---
schema_version: "1"
id: adb4013f119053cb25cea2272af9feea87a1e27e8bf6b36fbb4527e6dd5aac7d
title: Govern Third-Party Provider APIs
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/general/exp-governance-govern-third-party-apis.md
canonical_url: https://docs.mulesoft.com/general/exp-governance-govern-third-party-apis
source_site: docs.mulesoft.com
content_type: documentation
content_hash: a6f964afa74f5e106d1f0d24f94ba708e4c2cf0eb0b14f9dde666eddd3400df8
description: MuleSoft Documentation Site
latest: true
---
---
product: Getting Started
keywords: third-party apis, cross-gateway governance, provider governance, api compliance, policy enforcement
---

# Govern Third-Party Provider APIs

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

After connecting to a third-party API gateway provider, you can govern discovered APIs through the
same governance workflow used for Anypoint Platform APIs. This enables unified governance across
multiple gateway platforms.

Follow these steps to govern APIs from third-party providers:

1.  Connect and create a scanner. When the scanner runs, it discovers and catalogs APIs and their
    read-only policies. See [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)

2.  Go to **Portfolio** > **APIs** and verify that discovered APIs appear, each labeled with its
    provider (for example, **AWS**). APIs are automatically added to the portfolio as they are
    discovered.

3.  Create control rules to track the policies that you want to enforce across providers. You create
    these rules using developer skills rather than the UI. For guidance on creating policy
    subcategory rules, review the
    [Author a Governance Ruleset](https://dev-portal.mulesoft.com/skills/author-governance-ruleset.html)
    skill in the MuleSoft Developer Hub. For example, use a prompt such as
    `create a rule to track that each API has a JWT policy applied to it`.

4.  Create a [governance strategy](https://docs.mulesoft.com/general/exp-governance-create-strategy#create-with-ide) and select the
    control rules or automated policies to apply. The strategy evaluates conformance for all
    in-scope APIs, including those discovered from third-party providers.

5.  Track conformance status for provider-hosted APIs through the governance strategy dashboard. Use
    the **Any provider** filter in the **Governed Services** tab of your governance strategy to
    focus on a subset of your cross-gateway environment.

## See Also

- [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)

- [Create Governance Strategies](https://docs.mulesoft.com/general/exp-governance-create-strategy)

- [Author a Governance Ruleset](https://dev-portal.mulesoft.com/skills/author-governance-ruleset.html)

- [Monitoring Cross-Gateway Conformance](https://docs.mulesoft.com/general/exp-governance-monitor-cross-gateway-conformance)