

--pageSize 5

--output

Specify the response format.

--output json

## designcenter:project:publish \> designcenter:project:publish \[flags\] Publishes the Design Center project passed in `projectName` to Exchange In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags: > [!TIP] Flags that are not specified are extracted from exchange.json
FlagDescriptionExample

--apiVersion

The API version if your project is an API specification project

--main sample.raml --apiVersion 1.0

--assetId

The asset assetId

designcenter:project:publish --assetId project

--groupId

The asset groupId

designcenter:project:publish --groupId com.mulesoft.com

--main

The name of the main file name

--main sample.xml

--name

The name for the asset

--name sampleProject

--status

The asset status
Supported values are: development and published (default)

designcenter:project:publish --version 1.0

--tags

Comma separated list of tags

--tags test,sample,integration

--version

The asset version

designcenter:project:publish --version 1.0

## designcenter:project:upload \> designcenter:project:upload \[flags\] Uploads content from a Design Center project from your local directory passed in `projDir` into an already existing Design Center project identified with `name`. By default, this command ignores all hidden files and directories. To include hidden files and directories, use the `--include-dot-files` flag. When the `--include-dot-files` flag is used, the command uploads hidden files and folders from your specified directory. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for DX Mule Plugin > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands to manage Mule Runtimes, scaffold Mule projects, and introspect connector metadata from the command line.
CommandDescription

Lists all available Mule runtime versions from Exchange

Downloads a Mule runtime to the local machine

Shows or sets the path to the local Mule runtime installation

Scaffolds a new Mule project with Maven structure and connector dependencies

Introspects a connector’s operations, sources, configs, and connection providers

## dx:mule:runtime:list \> anypoint-cli-v4 dx:mule:runtime:list \[flags\] Lists all available Mule runtime versions from Exchange. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command requires Anypoint credentials (username/password, client ID/secret, or bearer token). This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## dx:mule:runtime:download \> anypoint-cli-v4 dx:mule:runtime:download \[flags\] Downloads a Mule runtime to the local machine. If `--version` is omitted, the latest available version is downloaded. This command requires Anypoint credentials (username/password, client ID/secret, or bearer token). In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--version <value>

Mule runtime version to download. If omitted, downloads the latest available version.

--version 4.6.0

## dx:mule:runtime:path \> anypoint-cli-v4 dx:mule:runtime:path \[flags\] Shows the path to the local Mule runtime installation. Use `--set` to point the CLI to a specific runtime directory. No Anypoint credentials are required for this command. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--set <value>

Sets the path to the local Mule runtime installation

--set ~/mule-enterprise-standalone-4.11.2

## dx:mule:project:create \> anypoint-cli-v4 dx:mule:project:create --group-id \[flags\] Scaffolds a new Mule project with a standard Maven structure and the specified connector dependencies. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id <value> (required)

Maven group ID for the project

--group-id com.example

--dependencies <value>

Comma-separated list of connector dependencies in groupId:artifactId:version (GAV) format

--dependencies "com.mulesoft.connectors:mule-salesforce-connector:10.20.0"

--mule-version <value>

Mule runtime version for the project. Default: 4.4.0

--mule-version 4.6.0

### Example $ anypoint-cli-v4 dx:mule:project:create my-integration \\ --group-id com.example \\ --dependencies "com.mulesoft.connectors:mule-salesforce-connector:10.20.0" \\ --mule-version 4.6.0 ## dx:mule:describe-connector \> anypoint-cli-v4 dx:mule:describe-connector --connector \[flags\] Introspects a connector and returns details about its operations, event sources, configurations, and connection providers. Use `--type` to drill into a specific component. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--connector <value> (required)

Connector GAV coordinates in groupId:artifactId:version format

--connector com.mulesoft.connectors:mule-salesforce-connector:10.20.0

--type <value>

Detail type to return. If omitted, returns a high-level overview (namespace, operations, sources, configs).
Supported values: operation, source, connection-provider

--type operation

--name <value>

Name of the component to inspect. Required when --type is set.

--name query

--config-name <value>

Configuration name. Required when --type is connection-provider.

--config-name sfdc-config

--output <value>

Output format. Supported values: table (default), json

--output json

### Examples Get a high-level overview of a connector $ anypoint-cli-v4 dx:mule:describe-connector \\ --connector com.mulesoft.connectors:mule-salesforce-connector:10.20.0 \\ --output json Get details for a specific operation $ anypoint-cli-v4 dx:mule:describe-connector \\ --connector com.mulesoft.connectors:mule-salesforce-connector:10.20.0 \\ --type operation --name query --output json Get details for a specific event source $ anypoint-cli-v4 dx:mule:describe-connector \\ --connector com.mulesoft.connectors:mule-salesforce-connector:10.20.0 \\ --type source --name on-new-object --output json Get details for a connection provider $ anypoint-cli-v4 dx:mule:describe-connector \\ --connector com.mulesoft.connectors:mule-salesforce-connector:10.20.0 \\ --type connection-provider --name basic-connection --config-name sfdc-config --output json --- product: Anypoint CLI version: 3.x --- # CLI for Environments and Business Groups > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Make specified environment active

Make specified business-group active

## use environment This command is only available for interactive mode. \> use environment \[options\] This command makes active the environment specified in ``. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## use business-group This command is only available for interactive mode. \> use business-group \[options\] This command makes the business group you specified in `` active. > [!NOTE] If your business group or organization name contains spaces, you need to enclose its name > between `"` characters. > > > \> use business-group "QA Organization" --- product: Anypoint CLI version: 3.x --- # CLI for Exchange Assets > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Uploads an Exchange asset

Uploads an Exchange asset using Exchange Experience API v2

Modifies mutable data of an existing Exchange asset

Modifies status of an existent Exchange asset

Modifies an Exchange asset

Downloads an Exchange asset

Lists all assets

Downloads an asset’s description page from Exchange

Changes an asset’s description page from Exchange

Uploads an asset’s description page from Exchange

Updates an asset’s description page from Exchange

Deletes an asset’s description page from Exchange

List all pages for a given asset

Copies an Exchange asset

Deletes an asset from Exchange

Deprecates an asset

Undeprecate an asset

Show a given asset’s information

Uploads a resource to an asset portal

Lists published resources in the asset portal

Downloads resource from the asset portal

Deletes resource from the asset portal

## exchange asset upload \> exchange asset upload \[options\] \[filePath\] This command uploads an OAS, RAML, WSDL, HTTP, or custom asset using the IDs passed in ``. If `` points to a ZIP archive file, that archive must include an `exchange.json` file describing the asset. Argument `assetIdentifier` should be formatted as follows: `//`. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also accepts:
OptionDescriptionExample

--apiVersion

Asset API version

exchange asset upload --apiVersion 1.0 --name testProject --classifier custom

exchange asset upload --mainFile 'api.yml'

--name

Asset name

--mainFile

Main file of the API asset

--classifier

Valid asset classifiers are oas, raml, wsdl, http, and custom.

## exchange asset uploadv2 \> exchange asset uploadv2 \[properties\] This command uploads a rest-api, soap-api, http-api, raml-fragment, custom, app, template, example, policy, extension, external-library or connector asset using the ID passed in . Use the following format for the _assetIdentifier_ argument: `([_groupID_]/)_assetID_/_version_` If _group\_id_ is not specified, it defaults to the currently selected organization ID.
OptionDescriptionExample

--name

Asset name (required if no pom file is specified)

exchange asset uploadv2 --name "Raml Asset" --description "RAML" --properties.apiVersion v1 --properties.mainFile api.raml --files.raml.zip /…​./file-path/raml.zip raml-asset/1.0.0

--description

Asset description

--properties

Asset properties

For example:

  • properties.mainFile main.yaml

  • properties.apiVersion v1

  • properties.assetLink http://api.com

--files

Asset file, identified as classifier.packaging or packaging, for example, files.raml.zip …​/file-path/raml.zip

To send multiple files, use the same option multiple times:

--files.custom.zip custom.zip --files.pom.xml pom.xml

exchange asset uploadv2 --files.mule-application.jar /…​./file-path/mule-app.jar --files.pom /…​./file-path/mule-app.pom fa7b266c-3817-4cbb-ae49-7f3cc6c8cd9e/my-mule-app/1.0.0

--type

Asset type

Required if no file is specified.

Supported Values:

  • rest-api

  • soap-api

  • http-api

  • raml-fragment

  • custom

  • connector

  • template

  • example

  • policy

  • app

  • extension

  • external-library

  • ruleset

If it is uploaded, the type is inferred from the classifier of the file.

Depending on the type of asset, some possible classifier values are:

  • REST API

    • oas (with zip, yaml, or json as packaging)

    • raml (with zip or raml as packaging)

  • RAML Fragment

    • raml-fragment (with zip or raml as packaging)

  • SOAP API

    • wsdl (with zip, wsld, or xml as packaging)

  • Custom

    • custom

  • Application

    • mule-application (with jar as packaging)

  • Policy

    • mule-policy (with jar as packaging) + policy-definition (with yaml as packaging)

  • Example

    • mule-application-example (with jar as packaging)

  • Template

    • mule-application-template (with jar as packaging)

  • Extension

    • mule-plugin (with jar as packaging)

  • Connector

    • studio-plugin (with zip as packaging) + file with no classifier and packaging jar

  • External Library

    • external-library (with jar as packaging)

--categories

Categories

categories.someKey value

categories.anotherKey anotherValue

--fields

Fields

fields.someKey value

fields.anotherKey anotherValue

--keywords

Keywords (comma-separated)

raml,rest-api,someKeyword

--tags

Tags (comma-separated)

api,tag1,tag2

--dependencies

Asset dependencies (comma-separated)

groupID:assetID:version,groupID2:assetID:version

--status

Asset status

Supported Values:

  • development

  • published

Default value:

  • published

## exchange asset mutableDataUpload \> exchange asset mutableDataUpload \[properties\] This command modifies the mutable data of an already created asset, including tags, categories, fields, and documentation. Use the following format for the _assetIdentifier_ argument: `[__]/__/__` If _group\_id_ is not specified, it defaults to the currently selected organization ID.
OptionDescriptionExample

--docs

Documentation file. (Should specify the "zip" file path. Example: "--docs /…​/file-path/docs.zip")

exchange asset mutableDataUpload --docs /Users/llucas/Desktop/examples/docs.zip --tags "tag1,tag2" --categories.beach sun --fields.central park fa7b266c-3817-4cbb-ae49-7f3cc6c8cd9e/asset-id/1.0.0

--categories

Categories

categories.someKey value

categories.anotherKey anotherValue

--fields

Fields

fields.someKey value

fields.anotherKey anotherValue

--tags

Tags (comma-separated)

api,tag1,tag2

## exchange asset updateStatus \> exchange asset updateStatus \[properties\] This command modifies the status of an already created asset. Use the following format for the _assetIdentifier_ argument: `[__]/__/__` If _group\_id_ is not specified, it defaults to the currently selected organization ID.
CommandDescriptionExample

--status

Asset status

Supported Values:

  • published

  • deprecated

exchange asset updateStatus --status deprecated

Valid transitions are:
FromTo

development

published

published

deprecated

deprecated

published

Note that the `published` state corresponds to the `stable` state ## exchange asset modify \> exchange asset modify \[options\] This command modifies the Exchange asset identified with ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--name

New asset name

exchange asset modify --name newName --tags test,sample

--tags

Comma-separated tags for the asset

## exchange asset download \> exchange asset download \[options\] This command downloads the Exchange asset identified with `` to the directory passed in ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset list \> exchange asset list \[options\] \[searchText\] This command lists all assets in Exchange. > [!TIP] You can specify keywords in searchText to limit results to APIs containing those specific > keywords. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescriptionExample

--limit

Number of results to retrieve

exchange asset list --limit 2

--offset

Offsets the number of APIs passed

exchange asset list --offset 3

--organizationId

Filters by organization id

exchange asset list --organizationId a12b3c45-de6f-789g-hi01-j2klm3nop4q5

## exchange asset page download \> exchange asset page download \[options\] \[pageName\] This command downloads the description page specified in `` for the Exchange asset identified with `` to the directory passed in ``. If \[pageName\] is not specified, this command downloads all pages. > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. The description page in downloaded in Markdown format. When `name` is not specified, all pages are downloaded. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset page modify \> exchange asset page modify \[options\] This command modifies the description page specified in ``, for the Exchange asset identified with ``. > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes the `--name` option to set a new asset page name. ## exchange asset page upload \> exchange asset page upload \[options\] This command uploads an asset description page from the path passed in `` using the name specified in `` to the Exchange asset identified with ``. Naming the page "home" makes the uploaded page the main description page for the Exchange asset. > [!CAUTION] This command publishes all active drafts as part of the operation. Argument `assetIdentifier` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset page update \> exchange asset page update \[options\] This command updates the content of an asset description page from the path passed in `` using the name specified in `` to the Exchange asset identified with ``. Naming the page "home" makes the updated page the main description page for the Exchange asset. > [!CAUTION] This command publishes all active drafts as part of the operation. Argument `assetIdentifier` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset page delete \> exchange asset page delete \[options\] This command deletes the description page specified in ``, for the asset identified with ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset page list \> exchange asset page list This command lists all pages for the asset passed in ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. > [!NOTE] This command only supports published pages. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset copy \> exchange asset copy \[options\] This command copies the Exchange asset from `` to ``. Arguments `` and `` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts the default options `--help`, `-f/--fields`, and `-o/--output`, and also:
OptionDescriptionExample

--targetOrganizationId

Organization ID to copy asset into

exchange asset copy --targetOrganizationId organization_id source_group_id/source_asset_id/source_version target_group_id/target_asset_id/target_version

## exchange asset delete \> exchange asset delete \[options\] This command deletes the Exchange asset passed in ``. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset deprecate \> exchange asset deprecate This command deprecates the asset passed in ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset undeprecate \> exchange asset undeprecate This command undeprecates the asset passed in ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset describe \> exchange asset describe This command describes the asset passed in ``. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/`. If `group_id` is not specified, it defaults to the currently selected Organization ID. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset resource upload \> exchange asset resource upload \[options\] This command uploads the resource specified in `` to a page in the asset portal described in ``. You can use this command for any page of your `` asset. Supported file extensions for `` are: `jpeg`, `jpg`, `jpe`, `gif`, `bmp`, `png`, `webp`, `ico`, `svg`, `tiff`, `tif`. The argument `assetIdentifier` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. The successful output command will be a markdown codesnippet. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset resource list \> exchange asset resource list \[options\] This command lists the resources in the asset portal of the asset specified in ``. Argument `assetIdentifier` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. > [!NOTE] This command lists published resources by default. > You can use the `--draft` option to list draft resources from the asset portal. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes the `--draft` option to list non-published resources in the asset portal. ## exchange asset resource download \> exchange asset resource download \[options\] This command downloads the published resource specified in `` from the asset portal of the asset specified in `` to the file specified in ``. Argument `assetIdentifier` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. Argument `` must be a published resource. You can list all published resources using the [asset resource list](#exchange-asset-resource-list) command. > [!NOTE] This command only supports published resources. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## exchange asset resource delete \> exchange asset resource delete \[options\] This command deletes the resource specified in `` from the asset portal of the asset specified in `` by publishing a new portal in which `resourcePath` has been deleted. Argument `` should be formatted as follows: `[group_id]//`. If `group_id` is not specified, it defaults to the currently selected Organization ID. Argument `` must be a published resource. You can list all published resources using the [asset resource list](#exchange-asset-resource-list) command. > [!CAUTION] This command publishes all active drafts as part of the operation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Exchange Assets > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `exchange` commands to automate your Exchange processes. For more information about how to use these commands, refer to the [Exchange documentation](https://docs.mulesoft.com/exchange/).
CommandDescription

Copies an Exchange asset

Deletes an asset from Exchange

Deprecates an asset

Shows a given asset’s information

Downloads an Exchange asset

Lists all assets

Modifies an Exchange asset

Modifies mutable data of an existing Exchange asset

Deletes an asset’s description page from Exchange

Downloads an asset’s description page from Exchange

List all pages for a given asset

Changes an asset’s description page from Exchange

Updates an asset’s description page from Exchange

Uploads an asset’s description page from Exchange

Deletes resource from the asset portal

Downloads resource from the asset portal

Lists published resources in the asset portal

Uploads a resource to an asset portal

Undeprecates an asset

Modifies the status of an existing asset

Uploads an Exchange asset using Exchange Experience API

> [!NOTE] Exchange commands are currently not available for GovCloud. ## exchange:asset:copy \> exchange:asset:copy \[flags\] Copies the Exchange asset from `` to `` Arguments `` and `` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--targetOrganizationId

Organization ID to copy asset into

--targetOrganizationId organization_id source_group_id/source_asset_id/source_version target_group_id/target_asset_id/target_version

## exchange:asset:delete \> exchange:asset:delete \[flags\] Deletes the Exchange asset passed in `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the default flag `--help`. ## exchange:asset:deprecate \> exchange:asset:deprecate Deprecates the asset passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:describe \> exchange:asset:describe Describes the asset passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. > [!NOTE] When using `--output json`, the `versions` property in the response includes information > about all available versions of the asset, not only the version specified in ``. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:download \> exchange:asset:download \[flags\] Downloads the Exchange asset identified with `` to the directory passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:list \> exchange:asset:list \[flags\] \[searchText\] Lists all assets in Exchange > [!TIP] You can specify keywords in searchText to limit results to APIs containing those specific > keywords. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--limit

Number of results to retrieve

--limit 2

--offset

Offsets the number of APIs passed

--offset 3

--organizationId

Filters by organization id

--organizationId a12b3c45-de6f-789g-hi01-j2klm3nop4q5

--output

Specifies the response format.

--output json

## exchange:asset:modify \> exchange:asset:modify \[flags\] Modifies the Exchange asset identified with `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New asset name

--name newName

--tags

Comma-separated tags for the asset

--tags tag1,tag2

## exchange:asset:mutableDataUpload \> exchange:asset:mutableDataUpload \[flags\] Modifies the mutable data of an already created asset, including tags, categories, fields, and documentation Argument `assetIdentifier` should be formatted as follows: `[__]/__/__` If `group_id` is not specified, it defaults to the currently selected Organization ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--docs

Documentation file (Should specify the "zip" file path)

--docs /Users/llucas/Desktop/examples/docs.zip

--categories

Categories

--categories='{"someKey":"value", "anotherKey":"anotherValue"}'

--fields

Fields

--fields='{"someKey":"value", "anotherKey":"anotherValue"}'

--tags

Tags (comma-separated)

--tags api,tag1,tag2

## exchange:asset:page:delete \> exchange:asset:page:delete \[flags\] Deletes the description page specified in ``, for the asset identified with `` > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:page:download \> exchange:asset:page:download \[flags\] \[pageName\] Downloads the description page specified in `` for the Exchange asset identified with `` to the directory passed in `` If \[pageName\] is not specified, this command downloads all pages. > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID The description page is downloaded in Markdown format. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:page:list \> exchange:asset:page:list Lists all pages for the asset passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID > [!NOTE] This command only supports published pages. This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:page:modify \> exchange:asset:page:modify \[flags\] Modifies the description page specified in ``, for the Exchange asset identified with `` > [!NOTE] This command only supports published pages. Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the `--name` flag to set a new asset page name. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:page:update \> exchange:asset:page:update \[flags\] Updates the content of an asset description page from the path passed in `` using the name specified in `` to the Exchange asset identified with `` Naming the page "home" makes the updated page the main description page for the Exchange asset. > [!CAUTION] This command publishes all active drafts as part of the operation. Argument `assetIdentifier` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:page:upload \> exchange:asset:page:upload \[flags\] Uploads an asset description page from the path passed in `` using the name specified in `` to the Exchange asset identified with `` Naming the page "home" makes the uploaded page the main description page for the Exchange asset. > [!CAUTION] This command publishes all active drafts as part of the operation. Argument `assetIdentifier` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:resource:delete \> exchange:asset:resource:delete \[flags\] Deletes the resource specified in `` from the asset portal of the asset specified in `` by publishing a new portal in which `resourcePath` has been deleted. Argument `` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID Argument `` must be a published resource You can list all published resources using the [asset resource list](#exchange-asset-resource-list) command. > [!CAUTION] This command publishes all active drafts as part of the operation. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:resource:download \> exchange:asset:resource:download \[flags\] Downloads the published resource specified in `` from the asset portal of the asset specified in `` to the file specified in `` Argument `assetIdentifier` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID Argument `` must be a published resource You can list all published resources using the [asset resource list](#exchange-asset-resource-list) command. > [!NOTE] This command only supports published resources. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:resource:list \> exchange:asset:resource:list \[flags\] Lists the resources in the asset portal of the asset specified in `` Argument `assetIdentifier` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID > [!NOTE] This command lists published resources by default. This command accepts the `--draft` flag to list non-published resources in the asset portal. Prompt the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:resource:upload \> exchange:asset:resource:upload \[flags\] Uploads the resource specified in `` to a page in the asset portal described in `` You can use this command for any page of your `` asset Supported file extensions for `` are: `jpeg`, `jpg`, `jpe`, `gif`, `bmp`, `png`, `webp`, `ico`, `svg`, `tiff`, `tif` The argument `assetIdentifier` should be formatted as follows: `[group_id]//` If `group_id` is not specified, it defaults to the currently selected Organization ID The successful output command will be a markdown codesnippet. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:undeprecate \> exchange:asset:undeprecate Undeprecates the asset passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## exchange:asset:updateStatus \> exchange:asset:updateStatus \[flags\] Modifies the status of an already created asset Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--status

Asset status

Supported Values:

  • published

  • deprecated

--status deprecated

Valid transitions are:
FromTo

development

published

published

deprecated

deprecated

published

> [!NOTE] the `published` state corresponds to the `stable` state ## exchange:asset:upload \> exchange:asset:upload \[flags\] Uploads a rest-api, soap-api, http-api, raml-fragment, custom, app, template, example, policy, extension, external-library, connector asset, or ruleset using the ID passed in `` Argument `assetIdentifier` should be formatted as follows: `([group_id]/)/` If `group_id` is not specified, it defaults to the currently selected Organization ID In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--categories

Categories (value should be a string in JSON format)

--categories '{"Department": "IT"}'

--dependencies

Asset dependencies (comma-separated)

--dependencies groupID:assetID:version,groupID2:assetID:version

--description

Asset description

--description "RAML"

--files

Asset file, identified as classifier.packaging or packaging and its file path
To send multiple files, you can use the same flag multiple times.
An exception to this is when you upload ruleset documentation with a ruleset. Both sets of classifiers and packaging options must be entered in a single --files flag

To upload a POM file and a RAML specification:

--files'{"pom.xml": "directory/pom-file.xml"}' --files='{"raml.raml": "./my-api.raml"}'

To upload a ruleset and its documentation:

anypoint-cli-v4 exchange asset upload my-auth-best-practices/1.0.0 --name "My Best Practices Ruleset" --description "This ruleset enforces my best practices for APIs." --files='{"ruleset.yaml":"/myRulesetFolder/mynewruleset.yaml","docs.zip":"/myRulesetFolder/ruleset.doc.zip"}'

--fields

Fields (value should be a string in JSON format)

--fields '{"releaseDate": "2020-01-01T20:00:00.000Z"}'

--keywords

Keywords (comma-separated)

--keywords raml,rest-api,someKeyword

--name

Asset name (required if no pom file is specified)

--name "Raml Asset"

--properties

Asset properties
The file of the specified "mainFile" property must be in the uploaded zip file on the root path. The file cannot be in a subfolder.

--properties='{"apiVersion":"v1", "mainFile":"api.raml", "contactName":"contact", "contactEmail":"example@mulesoft.com"}'

--status

Asset status
Supported Values:

  • development

  • published (default)

--status development

--tags

Tags (comma-separated)

-- tags api,tag1,tag2

--type

Asset type

Required if no file is specified.

Supported Values:

  • rest-api

  • soap-api

  • http-api

  • raml-fragment

  • custom

  • connector

  • template

  • example

  • policy

  • app

  • extension

  • external-library

  • ruleset

If it is uploaded, the type is inferred from the classifier of the file

Depending on the type of asset, some possible classifier values are:

  • REST API

    • oas (with zip, yaml, or json as packaging)

    • raml (with zip or raml as packaging)

  • RAML Fragment

    • raml-fragment (with zip or raml as packaging)

  • SOAP API

    • wsdl (with zip, wsld, or xml as packaging)

  • Custom

    • custom

    • docs (with doc.zip as packaging)

  • Application

    • mule-application (with jar as packaging)

  • Policy

    • mule-policy (with jar as packaging) + policy-definition (with yaml as packaging)

  • Example

    • mule-application-example (with jar as packaging)

  • Template

    • mule-application-template (with jar as packaging)

  • Extension

    • mule-plugin (with jar as packaging)

  • Connector

    • studio-plugin (with zip as packaging) + file with no classifier and packaging jar

  • External Library

    • external-library (with jar as packaging)

  • Ruleset

    • ruleset (with zip or yaml as packaging)

--type rest-api

## See Also - [Autocataloging APIs Using API Catalog CLI](https://docs.mulesoft.com/exchange/apicat-about-api-catalog-cli) --- product: Anypoint CLI version: 3.x --- # CLI for Hybrid Application Alerts > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands to control alerts for apps that are deployed to your local Mule server and managed with Runtime Manager.
CommandDescription

Describes an alert

Creates new alert for standalone runtime

Modifies alert for standalone runtime

Lists all alerts for standalone runtimes in the environment

## runtime-mgr standalone-alert describe \> runtime-mgr standalone-alert describe \[options\] This command describes the alert passed in `alertId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-alert create \> runtime-mgr standalone-alert create \[options\] This command creates a new alert for a standalone runtime with the ID passed in `name`. The alert `name` is limited to 256 characters. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--severity <val>

Alert severity

--resourceType <type>

Alert resource type

--resource [id]

Alert resource ID. Can be used multiple types. If not provided alert triggers for all resources. Depending on resourceType resource can be application, server, server-group or cluster.

--condition <val>

Alert trigger condition

--period [minutes]

Condition duration in minutes

--threshold [num]

Condition threshold number

--operator [type]

Condition operator explaining values relation to threshold.

--subject <string>

Alert notification email subject

--content <string>

Alert notification email body

--recipient [username]

Username to send alert notification to. Can be used multiple times to specify up to 20 platform user IDs.

--email [emailAddress]

Email address to send alert notification to. Can be used multiple times to specify up to 20 email addresses.

## runtime-mgr standalone-alert modify \> runtime-mgr standalone-alert modify \[options\] This command modifies the alert passed in `alertId`. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--name <value>

Alert name

--severity <value>

Alert severity

--resourceType <type>

Alert resource type

--resource [id]

Alert resource ID. Can be used multiple types. If not provided alert triggers for all resources. Depending on resourceType resource can be application, server, server-group or cluster.

--condition <value>

Alert trigger condition

--period [minutes]

Condition duration in minutes

--threshold [num]

Condition threshold number

--operator [type]

Condition operator explaining values relation to threshold.

--subject <string>

Alert notification email subject

--content <string>

Alert notification email body

--recipient [username]

Username to send alert notification to. Can be used multiple times to specify up to 20 platform user IDs.

--email [emailAddress]

Email address to send alert notification to. Can be used multiple times to specify up to 20 email addresses.

## runtime-mgr standalone-alert list \> runtime-mgr standalone-alert list \[options\] This command lists all alerts for standalone Mules in the current environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Hybrid Application Alerts > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands to control alerts for apps that are deployed to your local Mule server and managed with Runtime Manager. For more information about how to use these commands, refer to the [Runtime Manager documentation](https://docs.mulesoft.com/runtime-manager/).
CommandDescription

Creates new alert for standalone runtime

Describes an alert

Lists all alerts for standalone runtimes in the environment

Modifies alert for standalone runtime

## runtime-mgr:standalone-alert:create \> runtime-mgr:standalone-alert:create \[flags\] Creates a new alert for a standalone runtime with the ID passed in `name`. The alert `name` is limited to 256 characters. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--condition

Alert trigger condition

--condition cluster-up

--content <string>

Alert notification email body

--content Email Body

--email

Email address to send alert notification to
Can be used multiple times to specify up to 20 email addresses

--email user@mulesoft.com

--operator

Condition operator explaining values relation to threshold.

--operator gt

--period

Condition duration in minutes

--period 15

--recipient

Username to send alert notification to
Can be used multiple times to specify up to 20 platform user IDs

--recipient 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--resource

Alert resource ID. If not provided alert triggers for all resources. Depending on resourceType, the resource id can be of an application, server, server-group or cluster.

--resource 12343

--resourceType

Alert resource type

--resourceType server

--severity

Alert severity

--severity 3

--subject <string>

Alert notification email subject

--subject Email Subject

--threshold

Condition threshold number

--threshold 10

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## runtime-mgr:standalone-alert:describe \> runtime-mgr:standalone-alert:describe \[flags\] Describes the alert passed in `alertId`. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-alert:list \> runtime-mgr:standalone-alert:list \[flags\] Lists all alerts for standalone Mules in the current environment. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-alert:modify \> runtime-mgr:standalone-alert:modify \[flags\] Modifies the alert passed in `alertId`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--condition

Alert trigger condition

--condition server-load-average

--content <string>

Alert notification email body

--content Email Body

--email

Email address to send alert notification to
Can be used multiple times to specify up to 20 email addresses

--email user@mulesoft.com

--name

Alert name

--name testAlert

--operator

Condition operator explaining values relation to threshold.

--operator lt-

--period

Condition duration in minutes

--period 15

--recipient

Username to send alert notification to
Can be used multiple times to specify up to 20 platform user IDs

--recipient 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--resource

Alert resource ID. If not provided alert triggers for all resources. Depending on resourceType, the resource id can be of an application, server, server-group or cluster.

--resource 12343

--resourceType

Alert resource type

--resourceType server

--severity

Alert severity

--severity 3

--subject <string>

Alert notification email subject

--subject Email Subject

--threshold

Condition threshold number

--threshold 10

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. --- product: Anypoint CLI version: 3.x --- # CLI for Hybrid Applications > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands for apps that are deployed to your local Mule server and managed with Runtime Manager. For the Anypoint Platform CLI to recognize your target servers, each server must be manually registered with the platform.
CommandDescription

Downloads a standalone application artifact binary

Deploys or redeploys an application to an on-premises server, server group, or cluster

Shows a raw standalone application JSON response

Changes a standalone application artifact

Starts a standalone application

Deletes a standalone application

Shows detailed information for a standalone application

Lists all standalone applications in the environment

Restarts a standalone application

Stops a standalone application

Copies a standalone application

## runtime-mgr standalone-application artifact \> runtime-mgr standalone-application artifact \[options\] This command downloads the application artifact of the `identifier` application, to the directory passed in `directory`. The `identifier` parameter can be either an application ID or name. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application deploy \> runtime-mgr standalone-application deploy \[options\] This command deploys or redeploys the application passed as a ZIP file in the path `zipfile` to the on-premises target passed in `targetIdentifier`. The `targetIdentifier` parameter can be either a target ID or name. A target can be either a server, server group, or cluster. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. To redeploy an app and set a logging level or turn on Insight event tracking, see [runtime-mgr standalone-application modify](#runtime-mgr-standalone-application-modify). ## runtime-mgr standalone-application describe-json \> runtime-mgr standalone-application describe-json \[options\] This command describes the standalone (on-premises) application passed in `identifier` as a raw JSON response. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application modify \> runtime-mgr standalone-application modify \[options\] This command modifies the standalone (on-premises) application passed in `identifier` with the ZIP file application passed in `zipfile` as a path. The `identifier` parameter specifies the application identifier. To retrieve the identifier, see [runtime-mgr standalone-application list](https://docs.mulesoft.com/anypoint-cli/latest/standalone-apps#runtime-mgr-standalone-application-list). In addition to the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--insight

Stores message metadata of every Mule transaction.

--log [level:scope]

Sets the logging level and scope pair:

  • level: TRACE, DEBUG, INFO, WARN, ERROR, FATAL, or OFF

  • scope: package name of the class, connector, or module to log, such as org.mule.extension.ftp for Anypoint Connector for FTP

To set multiple logging levels, provide multiple --log options, for example, --log INFO:org.apache --log WARN:org.mule.

## runtime-mgr standalone-application start \> runtime-mgr standalone-application start \[options\] This command starts the standalone (on-premises) application passed in `identifier`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application delete \> runtime-mgr standalone-application delete \[options\] This command deletes the standalone (on-premises) application passed in `identifier`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr standalone-application describe \> runtime-mgr standalone-application describe \[options\] This command shows detailed information, such as status, creation date, and last update, for the standalone (on-premises) application passed in `identifier`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application list \> runtime-mgr standalone-application list \[options\] This command lists all standalone (on-premises) applications. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--limit <num>

Specifies the number of results to retrieve

--offset <num>

Offsets the number of applications passed

## runtime-mgr standalone-application restart \> runtime-mgr standalone-application restart \[options\] This command restarts the standalone (on-premises) application passed in `identifier`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application stop \> runtime-mgr standalone-application stop \[options\] This command stops the standalone (on-premises) application passed in `identifier`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr standalone-application copy \> runtime-mgr standalone-application copy \[options\] This command copies the standalone (on-premises) application passed in `source` to the target passed in `target` and the server, server group or cluster ID or Name passed in `targetIdentifier`. Both arguments `source` and `destination` are represented using the format: `:/`, for example: \> runtime-mgr standalone-application copy Services:QA/application-1 Development:QA/application-2 123456 Copies the application named `application-1` from the QA environment of the _Services_ organization to the QA environment of the `_Development_` organization in the server ID 123456. If the Anypoint Platform CLI is using the QA environment in the Services organization, the command can simply take the application name as a `source`: \> runtime-mgr standalone-application copy application-1 Development/QA/application-2 123456 > [!NOTE] Running this command requires for your user to have read/write access to the `/tmp` > directory of the OS where the CLI is installed. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 3.x --- # CLI for Local Cluster Servers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Adds server to cluster

Deletes cluster

Lists all clusters in the environment

Removes server from a cluster

Creates new cluster

Describes server cluster

Modifies cluster

## runtime-mgr cluster add server \> runtime-mgr cluster add server \[options\] This command adds the cluster in `clusterId` to the server passed in `serverId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cluster delete \> runtime-mgr cluster delete \[options\] This command deletes the cluster passed in `clusterId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr cluster list \> runtime-mgr cluster list \[options\] This command lists all clusters in the environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cluster remove server \> runtime-mgr cluster remove server \[options\] This command removes the server passed in `serverId` from the cluster passed in `clusterId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cluster create \> runtime-mgr cluster create \[options\] This command creates a cluster using the id passed in `name`. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes:
OptionDescription

--multicast

Whether cluster should be multicast

--server <id:ip>

Pair of server ID and IP address. Latter is optional for multicast cluster. Provide multiple values to add multiple servers

## runtime-mgr cluster describe \> runtime-mgr cluster describe \[options\] This command describes the cluster passed in `clusterId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr cluster modify \> runtime-mgr cluster modify \[options\] This command modifies the cluster passed in `clusterId`. In order to update the id for the cluster, you need to pass the `--name` option. Besides the `--name` option, this command also takes the default `--help`, `-f`/`--fields` and `-o`/`--output` options. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Local Server Clusters > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `cluster` commands to automate your Local Server Clusters processes. For more information about how to use these commands, refer to the [Runtime Manager documentation](https://docs.mulesoft.com/runtime-manager/).
CommandDescription

Adds server to cluster

Creates new cluster

Describes server cluster

Deletes cluster

Modifies cluster

Lists all clusters in the environment

Removes server from a cluster

## runtime-mgr:cluster:add:server \> runtime-mgr:cluster:add:server \[flags\] Adds the cluster in `clusterId` to the server passed in `serverId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cluster:create \> runtime-mgr:cluster:create \[flags\] This command creates a cluster using the id passed in `name`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--multicast

Whether cluster should be multicast

--multicast

--server

Pair of server ID and IP address
IP address is optional for multicast cluster
Provide multiple values to add multiple servers

--server 903083:192.168.0.1

> [!NOTE] This command has multi-option flags. When using multi-option flags in a command, either > put the parameter before the flags or use a \`-- \` (two dashes followed by a space) before the > parameter. ## runtime-mgr:cluster:describe \> runtime-mgr:cluster:describe \[flags\] Describes the cluster passed in `clusterId`. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cluster:delete \> runtime-mgr:cluster:delete \[flags\] Deletes the cluster passed in `clusterId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr:cluster:list \> runtime-mgr:cluster:list \[flags\] Lists all clusters in the environment. This command has the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cluster:modify \> runtime-mgr:cluster:modify \[flags\] Modifies the cluster passed in `clusterId`. In order to update the id for the cluster, you need to pass the `--name` flag. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:cluster:remove:server \> runtime-mgr:cluster:remove:server \[flags\] Removes the server passed in `serverId` from the cluster passed in `clusterId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Local Server Groups > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Creates server group from servers

Describes server group

Modifies server group

Adds server to a server group

Deletes server group

Lists all server groups in the environment

Removes server from a server group

## runtime-mgr serverGroup create \> runtime-mgr serverGroup create \[options\] \[serverIds...\] This command creates a server group with the name passed in `name` using the server Id(s) passed as argument(s) thereafter. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr serverGroup describe \> runtime-mgr serverGroup describe \[options\] This command describes the server group passed in `serverGroupId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr serverGroup modify \> runtime-mgr serverGroup modify \[options\] This command modifies the server group passed in `serverGroupId`. In order to update the id for the cluster, you need to pass the `--name` option. Besides the `--name` option, this command also takes the default `--help`, `-f`/`--fields` and `-o`/`--output` options. ## runtime-mgr serverGroup add server \> runtime-mgr serverGroup add server \[options\] This command adds the server passed in `serverId` to the server group passed in `serverGroupId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr serverGroup delete \> runtime-mgr serverGroup delete \[options\] This command deletes the server groups passed in `serverGroupId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr serverGroup list \> runtime-mgr serverGroup list \[options\] This command lists all server groups in the environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr serverGroup remove server \> runtime-mgr serverGroup remove server \[options\] This command removes the server passed in `serverId` from the server group passed in `serverGroupId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Local Server Groups > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `serverGroup` commands to automate your Local Server Groups processes. For more information about how to use these commands, refer to the [Runtime Manager documentation](https://docs.mulesoft.com/runtime-manager/).
CommandDescription

Adds server to a server group

Creates server group from servers

Describes server group

Deletes server group

Lists all server groups in the environment

Modifies server group

Removes server from a server group

## runtime-mgr:serverGroup:add:server \> runtime-mgr:serverGroup:add:server \[flags\] Adds the server passed in `serverId` to the server group passed in `serverGroupId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:serverGroup:create \> runtime-mgr:serverGroup:create \[flags\] \[serverIds...\] Creates a server group with the name passed in `name` using the server Id(s) passed as argument(s) thereafter. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:serverGroup:describe \> runtime-mgr:serverGroup:describe \[flags\] Describes the server group passed in `serverGroupId`. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:serverGroup:delete \> runtime-mgr:serverGroup:delete \[flags\] Deletes the server groups passed in `serverGroupId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr:serverGroup:list \> runtime-mgr:serverGroup:list \[flags\] Lists all server groups in the environment. This command has the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:serverGroup:modify \> runtime-mgr:serverGroup:modify \[flags\] Modifies the server group passed in `serverGroupId`. In order to update the id for the cluster, you need to pass the `--name` flag. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:serverGroup:remove:server \> runtime-mgr:serverGroup:remove:server \[flags\] Removes the server passed in `serverId` from the server group passed in `serverGroupId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Local Servers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Describes server

Modifies server

Gets server registration token. This token needs to be used to register a new server

Deletes server

Changes an standalone application artifact

## runtime-mgr server describe \> runtime-mgr server describe \[options\] This command describes the server passed in `serverId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr server modify \> runtime-mgr server modify \[options\] This command modifies the server passed in `serverId`. In order to update the id for the cluster, you need to pass the `--name` option. Besides the `--name` option, this command also takes the default `--help`, `-f`/`--fields` and `-o`/`--output` options. ## runtime-mgr server token \> runtime-mgr server token \[options\] This command gets server registration token. This token needs to be used to register a new server. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. ## runtime-mgr server delete \> runtime-mgr server delete \[options\] This command deletes the server passed in `serverId`. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr server list \> runtime-mgr server list \[options\] This server lists all servers in your environment. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Local Servers > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `servers` commands to automate your Local Servers processes. For more information about how to use these commands, refer to the [Runtime Manager documentation](https://docs.mulesoft.com/runtime-manager/).
CommandDescription

Describes server

Deletes server

Changes an standalone application artifact

Modifies server

Gets server registration token. This token needs to be used to register a new server

## runtime-mgr:server:describe \> runtime-mgr:server:describe \[flags\] Describes the server passed in `serverId`. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:server:delete \> runtime-mgr:server:delete \[flags\] Deletes the server passed in `serverId`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr:server:list \> runtime-mgr:server:list \[flags\] Lists all servers in your environment. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:server:modify \> runtime-mgr:server:modify \[flags\] Modifies the server passed in `serverId`. In order to update the id for the cluster, you need to pass the `--name` flag. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:server:token \> runtime-mgr:server:token \[flags\] Gets server registration token. This token needs to be used to register a new server. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Managed Omni Gateways > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Create a Managed Omni Gateway

Delete a Managed Omni Gateway

Describe a specific Managed Omni Gateway

Edit a Managed Omni Gateway

Lists all Managed Omni Gateways in the environment

Start a Managed Omni Gateway

Stop a Managed Omni Gateway

## runtime-mgr:gateways:managed:create \> runtime-mgr:gateways:managed:create \[flags\] Creates a new Managed Omni Gateway with the specified configuration The gateway will be deployed to the specified `targetId`. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--releaseChannel

Release channel (required). Supported values: edge, lts

--releaseChannel edge

--version

Runtime version. Use latest for the most recent version available for the configured release channel.
Default: latest

--version 1.10.2

--publicUrl

Public URL(s). For multiple URLs, separate them with commas

--[no-]lastMileSecurity

Enable or disable ingress last mile security.
Default: false

--lastMileSecurity

--[no-]forwardSslSession

Enable or disable ingress forward SSL session.
Default: false

--forwardSslSession

--upstreamResponseTimeout

Upstream response timeout in seconds.
Default: 15

--upstreamResponseTimeout 30

--connectionIdleTimeout

Connection idle timeout in seconds.
Default: 60

--connectionIdleTimeout 120

--loggingLevel

Logging level. Supported values: debug, info, warn, error, fatal.
Default: info

--loggingLevel debug

--[no-]forwardLogs

Enable or disable log forwarding.
Default: true

--no-forwardLogs

--[no-]tracingEnabled

Enable or disable tracing.
Default: false

--tracingEnabled

--tracingSampling

Tracing sampling percentage (1-100). Note: High values may impact performance.
Default: 1

--tracingSampling 50

--tracingLabels

Tracing labels attributes as JSON string

--tracingLabels '[{"type":"environment","name":"prod","keyName":"env","defaultValue":"production"}]'

## runtime-mgr:gateways:managed:delete \> runtime-mgr:gateways:managed:delete \[flags\] Deletes a Managed Omni Gateway If the gateway has associated APIs, the command will display a list of those APIs and prevent deletion until they are removed. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:gateways:managed:describe \> runtime-mgr:gateways:managed:describe \[flags\] Displays detailed information about a specific Managed Omni Gateway This command accepts the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:gateways:managed:edit \> runtime-mgr:gateways:managed:edit \[flags\] Edits the configuration of an existing Managed Omni Gateway. You must specify at least one flag to modify. Only the specified flags will be updated; all other settings will remain unchanged. > [!IMPORTANT] If you specify `--tracingLabels` or `--tracingSampling` without enabling tracing, the > command will return an error. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--releaseChannel

Release channel. Supported values: edge, lts

--releaseChannel lts

--version

Runtime version. Use latest for the most recent version

--version 1.10.3

--publicUrl

Public URL(s). For multiple URLs, separate them with commas

--[no-]lastMileSecurity

Enable or disable ingress last mile security

--no-lastMileSecurity

--[no-]forwardSslSession

Enable or disable ingress forward SSL session

--forwardSslSession

--upstreamResponseTimeout

Upstream response timeout in seconds

--upstreamResponseTimeout 45

--connectionIdleTimeout

Connection idle timeout in seconds

--connectionIdleTimeout 180

--loggingLevel

Logging level. Supported values: debug, info, warn, error, fatal

--loggingLevel error

--[no-]forwardLogs

Enable or disable log forwarding

--no-forwardLogs

--[no-]tracingEnabled

Enable or disable tracing

--tracingEnabled

--tracingSampling

Tracing sampling percentage (1-100)

--tracingSampling 75

--tracingLabels

Tracing labels attributes as JSON string

--tracingLabels '[{"type":"custom","name":"region","keyName":"region","defaultValue":"us-east"}]'

## runtime-mgr:gateways:managed:list \> runtime-mgr:gateways:managed:list \[flags\] Lists all Managed Omni Gateways in the current environment The list includes gateway IDs, names, statuses, runtime versions, and target information. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:gateways:managed:start \> runtime-mgr:gateways:managed:start \[flags\] Starts a stopped Managed Omni Gateway This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:gateways:managed:stop \> runtime-mgr:gateways:managed:stop \[flags\] Stops a running Managed Omni Gateway This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Managing Apps in Runtime Fabric > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands for managing applications in Runtime Fabric.
CommandDescription

Deletes an application

Deploys an application to a specified target using an Exchange application and runs the specified runtime version

Describes an application

Describes an application in a raw JSON response

Downloads logs of an application from a specification to a specified directory

Lists all applications in an organization

Modifies a deployed application

Starts a stopped application

Stops running an application

Tails an application’s logs from a specification

## runtime-mgr application delete \> runtime-mgr application delete \[options\] Deletes the running application specified in ``. To get this ID, run the `runtime-mgr application list` command. > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application deploy \> runtime-mgr application deploy \[options\] Deploys the application specified in `` to the deployment target specified using the following options:
ValueDescriptionExample

ArtifactId

Artifact ID of the application retrieved from Exchange.

mule-test-plugin

deploymentTargetID

ID of the deployment target.
You can get this ID directly from Runtime Manager.

app.runetime

name

Name of the application to deploy.

testCloudhub2app

runtimeVersion

Runtime version of the deployment target.

1.0.1

Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes these options:
ValueDescriptionExample

assetVersion

Version of the Exchange application to use.
Default: latest application version

2.0.4

clustered

Enables clustered nodes, which requires at least two replicas.
Default:.disabled
Supported values: true, false

false

disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled
Supported values: true, false

true

forwardSslSession

Enables SSL session forwarding.
Default: disabled
Values: true, false

false

groupID

Group ID of the asset to deploy.
Default: selected organization ID

org.mule.test

javaVersion

Set the name of the JAVA version to be used for the selected Mule version. Supported values are 8 and 17. If you do not specify a value, Runtime Fabric imposes the default value. The default JAVA version for Mule 4.6 and earlier versions is '8'. If you don’t specify a Mule version, the default Mule version for the selected JAVA version is used. If the JAVA version you select is not available for the specified Mule version, you get an error.

8

lastMileSecurity

Enables Last Mile Security.
Default: disabled
Supported values: true, false

true

memory

The amount of memory allocated to each replica of a Mule application or API gateway.

0.7

objectStoreV2

Enables Object Store v2.
Default: disabled
Supported values: true, false

true

pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

/http://localhost:3000

property

Sets a property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--property "gcp.privateKey:dGVzdA\=\="

propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

/Users/mule/Documents/properties.txt

publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

my-superapp-example:/status?limit=10

releaseChannel

Set the name of the release channel to be used for the selected Mule version. Supported values are NONE, EDGE, and LTS. If you do not specify a value, Runtime Fabric imposes the default value. The default release channel is EDGE. If you don’t specify a Mule version, the default Mule version for the selected release channel is used. If the selected release channel doesn’t exist, you get an error.

EDGE

replicas

Number of replicas. Must be above 0.
Default: 1

2

replicaSize

Size of replicas in Vcores.
Default: 0.1

0.5

reservedCPU

The amount of vCPU guaranteed to the application and reserved for its use.

0.02

scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

testscope1:WARN,testscope2:DEBUG

scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: one tupple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

/Users/mule/Documents/cert.txt

secureProperty

Sets a secure property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--secureProperty "gcp.privateKey:dGVzdA\=\="

updateStrategy

Updates the strategy used.
Default: rolling

recreate

vCPULimit

The maximum amount of vCPU the application can use (the level to which it can burst). This is shared CPU on the worker node.

3.9

## runtime-mgr application describe \> runtime-mgr application describe \[options\] Displays information about the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application describe-json \> runtime-mgr application describe-json \[options\] Displays a raw JSON response from the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application download-logs \> runtime-mgr application download-logs \[options\] Downloads logs for the application specified in `` from the specification specified in `` to the selected directory. To get the ``, run the `runtime-mgr application list` command. To get the `` run the `runtime-mgr application describe` command. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application list \> runtime-mgr application list \[options\] Lists all applications in your organization. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output` ## runtime-mgr application modify \> runtime-mgr application modify \[options\] Updates the settings of an existing application specified in ``. To get the ``, run the `runtime-mgr application list` command. Besides the default `--help`, `-f`/`--fields` and `-o`/`--output` options, this command also takes these options:
ValueDescriptionExample

ArtifactId

ID of the application retrieved from Exchange.

mule-maven-plugin

assetVersion

Version of the Exchange application to use.
Default: latest application version

2.0.4

clustered

Enables clustered nodes, which requires at least two replicas.
Default: disabled
Supported values: true, false

false

disableAmLogForwarding

Disables forwarding applications logs to Anypoint Monitoring.
Default: enabled
Supported values: true, false

true

forwardSslSession

Enables SSL session forwarding.
Default: disabled
Values: true, false

false

groupID

Group ID of the asset to deploy.
Default: selected organization ID.

org.mule.testgroup

lastMileSecurity

Enables Last Mile Security.
Default: disabled
Supported values: true, false

true

objectStoreV2

Enables object store v2.
Default: disabled
Supported values: true, false

true

pathRewrite

Supplies the base path expected by the HTTP listener in your application.
Format: must begin with /

/http://localhost:3000.

property

Sets a property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--property "gcp.privateKey:dGVzdA\=\="

propertiesFile

Replaces all properties with values from a selected file.
Format: one or more lines in name: value style

/Users/mule/Documents/properties.txt

publicEndpoints

Supplies endpoints to reach via the public internet.
Format: separated by commas, no spaces

my-superapp-example: /status?limit=10

replicas

Number of replicas. Must be above 0.
Default: 1

2

replicaSize

Size of replicas in Vcores.
Default: 0.1

0.5

runtimeVersion

Runtime version of the deployment target.

1.0.1

scopeLoggingConfig

Defines scope logging.
Format: scopeName: logLevel, separated by commas, no spaces

testscope1:WARN,testscope2:DEBUG

scopeLoggingConfigFile

Uploads a file to define scope logging.
Format: 1 tupple per line, style: {scope: scopeName, logLevel: logLevelType} enclosed with {} () or []

/Users/mule/Documents/cert.txt

secureProperty

Sets a secure property.
Format: name:value. Can be specified multiple times.
Enclose the property in quotes and escape the : and = characters.

--secureProperty "gcp.privateKey:dGVzdA\=\="

updateStrategy

Updates the strategy used.
Default: rolling

recreate

## runtime-mgr application start \> runtime-mgr application start \[options\] Starts running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default option `--help`. ## runtime-mgr application stop \> runtime-mgr application stop \[options\] Stops running the application specified in ``. To get this ID, run the `runtime-mgr application list` command. This command accepts only the default option `--help`. ## runtime-mgr application tail-logs \> runtime-mgr:application:tail-logs \[options\] Tails application logs for the application specificied in `` from the specification specified in ``. To get the ``, run the `runtime-mgr application list` command. To get the `` run the `runtime-mgr application describe` command. This command accepts only the default option `--help`. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for PDK Policy Projects > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `policy-project` commands for creating Policy Development Kit (PDK) projects. See [Policy Development Kit documentation](https://docs.mulesoft.com/pdk/latest/policies-pdk-prerequisites) for more information about developing custom policies with the PDK.
CommandDescription

Creates a custom policy definition project

## policy-project:create \> policy-project:create \[flags\] Creates a custom policy definition project with the name specified in `` This command scaffolds a new project structure for developing a custom MuleSoft policy using the Policy Development Kit (PDK). This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 3.x --- # CLI for Runtime Fabric Instances > For the full documentation index, see: https://docs.mulesoft.com/llms.txt
CommandDescription

Lists available Runtime Fabric instances

## runtime-mgr rtf list \> runtime-mgr rtf list \[options\] This command lists available Runtime Fabric instances. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. For information about managing your Runtime Fabric instances using the command line, see [Supported rtfctl Commands](https://docs.mulesoft.com/runtime-fabric/latest/install-rtfctl#supported-commands). --- product: Anypoint CLI version: 3.x --- # CLI for Runtime Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports these Runtime Manager features: - [Hybrid Applications](https://docs.mulesoft.com/anypoint-cli/3.x/standalone-apps) - [Alerts for Hybrid Applications](https://docs.mulesoft.com/anypoint-cli/3.x/standalone-alerts) - [Local Servers](https://docs.mulesoft.com/anypoint-cli/3.x/servers) - [Local Cluster Servers](https://docs.mulesoft.com/anypoint-cli/3.x/server-clusters) - [Local Server Groups](https://docs.mulesoft.com/anypoint-cli/3.x/server-groups) --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Runtime Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI supports these Runtime Manager features: - [Hybrid Applications](https://docs.mulesoft.com/anypoint-cli/latest/standalone-apps) - [Alerts for Hybrid Applications](https://docs.mulesoft.com/anypoint-cli/latest/standalone-alerts) - [Local Servers](https://docs.mulesoft.com/anypoint-cli/latest/servers) - [Local Server Clusters](https://docs.mulesoft.com/anypoint-cli/latest/server-clusters) - [Local Server Groups](https://docs.mulesoft.com/anypoint-cli/latest/server-groups) - [Managed Flex Gateways](https://docs.mulesoft.com/anypoint-cli/latest/managed-gateways) --- product: Anypoint CLI version: 4.x is-latest-version: true --- # CLI for Secrets Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use the `secrets-mgr` commands to automate your Secrets Manager processes. For more information about how to use these commands, refer to the [Secrets Manager documentation](https://docs.mulesoft.com/anypoint-security/index-secrets-manager).
CommandDescription

Creates a new secret group

Deletes a secret group

Shows details of a secret group

Lists secret groups

Modifies a secret group

Creates a shared secret in a secret group

Shows details of a shared secret

Lists all shared secrets in a secret group

Modifies a shared secret

Replaces an existing shared secret

Creates a new certificate secret

Shows details of a certificate secret

Lists all certificate secrets in a secret group

Modifies a certificate secret

Replaces an existing certificate secret

Creates a new keystore secret

Shows details of a keystore secret

Lists all keystore secrets in a secret group

Modifies a keystore secret

Replaces an existing keystore secret

Creates a new truststore secret

Shows details of a truststore secret

Lists all truststore secrets in a secret group

Modifies a truststore secret

Replaces an existing truststore secret

Creates a new Mule TLS context secret

Shows details of a Mule TLS context secret

Lists all Mule TLS context secrets in a secret group

Modifies a Mule TLS context secret

Replaces an existing Mule TLS context secret

Creates a new Omni Gateway TLS context secret

Shows details of a Omni Gateway TLS context secret

Lists all Omni Gateway TLS context secrets in a secret group

Modifies a Omni Gateway TLS context secret

Replaces an existing Omni Gateway TLS context secret

## secrets-mgr:secret-group:create \> secrets-mgr:secret-group:create \[flags\] Creates a new secret group with the name specified by `--name` Prompt the `--downloadable` flag if the secrets in this group are referenced in an API Manager proxy. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:secret-group:delete \> secrets-mgr:secret-group:delete \[flags\] Deletes the secret group specified by `--id` > [!WARNING] This command does not prompt for confirmation before deleting. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:secret-group:describe \> secrets-mgr:secret-group:describe \[flags\] Returns the details of a secret group specified by `--id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:secret-group:list \> secrets-mgr:secret-group:list \[flags\] Lists all your secret groups, including the name and ID This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:secret-group:modify \> secrets-mgr:secret-group:modify \[flags\] Modifies a secret group specified by `--id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

Name for your secret group

--name TestSecretGroup

--downloadable

Secrets in this group are referenced in an API Manager proxy

--downloadable

--no-downloadable

Secrets in this group are not referenced in an API Manager proxy

--no-downloadable

## secrets-mgr:shared-secret:create \> secrets-mgr:shared-secret:create \[flags\] Creates a new shared secret in the secret group specified by `--group-id`, using the name specified by `--name` and the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret

--name TestSecret

--type

Choose the shared secret type (required)
Options: Blob, UsernamePassword, SymmetricKey, S3Credential

--type UsernamePassword

--content

Blob text content (for blob type secrets)

--type Blob --content example

--expiration-date

Expiration date for the secret

--expiration-date 01/01/2025

--key

Key value (for SymmetricKey type secrets)

--type SymmetricKey --key 49324329

--access-key-id

S3 access key id (for S3Credential type secrets)

--type S3Credential -access-key-id 03249348324

--secret-access-key

S3 secret access key (for S3Credential type secrets)

-type S3Credential -secret-access-key 00000000000

--secret-password

Password (for UsernamePassword type secrets)

-type UsernamePassword -secret-password testpassword12

--secret-username

Username (for UsernamePassword type secrets)

-type UsernamePassword -secret-username mulesoft-username

## secrets-mgr:shared-secret:describe \> secrets-mgr:shared-secret:describe \[flags\] Returns the details of a shared secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output does not include any sensitive or secret data. ## secrets-mgr:shared-secret:list \> secrets-mgr:shared-secret:list \[flags\] Lists all shared secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:shared-secret:modify \> secrets-mgr:shared-secret:modify \[flags\] Modifies the name or expiration date for a shared secret specified by `--id`, from the secret group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the shared secret

--name TestSharedSecret

--expiration-date

New expiration date for the shared secret

--expiration-date 2025-01-25

## secrets-mgr:secret-group:replace \> secrets-mgr:shared-secret:replace \[flags\] Replaces an existing shared secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--id

Secret ID (required)

--id 6e8417f6-2ca7-417a-82b6-047189a18b53

--group-id

Secret Group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--type

Shared secret type (required)
The value must match the existing secret type.

--type Blob

--name

New name for your shared secret

--name TestSharedSecret

--content

Blob text content (for blob type secrets)

--type Blob --content example

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--key

Key value (for SymmetricKey type secrets)

--type SymmetricKey --key 49324329

--access-key-id

S3 access key id (for S3Credential type secrets)

--type S3Credential -access-key-id 03249348324

--secret-access-key

S3 secret access key (for S3Credential type secrets)

-type S3Credential -secret-access-key 00000000000

--secret-password

Password (for UsernamePassword type secrets)

-type UsernamePassword -secret-password testpassword12

--secret-username

Username (for UsernamePassword type secrets)

-type UsernamePassword -secret-username mulesoft-username

## secrets-mgr:certificate:create \> secrets-mgr:certificate:create \[flags\] Creates a new certificate secret in the secret group specified by `--group-id`, using the name specified by `--name` and the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--type

Choose the certificate secret type (required)
Options: PEM

--type PEM

--cert-file

Certificate file path

--cert-file ./example-cert.pem

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

## secrets-mgr:certificate:describe \> secrets-mgr:certificate:describe \[flags\] Returns the details of a certificate secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output does not include any sensitive or secret data. ## secrets-mgr:certificate:list \> secrets-mgr:certificate:list \[flags\] Lists all certificate secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:certificate:modify \> secrets-mgr:certificate:modify \[flags\] Modifies the name or expiration date for a certificate secret specified by `--id` from the group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the certificate secret

--name TestCertificateSecret

--expiration-date

New expiration date for the keystore secret

--expiration-date 2025-01-25

## secrets-mgr:certificate:replace \> secrets-mgr:certificate:replace \[flags\] Replaces an existing certificate secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--id

Secret ID (required)

--id 6e8417f6-2ca7-417a-82b6-047189a18b53

--group-id

Secret Group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--type

Certificate secret type (required)
The value must match the existing secret type

--type PEM

--name

New name for your shared secret

--name TestSharedSecret

--cert-file

Certificate file type

--cert-file ./example-cert.pem

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

## secrets-mgr:keystore:create \> secrets-mgr:keystore:create \[flags\] Creates a new keystore secret in the secret group specified by `--group-id`, using the name specified by `--name` and the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--type

Keystore secret type (required)
Options: PEM, JKS, PKCS12, JCEKS

--type PEM

--algorithm

Key manager factory algorithm for JKS, PKCS12, and JCEKS keystore secrets

--algorithm PKIX

--alias

Alias for the key used in JKS, PKCS12, and JCEKS keystore secrets

--alias KeyAliasExample

--capath-file

CA path certificate file for PEM keystore secrets

--capath-file ./example-capath.pem

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--key-file

Key file for PEM keystore secrets

--key-file ./example-key.pem

--key-passphrase

Passphrase required for JKS, PKCS12 and JCEKS keystore secrets
Optional for PEM keystore secrets

--key-passphrase examplePassphrase

--keystore-file

Keystore filepath for JKS, PKCS12, and JCEKS type secrets

--keystore-file ./keystorefile.jks

--store-passphrase

Passphrase for the JKS, PKCS12, and JCEKS type secrets

--store-passphrase ExampleStorePassphrase

## secrets-mgr:keystore:describe \> secrets-mgr:keystore:describe \[flags\] Returns the details of a keystore secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output doesn’t include any sensitive or secret data. ## secrets-mgr:keystore:list \> secrets-mgr:keystore:list \[flags\] Lists all keystore secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:keystore:modify \> secrets-mgr:keystore:modify \[flags\] Modifies the name or expiration date for a keystore secret specified by `--id` from the group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the keystore secret

--name TestKeystoreSecret

--expiration-date

New expiration date for the keystore secret

--expiration-date 2025-01-25

## secrets-mgr:keystore:replace \> secrets-mgr:keystore:replace \[flags\] Replaces an existing keystore secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--id

Secret ID (required)

--id 6e8417f6-2ca7-417a-82b6-047189a18b53

--type

Choose the keystore secret type (required)
Options: PEM, JKS, PKCS12, JCEKS

--type PEM

--algorithm

Key manager factory algorithm for JKS, PKCS12, and JCEKS keystore secrets

--algorithm PKIX

--alias

Alias for the key used in JKS, PKCS12, and JCEKS keystore secrets

--alias KeyAliasExample

--capath-file

CA path certificate file for PEM keystore secrets

--capath-file ./example-capath.pem

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--key-file

Key file for PEM keystore secrets

--key-file ./example-key.pem

--key-passphrase

Passphrase required for JKS, PKCS12 and JCEKS keystore secrets
Optional for PEM keystore secrets

--key-passphrase examplePassphrase

--keystore-file

Keystore filepath for JKS, PKCS12, and JCEKS type secrets

--keystore-file ./keystorefile.jks

--name

Name for your secret

--name TestSecret

--store-passphrase

Passphrase for the JKS, PKCS12, and JCEKS type secrets

--store-passphrase ExampleStorePassphrase

## secrets-mgr:truststore:create \> secrets-mgr:truststore:create \[flags\] Creates a new truststore secret in the secret group specified by `--group-id`, using the name specified by `--name` and the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--type

Choose the truststore secret type (required)
Options: PEM, JKS, PKCS12, JCEKS

--type PEM

--truststore-file

Truststore filepath (required)

--truststore-file ./truststorefile.pem

--algorithm

Key manager factory algorithm for JKS, PKCS12, and JCEKS keystore secrets

--algorithm SUNX509

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--store-passphrase

Passphrase required for JKS, PKCS12 and JCEKS keystore secrets

--store-passphrase examplePassphrase

## secrets-mgr:truststore:describe \> secrets-mgr:truststore:describe \[flags\] Returns the details of a truststore secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output does not include any sensitive or secret data. ## secrets-mgr:truststore:list \> secrets-mgr:truststore:list \[flags\] Lists all truststore secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:truststore:modify \> secrets-mgr:truststore:modify \[flags\] Modifies the name or expiration date for a truststore secret specified by `--id` from the group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the truststore secret

--name TestTruststoreSecret

--expiration-date

New expiration date for the truststore secret

--expiration-date 2025-01-25

## secrets-mgr:truststore:replace \> secrets-mgr:truststore:replace \[flags\] Replaces an existing truststore secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--id

Secret ID (required)

--id 6e8417f6-2ca7-417a-82b6-047189a18b53

--type

Choose the truststore secret type (required)
Options: PEM, JKS, PKCS12, JCEKS

--type PEM

--truststore-file

Truststore filepath (required)

--truststore-file ./truststorefile.pem

--algorithm

Key manager factory algorithm for JKS, PKCS12, and JCEKS keystore secrets

--algorithm SUNX509

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--name

Name for your secret

--name TestSecret

--store-passphrase

Passphrase required for JKS, PKCS12 and JCEKS keystore secrets

--store-passphrase examplePassphrase

## secrets-mgr:tls-context:mule:create \> secrets-mgr:tls-context:mule:create \[flags\] Creates a new Mule TLS context secret in the secret group specified by `--group-id`, and using the name specified by `--name` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--tls-version

TLS Version
Default: TLSv1.2

--tls-version TLSv1.1

--cipher

Cipher for the specified TLS version

--cipher TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--insecure

Disable certificate validation

--insecure

--keystore-id

A valid JKS, JCEKS, or PKCS12 keystore ID in the secret group, which is used as keystore for the TLS context

--keystore-id 2d773060-aed0-46a7-b131-efbdb6ceff70

--truststore-id

A valid JKS, JCEKS, or PKCS12 truststore ID in the secret group, which is used as truststore for the TLS context

--truststore-id 588c33e4-7f6f-44be-94e8-8b65a56d1670

## secrets-mgr:tls-context:mule:describe \> secrets-mgr:tls-context:mule:describe \[flags\] Returns the details of a Mule TLS context secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output does not include any sensitive or secret data. ## secrets-mgr:tls-context:mule:list \> secrets-mgr:tls-context:mule:list \[flags\] Lists all Mule TLS context secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:tls-context:mule:modify \> secrets-mgr:TLS-context:mule:modify \[flags\] Modifies the name or expiration date for a Mule TLS context secret specified by `--id` from the group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the truststore secret

--name TestTruststoreSecret

--expiration-date

New expiration date for the truststore secret

--expiration-date 2025-01-25

## secrets-mgr:tls-context:mule:replace \> secrets-mgr:tls:context:mule:replace \[flags\] Replaces an existing Mule TLS context secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--tls-version

TLS Version
Default: TLSv1.2

--tls-version TLSv1.1

--cipher

Cipher for the specified TLS version

--cipher TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--insecure

Disable certificate validation

--insecure

--keystore-id

A valid JKS, JCEKS, or PKCS12 keystore ID in the secret group, which is used as keystore for the TLS context

--keystore-id 2d773060-aed0-46a7-b131-efbdb6ceff70

--truststore-id

A valid JKS, JCEKS, or PKCS12 truststore ID in the secret group, which is used as truststore for the TLS context

--truststore-id 588c33e4-7f6f-44be-94e8-8b65a56d1670

## secrets-mgr:tls-context:flex-gateway:create \> secrets-mgr:tls-context:flex-gateway:create \[flags\] Creates a new Omni Gateway TLS context secret in the secret group specified by `--group-id`, and using the name specified by `--name` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--max-tls-version

Maximum TLS Version
Default: TLSv1.3

--max-tls-version TLSv1.2

--min-tls-version

Minimum TLS Version
Default: TLSv1.3

--min-tls-version TLSv1.2

--cipher

Cipher for the specified TLS version range

--cipher TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256

--alpn-protocol

ALPN Protocol
Options: h2, http/1.1

--alpn-protocol h2

--enable-client-cert-validation

Enable client certificate validation

--enable-client-cert-validation

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--keystore-id

A valid PEM keystore ID in the secret group, which is used as keystore for the TLS context

--keystore-id 2d773060-aed0-46a7-b131-efbdb6ceff70

--truststore-id

A valid PEM truststore ID in the secret group, which is used as truststore for the TLS context

--truststore-id 588c33e4-7f6f-44be-94e8-8b65a56d1670

--skip-server-cert-validation

Skip service certificate validation

--skip-server-cert-validation

For more information about ciphers, see [Flex Gateway Supported Ciphers](https://docs.mulesoft.com/gateway/latest/conn-tls-config#supported-ciphers). ## secrets-mgr:tls-context:flex-gateway:describe \> secrets-mgr:tls-context:flex-gateway:describe \[flags\] Returns the details of an Omni Gateway TLS context secret specified by `--id` from the secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!NOTE] The output does not include any sensitive or secret data. ## secrets-mgr:tls-context:flex-gateway:list \> secrets-mgr:tls-context:flex-gateway:list \[flags\] Lists all Omni Gateway TLS context secrets in a secret group specified by `--group-id` This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## secrets-mgr:tls-context:flex-gateway:modify \> secrets-mgr:TLS-context:flex-gateway:modify \[flags\] Modifies the name or expiration date for an Omni Gateway TLS context secret specified by `--id` from the group specified by `--group-id` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--name

New name for the truststore secret

--name TestTruststoreSecret

--expiration-date

New expiration date for the truststore secret

--expiration-date 2025-01-25

## secrets-mgr:tls-context:flex-gateway:replace \> secrets-mgr:tls:context:flex-gateway:replace \[flags\] Replaces an existing Omni Gateway TLS context secret specified by `--id`, from the secret group specified by `--group-id`, using the type specified by `--type` In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--group-id

Secret group ID (required)

--group-id 1fec0a49-1551-4199-bfcc-cf0352d0f29d

--name

Name for your secret (required)

--name TestSecret

--max-tls-version

Maximum TLS Version
Default: TLSv1.3

--max-tls-version TLSv1.2

--min-tls-version

Minimum TLS Version
Default: TLSv1.3

--min-tls-version TLSv1.2

--cipher

Cipher for the specified TLS version range

--cipher TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256

--alpn-protocol

ALPN Protocol
Options: h2, http/1.1

--alpn-protocol h2

--enable-client-cert-validation

Enable client certificate validation

--enable-client-cert-validation

--expiration-date

Expiration date for the secret

--expiration-date 2025-01-25

--keystore-id

A valid PEM keystore ID in the secret group, which is used as keystore for the TLS context

--keystore-id 2d773060-aed0-46a7-b131-efbdb6ceff70

--truststore-id

A valid PEM truststore ID in the secret group, which is used as truststore for the TLS context

--truststore-id 588c33e4-7f6f-44be-94e8-8b65a56d1670

--skip-server-cert-validation

Skip service certificate validation

--skip-server-cert-validation

--- product: Anypoint CLI version: 4.x is-latest-version: true --- # How Version 4.x Differs from Previous Versions > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Scripts that use versions of the Anypoint Platform CLI earlier than 4.x do not automatically use Anypoint CLI 4.x commands because the new version of the CLI has different command names and syntax. However, because the CLI version 4.x name and install package are different from previous versions, you can install Anypoint CLI 4.x and an earlier version on the same system and use both versions in your scripts. Warning: Anypoint CLI 4.x is not backward compatible with previous versions. ## Changes Anypoint CLI 4.x introduces the following changes: - **CLI Name** The new CLI is named `anypoint-cli-v4`. - **Installation** Command groups for Anypoint Platform components are packaged as plugins that can optionally be installed and uninstalled separately from the core installation package. - **Authentication** - Set your credentials using the `anypoint-cli-v4 conf` command. - The only way to authenticate to Anypoint CLI 4.x is through [Connected Apps](https://docs.mulesoft.com/access-management/connected-apps-overview). - **Command Syntax** The separator between command parameters can be either a colon (:) or a space. For example, the command to get the Exchange asset resource list can be either `anypoint-cli-v4 exchange:asset:resource:list` or `anypoint-cli-v4 exchange asset resource list`. - **Commands and Properties** The following commands and properties have changed: - `exchange:asset:upload` replaces `exchange:asset:uploadv2`. - `exchange:asset:upload --properties='{"property1":"value2", "property2": "value2"}'` replaces `exchange:asset:upload properties.value1.value2`. - `cloudhub:load-balancer:allowlist:add/remove` commands replace the similar commands that used a non-inclusive term. - `runtime-mgr:cloudhub-application:describe -o JSON` replaces `runtime-mgr cloudhub-application describe-json`. - `runtime-mgr:pcf-application:describe -o JSON` replaces `runtime-mgr pcf-application describe-json`. - `cloudhub:vpc:describe -o JSON` replaces `cloudhub vpc describe-json`. - Environments and Business Groups commands are no longer supported. - Datagraph API Source Management commands are no longer supported. - Runtime Fabric Instances commands are no longer supported. - **Interactive Mode** Because interactive mode is no longer supported, the following commands and flags are no longer available: - `use business-group` command - `use environment` command - `exit` command - `-f, --fields` flag - Ability to interactively enter the password if you omit it - When using multi-option flags in a command in Anypoint CLI 4.x,you need to either put the parameter before the flags or use a `--` (two dashes followed by a space) before the parameter to make it work. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Install Anypoint CLI 4.x > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Install Anypoint Platform CLI 4.x from npm to access command-line tools for Anypoint Platform and Anypoint Platform Private Cloud Edition (PCE). The installation process includes [installing prerequisite software](#prereqs), [installing the CLI package with default plugins](#installation), and optionally [installing nondefault plugins](#install-plugins). [Verify the installation](#verify-installation) to ensure proper setup for automating platform operations and managing applications. CLI supports both cloud and on-premises deployments, enabling integration with CI/CD workflows and enterprise environments. ## Before You Begin The Anypoint CLI is built with Node.js and is installed by using npm, the package manager for the Node JavaScript platform. Versions required are as follows: - Node.js version 22.0.0 or later - npm version 7 or later To install the prerequisite software: - Download and install Node.js and npm. See the [NodeJS download page](https://nodejs.org/en/download/). Depending on the configuration of your system, you might need to log in using administrator credentials before you can successfully run the npm commands. ## Install the Core Package and Default Plugins Run the following command to install the Anypoint CLI core package and all default plugins. See [List of Plugins](#plugin-list). ```text npm install -g anypoint-cli-v4-public ``` ## Install a Plugin Separately After installing the Anypoint CLI 4.x core package, you can install nondefault plugins or new versions of default plugins as follows: ```text anypoint-cli-v4 plugins:install ``` For example, to install the account plugin, use the following command: ```text anypoint-cli-v4 plugins:install anypoint-cli-account-plugin ``` ### List of Plugins You can install the following plugins with Anypoint CLI:
PluginDescription

anypoint-cli-account-plugin

Account command topics

mulesoft-anypoint-cli-agent-fabric-plugin

Agent Fabric command topics

anypoint-cli-api-manager-plugin

API Manager command topics

anypoint-cli-cloudhub-plugin

CloudHub and CloudHub 2.0 command topics

anypoint-cli-datagraph-plugin

Anypoint DataGraph command topics

@salesforce/anypoint-cli-dx-mule-plugin

DX Mule command topics

anypoint-cli-exchange-plugin

Exchange command topics

mulesoft-anypoint-cli-designcenter-plugin

Design Center command topics

mulesoft-anypoint-cli-governance-plugin

API Governance command topics

anypoint-cli-runtime-mgr-plugin

Runtime Manager command topics

anypoint-cli-secrets-mgr-plugin

Secrets Manager command topics

> [!NOTE] The API Governance plugin npm package name is now > `mulesoft-anypoint-cli-governance-plugin`. The old name `anypoint-cli-governance-plugin` is > deprecated. If you use the old name, see > [Migrate to the New Governance Plugin Package Name](#migrate-governance-plugin). #### Migrate to the New Governance Plugin Package Name To migrate to the new package name `mulesoft-anypoint-cli-governance-plugin`: 1. In your `package.json` file, replace the `"anypoint-cli-governance-plugin": "1.0.x"` dependency with `"mulesoft-anypoint-cli-governance-plugin": "1.0.19"`. 2. For oclif hosts, such as Anypoint CLI v4, update the entry in the `oclif.plugins` array from `"anypoint-cli-governance-plugin"` to `"mulesoft-anypoint-cli-governance-plugin"`. 3. Run `npm install` to refresh your lockfile. 4. Regenerate the oclif manifest and README by running `oclif manifest && oclif readme` if your host publishes one. ## Verify the Installation After you install Anypoint CLI you can verify the installation using commands to: - [View the Core Package Version](#view-core-version) - [View the List of Plugins Installed](#view-plugin-list) - [View All Version Information](#view-all-version-info) ### View the Core Package Version To view the version of the core package: ```text anypoint-cli-v4 --version ``` The output shows the version of the installed core package as follows: anypoint-cli-v4/1.x.x node-v16.x.x ### View the List of Plugins Installed To verify a plugin installation and view a list of all installed plugins, use the following command: ```text anypoint-cli-v4 ``` The output shows the installed plugins under the `TOPICS` section. The following example shows that only the account plugin is installed: VERSION anypoint-cli-v4/x.x.x node-vx.x.x USAGE $ anypoint-cli-v4 \[COMMAND\] TOPICS account Show details of a business group. If "name" is omitted, defaults to the current session's business group plugins list installed plugins COMMANDS help display help for anypoint-cli plugins list installed plugins ### View All Version Information To see the list of installed plugins along with full version information, use the following command: ```text anypoint-cli-v4 plugins --core ``` The output shows the version information: $ anypoint-cli-v4 plugins --core @oclif/plugin-help 5.1.15 (core) @oclif/plugin-not-found 2.3.4 (core) @oclif/plugin-plugins 2.1.2 (core) @oclif/plugin-version 1.1.3 (core) anypoint-cli-account-plugin 1.0.0 (core) anypoint-cli-api-mgr-plugin 1.0.0 (core) anypoint-cli-cloudhub-plugin 1.0.0 (core) anypoint-cli-command 1.0.1 (core) anypoint-cli-designcenter-plugin 1.0.2 (core) anypoint-cli-exchange-plugin 1.0.0 (core) └─conf-cli 0.1.9 (core) anypoint-cli-runtime-mgr-plugin 1.0.0 (core) anypoint-cli-v4 1.0.2 (core) ## Link a Local Plugin for Development To link a local plugin directory into the CLI for development purposes: ```text anypoint-cli-v4 plugins:link ``` For example, to link a plugin in the current directory: ```text anypoint-cli-v4 plugins:link . ``` > [!NOTE] Installing a linked plugin overrides a user-installed or core plugin that has the same > commands. ## Enable Shell Autocomplete To display autocomplete installation instructions for your shell: ```text anypoint-cli-v4 autocomplete [bash|zsh|powershell] ``` For example, to set up autocomplete for Zsh: ```text anypoint-cli-v4 autocomplete zsh ``` To refresh the autocomplete cache after installing new plugins: ```text anypoint-cli-v4 autocomplete --refresh-cache ``` ## Uninstall a Plugin Uninstall plugins if, for example, you want to reduce the number to only those you use regularly. To uninstall a plugin: ```text anypoint-cli-v4 plugins:uninstall anypoint-cli--plugin ``` For example, the following command uninstalls the account plugin: ```text anypoint-cli-v4 plugins:uninstall anypoint-cli-account-plugin ``` See [List of Plugins](#plugin-list). ## Uninstall Anypoint CLI You might want to uninstall Anypoint CLI from systems where it is no longer being used. To uninstall the Anypoint CLI: ```text npm uninstall -g anypoint-cli-v4-public ``` --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Locally Deployed Applications Managed by Runtime Manager > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use these commands to control applications deployed to your local Mule server and managed with Runtime Manager. For more information about how to use these commands, refer to the [Runtime Manager documentation](https://docs.mulesoft.com/runtime-manager/). > [!CAUTION] For the Anypoint Platform CLI to recognize your target servers, each server must be > manually registered with the platform.
CommandDescription

Downloads a standalone application artifact binary

Copies a standalone application

Deletes a standalone application

Deploys or redeploys an application to an on-premises server, server group, or cluster

Shows detailed information for a standalone application

Lists all standalone applications in the environment

Changes a standalone application artifact

Restarts a standalone application

Starts a standalone application

Stops a standalone application

## runtime-mgr:standalone-application:artifact \> runtime-mgr:standalone-application:artifact \[flags\] Downloads the application artifact of the `identifier` application, to the directory passed in `directory`. The `identifier` flag can be either an application ID or name. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-application:copy \> runtime-mgr:standalone-application:copy \[flags\] Copies the standalone (on-premises) application passed in `source` to the target passed in `target` and the server, server group or cluster ID or Name passed in `targetIdentifier`. Both arguments `source` and `destination` are represented using the format: `:/`, for example: \> runtime-mgr:standalone-application:copy Services:QA/application-1 Development:QA/application-2 123456 Copies the application named `application-1` from the QA environment of the _Services_ organization to the QA environment of the `_Development_` organization in the server ID 123456. If the Anypoint Platform CLI is using the QA environment in the Services organization, the command can simply take the application name as a `source`: \> runtime-mgr:standalone-application:copy application-1 Development/QA/application-2 123456 > [!NOTE] Running this command requires for your user to have read/write access to the `/tmp` > directory of the OS where the CLI is installed. > [!WARNING] It isn’t possible to copy applications that have the same name but different targets > within the same organization and environment. This can only be done through the UI. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-application:delete \> runtime-mgr:standalone-application:delete \[flags\] Deletes the standalone (on-premises) application passed in `identifier`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). > [!WARNING] This command does not prompt twice before deleting. If you send a delete instruction, > it does not ask for confirmation. ## runtime-mgr:standalone-application:deploy \> runtime-mgr:standalone-application:deploy \[flags\] Deploys or redeploys the application passed as a ZIP file in the path `zipfile` to the on-premises target passed in `targetIdentifier`. The `targetIdentifier` flag can be either a target ID or name. A target can be either a server, server group, or cluster. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). To redeploy an app and set a logging level or turn on Insight event tracking, see [runtime-mgr:standalone-application:modify](#runtime-mgr-standalone-application-modify). ## runtime-mgr:standalone-application:describe \> runtime-mgr:standalone-application:describe \[flags\] Shows detailed information, such as status, creation date, and last update, for the standalone (on-premises) application passed in `identifier`. Use the flag `-o json` to get the raw JSON response of the application you specify in ``. This command accepts the `--output` flag. Use the `--output` flag to specify the response format. Supported values are `table` (default) and `json`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-application:list \> runtime-mgr:standalone-application:list \[flags\] Lists all standalone (on-premises) applications. In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--limit

Specifies the number of results to retrieve

--limit 50

--offset

Offsets the number of applications passed

--offset 20

--output

Specifies the response format.

--output json

## runtime-mgr:standalone-application:modify \> runtime-mgr:standalone-application:modify \[flags\] Modifies the standalone (on-premises) application passed in `identifier` with the ZIP file application passed in `zipfile` as a path. The `identifier` option specifies the application identifier. To retrieve the identifier, see [runtime-mgr:standalone-application:list](#runtime-mgr-standalone-application-list). In addition to the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options), this command accepts the following flags:
FlagDescriptionExample

--insight

Stores message metadata of every Mule transaction.

--insight

--log [level:scope]

Sets the logging level and scope pair:

  • level: TRACE, DEBUG, INFO, WARN, ERROR, FATAL, or OFF

  • scope: package name of the class, connector, or module to log, such as org.mule.extension.ftp for Anypoint Connector for FTP

To set multiple logging levels, provide multiple --log flags.

--log INFO:org.apache --log WARN:org.mule

## runtime-mgr:standalone-application:restart \> runtime-mgr:standalone-application:restart \[flags\] Restarts the standalone (on-premises) application passed in `identifier`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-application:start \> runtime-mgr:standalone-application:start \[flags\] Starts the standalone (on-premises) application passed in `identifier`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). ## runtime-mgr:standalone-application:stop \> runtime-mgr:standalone-application:stop \[flags\] Stops the standalone (on-premises) application passed in `identifier`. This command accepts the [default flags](https://docs.mulesoft.com/anypoint-cli/latest/#default-options). --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Troubleshooting Anypoint CLI > For the full documentation index, see: https://docs.mulesoft.com/llms.txt If you encounter errors when attempting to run Anypoint CLI commands, troubleshoot them as follows. ## Before You Begin Troubleshooting Ensure you’re using the latest version of `anypoint-cli-v4`. If not, install the latest version before continuing. See [Install Anypoint CLI 4.x](https://docs.mulesoft.com/anypoint-cli/latest/install). ## Status Code 409 Error When Uploading The error `Request failed with status code 409` when using the `exchange asset upload` command to publish a ruleset might occur when you’re attempting to upload a duplicate asset. To resolve this issue: - Change the command to specify a unique ruleset asset identifier by doing one of the following: - Publish a new version of the ruleset by changing the version part of the asset identifier. For example, change `1.0.0` to `1.0.1`. Here is an example updated command: anypoint-cli-v4 exchange asset upload my-auth-best-practices/1.0.1 --name "My Best Practices Ruleset" --description "This ruleset enforces my best practices for APIs." --files='{"ruleset.yaml":"/myRulesetFolder/mynewruleset.yaml","docs.zip":"/myRulesetFolder/ruleset.doc.zip"}' - Publish a new asset by changing the asset ID part of the asset identifier. For example, change `my-auth-best-practices` to `my-new-auth-best-practices`. Here is an example updated command: anypoint-cli-v4 exchange asset upload my-new-auth-best-practices/1.0.0 --name "My Best Practices Ruleset" --description "This ruleset enforces my best practices for APIs." --files='{"ruleset.yaml":"/myRulesetFolder/mynewruleset.yaml","docs.zip":"/myRulesetFolder/ruleset.doc.zip"}' ## Error Determining Asset Type The error `Could not determine asset type, step: Publishing asset` when using the `exchange asset upload` command to publish a ruleset or other asset might occur when you: - Specify a `--type` flag and more than one file type in one or more `--files` flags. If you’re uploading multiple files, omit the `--type` flag to let Anypoint CLI infer the correct file type from the `classifier.packaging` in each `--files` flag. - Specify a `--type` flag that conflicts with the asset type Anypoint CLI infers. Verify that the `classifier.packaging` and file name values in your `--files` flag options are correct and that they match the asset type you specified in the `--type` flag. - Include properties in `exchange.json` or `--properties` that are incorrect. The `exchange.json` file is optional when uploading an asset because the CLI includes or infers required properties from parameters, flags, and options. If you download a ruleset project to base your custom ruleset on, do one of the following before uploading your custom ruleset: - Remove the `exchange.json` file from your working folder or project. - Update the properties in the `exchange.json` file to match your custom ruleset’s asset ID, name, main file, and so on. ## Unable to Publish A non-specific publishing error similar to `unable to publish` might occur when you use the `exchange asset upload` command to upload your custom ruleset and its documentation. If you attempt to upload an asset using the wrong command syntax, you might inadvertently publish it as the wrong asset type. You can’t republish the asset with the same asset ID as a different asset type. To republish the ruleset in this situation, fix the syntax, change the asset ID, and try uploading again. For example, change `my-auth-best-practices` to `my-new auth-best-practices`. Here is an example updated command: anypoint-cli-v4 exchange asset upload my-new-auth-best-practices/1.0.0 --name "My Best Practices Ruleset" --description "This ruleset enforces my best practices for APIs." --files='{"ruleset.yaml":"/myRulesetFolder/mynewruleset.yaml","docs.zip":"/myRulesetFolder/ruleset.doc.zip"}' ## Miscellaneous Errors Anypoint CLI parses commands for specific information, and if the CLI doesn’t recognize or correctly interpret the command, the error message might be misleading or vague. To troubleshoot these errors: - Ensure that you’re entering the command flags and options as documented. - Ensure that you have specified everything in the command using the proper case, including the command itself, flags, classifiers, options, folder names, and file names. Commands are case-sensitive. - Ensure that there are no curly, or smart, quotation marks in your command. Replace any curly quotation marks with straight quotation marks (`'` or `"`). - Ensure that you’re entering your information in option values. You can’t run most command examples verbatim. You must use your values for parameters and options, including organization ID, environment ID, host ID, asset identifier GAV (group ID/asset ID/version), and folder and file names. - Ensure that you’re specifying the proper folders for files in the command or that you have changed to the working directory where they’re located. - Search the [Salesforce Help](https://help.salesforce.com) for similar errors. ## Windows Command Syntax Some commands that include special characters like backslashes `\` or pipes `|` don’t behave as expected on Windows systems because Windows Command Prompt interprets these characters in a different way. \+ To use the commands successfully: \* For file paths, replace single backslashes (`\`) with double backslashes (`\\`). \* To use pipes (`|`) in commands, add a caret (`^`) before them. Example: Original command: api-mgr:policy:apply --config '{\\"username\\":\\"user\\",\\"password\\":\\"test\\"}' Modified command for Windows: api-mgr:policy:apply --config '{\\\\"username\\\\":\\\\"user\\\\",\\\\"password\\\\":\\\\"test\\\\"}' Escape the JSON text using the backslash character (`\`). For example, change `"` and `/` to `\"` and `\/`. Here is an example updated command: anypoint-cli-v4 exchange asset upload my-auth-best-practices/1.0.0 --name "My Best Practices Ruleset" --description "This ruleset enforces my best practices for APIs." --files='{\\"ruleset.yaml\\":\\"\\/myRulesetFolder\\/mynewruleset.yaml\\",\\"docs.zip\\":\\"\\/myRulesetFolder\\/ruleset.doc.zip\\"}' ## See Also - [Known Issues](https://help.salesforce.com/s/issues) --- product: Anypoint CLI version: 3.x --- # Use Anypoint CLI > For the full documentation index, see: https://docs.mulesoft.com/llms.txt An Anypoint Platform CLI call has the following form: ```console $ anypoint-cli [params] [command] ``` ## exit \> exit \[options\] This command exits Anypoint Platform CLI. This command accepts only the default options: `--help`, `-f`/`--fields` and `-o`/`--output`. If you choose not to pass a command, Anypoint Platform CLI runs in interactive mode. If you choose to pass a specific command and there is an error, the application exits and returns a description of the issue. The Anypoint Platform CLI provides three default options: - The `--help` option displays usage information of the command. - The `-o` or `--output` option lets you specify the command’s output to the defined format. Supported values are `table`, `text`, and `json`. Defaults to `text` for non-interactive mode and `table` for interactive sessions. - The `-f` or `--fields` option allows you to define which fields to output. You can pass the `--fields` option after a command to get a list of all possible fields to output. --- product: Anypoint CLI version: 4.x is-latest-version: true --- # Using Anypoint CLI with a Network Proxy > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Anypoint CLI can be run through a network proxy to add a layer of security. To use the Anypoint CLI with a proxy server, configure the `HTTP_PROXY` or `HTTPS_PROXY` environment variables with the hostname or IP addresses of your proxy servers as shown in the following sections. Use the `ANYPOINT_CERTIFICATE` variable to configure your trusted certificates required by proxy. ## Configure a Proxy Server Without Authentication To configure a proxy server that does not require authentication, use the following commands: - Linux, macOS, or Unix `$ export HTTP_PROXY=http://_proxy-server_:80` or `$ export HTTPS_PROXY=https://_proxy-server_:443` - Windows `> set HTTP_PROXY=http://_proxy-server_:80` or `> set HTTPS_PROXY=https//_proxy-server_:443` ## Configure a Proxy Server With Authentication To configure a proxy server that requires authentication, use these commands: - Linux, macOS, or Unix `$ export HTTP_PROXY=http://_username_:_password_@_proxy-server_:80` or `$ export HTTPS_PROXY=https://_username_:_password_@_proxy-server_:443` - Windows `> set HTTP_PROXY=http://_username_:_password_@_proxy-server_:80` or `> set HTTPS_PROXY=https://_username_:_password_@_proxy-server_:443`