---
schema_version: "1"
id: 13776e9223d5f6bc067b9184a3cdcd3890a52cb4bcd5951d17ed9a9b67d17d4d
title: Included Policies Directory
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/mule-gateway/policies-included-directory.md
canonical_url: https://docs.mulesoft.com/mule-gateway/policies-included-directory
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 852fd80d95add9e0bdb2a3195313c769fe8783c6f15791fde4078478bbed3143
description: MuleSoft Documentation Site
latest: true
---
---
product: Mule Gateway
---

# Included Policies Directory

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

## Policies Included in Mule Gateway

<table><colgroup><col> <col></colgroup><thead><tr><th>Policy</th><th>Summary</th></tr></thead><tbody><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-api-security-identification-header">API Security-Identification Header</a></p></td><td><p>Adds API instance identifiers as response headers for external security platform correlation</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-basic-auth-ldap">Basic Authentication: LDAP</a></p></td><td><p>Allows access based on the basic authorization mechanism, with user-password defined on LDAP</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-basic-auth-simple">Basic Authentication: Simple</a></p></td><td><p>Allows access based on the basic authorization mechanism, with a single user-password</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-client-id-enforcement">Client ID Enforcement</a></p></td><td><p>Allows access only to authorized client applications</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-cors">Cross-Origin Resource Sharing (CORS)</a></p></td><td><p>Enables access to resources residing in external domains</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-header-injection">Header Injection</a></p></td><td><p>Adds headers to a request or a response</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-header-removal">Header Removal</a></p></td><td><p>Removes headers from a request or a response</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-http-caching">HTTP Caching</a></p></td><td><p>Caches HTTP responses from an API implementation</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-ip-allowlist">IP Allowlist</a></p></td><td><p>Allows a list or range of specified IP addresses to request access</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-ip-blocklist">IP Blocklist</a></p></td><td><p>Blocks a single IP address or a range of IP addresses from accessing an API endpoint</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-json-threat-protection">JSON Threat Protection</a></p></td><td><p>Protects against malicious JSON in API requests</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-jwt-validation">JWT Validation</a></p></td><td><p>Validates a JWT</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-message-logging">Message Logging</a></p></td><td><p>Logs custom messages using information from incoming requests, responses from the backend, or information from other policies applied to the same API endpoint</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-oauth-access-token-enforcement">OAuth 2.0 Access Token Enforcement Using Mule OAuth Provider</a></p></td><td><p>Allows access only to authorized client applications</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-openam-oauth-token-enforcement">OpenAM OAuth 2.0 Token Enforcement</a></p></td><td><p>Allows access only to authorized client applications</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-openid-token-enforcement">OpenID Connect OAuth 2.0 Access Token Enforcement</a></p></td><td><p>Allows access only to authorized client applications</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-pingfederate-oauth-token-enforcement">PingFederate OAuth 2.0 Token Enforcement</a></p></td><td><p>Allows access only to authorized client applications</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-rate-limiting">Rate Limiting</a></p></td><td><p>Monitors access to an API by defining the maximum number of requests processed within a period of time</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-rate-limiting-sla">Rate Limiting: SLA-based</a></p></td><td><p>Monitors access to an API by defining the maximum number of requests processed within a timespan, based on SLAs</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-spike-control">Spike Control</a></p></td><td><p>Regulates API traffic</p></td></tr><tr><td><p><a href="https://docs.mulesoft.com/mule-gateway/policies-included-xml-threat-protection">XML Threat Protection</a></p></td><td><p>Protects against malicious XML in API requests</p></td></tr></tbody></table>

## See Also

- [Policy Availability by Gateway](https://docs.mulesoft.com/gateway-home/#policy-availability-by-gateway)