--- schema_version: "1" id: 09703526b009f038fbc9677e6ee612f7a63ce7759200e2650d5dcda251b0c498 title: Anypoint API Governance Release Notes collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/release-notes/api-governance/api-governance-release-notes.md canonical_url: https://docs.mulesoft.com/release-notes/api-governance/api-governance-release-notes source_site: docs.mulesoft.com content_type: documentation content_hash: 403eba20857252ed9a357a9e78495879ec8500b90eb392115cd19527fb4e4ace description: MuleSoft Documentation Site latest: true --- --- product: Release Notes version: master --- # Anypoint API Governance Release Notes > For the full documentation index, see: https://docs.mulesoft.com/llms.txt ## August 6, 2026 ### What’s New - Anypoint API Governance now governs a broader range of services, including APIs, agents, MCP servers, and gateways, so you can apply consistent standards across your entire service portfolio. For more information, see [Anypoint API Governance Overview](https://docs.mulesoft.com/api-governance/). - You can now use governance strategies to govern your services in the enhanced MuleSoft experience. For more information, see [Working with Governance Strategies](https://docs.mulesoft.com/general/exp-governance-work-with-strategies). - You can now apply consistent governance across multiple gateway runtimes by creating governance strategies that target **Omni Gateways**, **Mule Gateways**, or all runtimes. This feature is available only in the enhanced MuleSoft experience. For more information, see [Working with Governance Strategies](https://docs.mulesoft.com/general/exp-governance-work-with-strategies). - You can now connect third-party gateway providers and govern their APIs alongside your MuleSoft APIs. This feature is available only in the enhanced MuleSoft experience. For more information, see [Govern Third-Party Provider APIs](https://docs.mulesoft.com/general/exp-governance-govern-third-party-apis). - You can now monitor conformance across all connected gateways and MuleSoft APIs in a single, unified report. This feature is available only in the enhanced MuleSoft experience. - You can now export a cross-gateway policy audit that consolidates policy application evidence across all connected providers and MuleSoft APIs to support compliance audits, such as SOC 2 and GDPR. This feature is available only in the enhanced MuleSoft experience. - The API Governance Dashboard now includes new metrics for your expanded service landscape, such as **Governance Coverage**, services governed by **Controls**, and services governed by **Automated Policies**. The distribution of services by type now includes MCP servers, LLM proxies, and gateways. For more information, see [Governance Dashboard Overview](https://docs.mulesoft.com/api-governance/dashboard-overview). - You can now generate and customize governance rulesets using natural language, empowering non-specialist teams to create governance without deep YAML expertise. For more information, see [Author a Governance Ruleset](https://dev-portal.mulesoft.com/skills/author-governance-ruleset.html). ## March 16, 2026 ### What’s New - Anypoint API Governance now supports gRPC. A new MuleSoft-provided gRPC Best Practices ruleset is available for governing gRPC APIs. For more information, see [GRPC Protobuf 3 Support](https://salesforce-misc.github.io/amf-docs/docs/related-docs/grpc_support). ## November 26, 2025 ### What’s New - This release adds support for MuleSoft Agent Fabric: Organizations can now ensure that agents are configured according to compliance specifications using the new MuleSoft-provided Agent Network Best Practices ruleset. This feature applies governance to both Agent and MCP assets. ## June 9, 2025 ### What’s New - This release introduces the Anypoint API Governance Dashboard, a pre-built tool designed to give you an overview of your API ecosystem and empower you to take actions that enhance governance and quality. The Dashboard consolidates essential out-of-the-box metrics in one place, enabling you to monitor the health and governance status of your API programs and respond directly to key insights. The Dashboard is the new API Governance landing page, and is available to all MuleSoft orgs out-of-the-box. Key features and benefits of the API Governance Dashboard include: - Organization-wide visibility: View a pre-built set of metrics for each of your organizations. - Clear status overview — The dashboard displays the current status of your APIs, such as: - **Unprotected APIs** (not currently managed in API Manager) - **Governed APIs** (under a governance profile) - **APIs in Exchange** (in the catalog) - **APIs in Production** (deployed in a production environment) - **APIs by Type** (REST API, AsyncAPI, and HTTP API) - Governance Dashboard Metrics — Gain visibility into your API governance posture with metrics like: - **Governance Usage by Profile Type** (active or draft profiles) - **Conformance Status** (conformant or not conformant API versions) - **Governance Usage by Profile Type** (high, medium, or low) - Take action directly — For metrics with associated actions, you can act directly from the Dashboard. For example, you can: - Create Governance Profiles to start governing unprotected APIs - View detailed lists of APIs based on metrics - Create Governance Profiles for APIs in Production For more information, see [Governance Dashboard Overview](https://docs.mulesoft.com/api-governance/dashboard-overview). ## February 6, 2025 ### What’s New - This release adds support for MuleSoft for Agentforce: Topic Center to the Anypoint API Governance console. You can now view the auto-generated **SF API Topic Center** profile, and monitor the conformance of your topic and action-enabled APIs. See [Enabling an API Project for Topics and Agent Actions](https://docs.mulesoft.com/anypoint-code-builder/ai-enabling-api-project-topic-center) and [Monitor Topic Center API Conformance in the Anypoint API Governance Console](https://docs.mulesoft.com/api-governance/monitor-api-conformance#gov-spec-topic-center). ## September 23, 2024 ### What’s New - You can now govern HTTP APIs by selecting the **HTTP API** API type when creating governance profiles. - The `governance create profile` and `governance update profile` commands now support `http-api` for the `--criteria` option scope filter. See [List of Anypoint API Governance CLI Commands](https://docs.mulesoft.com/api-governance/cli-command-list). ## July 25, 2024 (Reverted) This version is reverted. ## May 29, 2024 ### What’s New - You can now see the history of user actions related to Anypoint API Governance in the Anypoint Access Management audit logs. See [Audit Logging in Anypoint Platform](https://docs.mulesoft.com/access-management/audit-logging). ## April 19, 2024 ### What’s New - You can now use draft profiles to test settings before revealing their targeted APIs' conformance information across Anypoint Platform. See [Applying Rulesets to Identified APIs](https://docs.mulesoft.com/api-governance/create-profiles) and [Monitoring API Conformance](https://docs.mulesoft.com/api-governance/monitor-api-conformance). - You can now duplicate profiles to more quickly create profiles with similar settings. See [Duplicate a Governance Profile](https://docs.mulesoft.com/api-governance/create-profiles#duplicate-profile). ## February 5, 2024 ### What’s New You can now use the MuleSoft-provided API Documentation Best Practices ruleset to apply governance to API documentation. See [Documentation Conformance](https://docs.mulesoft.com/api-governance/fix-documentation-conformance-issues). ### Fixed Issues
Issue ResolutionID

The conformance status information in the Notify Owner preview now matches that shown in the governance report.

W-14550668

## November 29, 2023 ### What’s New - Administrators can now give users, such as developers, view-only access to the API Governance console so that they can: - View conformance information for their governed APIs. - Download conformance reports in CSV format. Governance administrators continue to have full access to API Governance. - Ruleset enhancements: - You can now use the MuleSoft-provided API Catalog Information Best Practices ruleset to apply governance to API catalog information. - You can now embed examples of valid and invalid code in rulesets to help developers understand conformance issues. For example, for the validation `operations-must-have-identifiers`: ```console examples: valid: | /events: get: displayName: get description: Gets a stream of results invalid: | /events: get: # missing displayName/identifier description: Gets a stream of results ``` - You can now add parameters to ruleset messages. When an API fails the validation, parameter values are resolved with contextual information. This makes messages more specific and easier to take action on. For example: ```console security-fields-operation-empty: message: | The security field of the operation {{core.name}} should not be empty. ``` See [Getting Started with Anypoint API Governance](https://docs.mulesoft.com/api-governance/get-started). ### Fixed Issues
Issue ResolutionID

Anypoint CLI now properly renders reports for legacy API projects.

W-14274588

## October 17, 2023 ### What’s New - A new Mule API Management Best Practices ruleset provided by MuleSoft is published in Exchange. - New functionality is available to enable you to start governing instances by API version: - Organizations created after this release are automatically opted in. - For governance administrators: - If you don’t see an opt-in banner on the API Governance console, your organizations are already opted in. - If you see an opt-in banner, you can opt in to apply the new functionality to your organizations. > [!NOTE] After you initiate the opt in, some profiles and APIs might show a status of **In > Validation** until the update completes. With the new functionality you can: - View specification and instance conformance in a single summary in Anypoint API Governance. - View governance conformance information in API Manager. - View comprehensive governance reports in Anypoint API Governance and API Manager. - Govern an entire API by API version, so that you can apply governance to all instances of all versions of an API. ### Limitations - Anypoint CLI `governance` commands support validating API specifications only. - After opting in to use the new features: - When creating or updating a profile, you can no longer filter by lifecycle state. - In API Manager, the conformance status and report are shown only for REST APIs. See [Anypoint API Governance Overview](https://docs.mulesoft.com/api-governance/). ## March 4, 2023 ### What’s New - You can now filter by **API Instance** information in your governance profiles. If you select the filter **Include only APIs with instances**, only specifications that have an instance in API Manager are included. You can then optionally filter by environment type and environment name. See [Create a Governance Profile Using the Anypoint API Governance Console](https://docs.mulesoft.com/api-governance/create-profiles#create-profile-in-console). - Rulesets now have a **Governed APIs** page where you can view the list of centrally-governed APIs to which the ruleset applies. See [Viewing Conformance Status in Exchange](https://docs.mulesoft.com/api-governance/find-and-fix-conformance-issues). - The Anypoint API Governance experience API is now published. Access the experience API in Exchange in your preferred Anypoint Platform control plane: - [US](https://anypoint.mulesoft.com/exchange/68ef9520-24e9-4cf2-b2f5-620025690913/api-governance-xapi) - [EU](https://eu1.anypoint.mulesoft.com/exchange/e0b4a150-f59b-46d4-ad25-5d98f9deb24a/api-governance-xapi) ### Fixed Issues
Issue ResolutionID

The Anypoint CLI 3.x command anypoint-cli governance api now successfully validates remote APIs and projects in folders when run in legacy mode.

W-12266732

## December 10, 2022 ### What’s New - Your profiles can now be configured to automatically use the latest versions of rulesets in the console and through Anypoint CLI. - You can now search and filter to find specific rulesets when creating and updating profiles in the console. - You can now configure notifications using the CLI when creating and updating profiles. - The **Conformance Status** page for validated APIs in Exchange now shows the filter criteria that resulted in the API being validated against the listed rulesets. ## October 29, 2022 ### What’s New - **New ruleset version selection in the console**: In the Anypoint API Governance console, you can now select ruleset versions while creating or updating a profile. - **Improved conformance assessment and remediation**: In Design Center, you can more easily add governance rulesets to an API project and create an editable branch of the API if there isn’t already one available. ### Fixed Issues
Issue ResolutionID

The Fix API definition button is replaced with visible links to improve navigation and visibility.

W-11551948, W-11764543

The CLI fix-me instructions page no longer has a code snippet that isn’t visible when the web browser page is sized to a narrow width.

W-11551279

The Best Practices ruleset’s wording is improved.

W-11801541

The search on the API Governance console is now case insensitive.

W-11861402

The anypoint-cli governance ruleset validate CLI command with a valid ruleset YAML file no longer fails on Windows 10.

W-11324475

Validation of an API definition with multiple rulesets now completes successfully.

W-11758147

The full API console is now visible or scrollable when the web browser page is sized to a narrow width.

W-11798282

The legends in the console cards no longer wrap into the second row when the web browser page is sized to a narrow width.

W-11798320

## October 1, 2022 ### What’s New - You can now filter by lifecycle state in the API Governance profile wizard to more quickly select the APIs you want to govern. - You can now see the total governed APIs, total APIs, and subscription usage in one place in the API Governance dashboard. - The `anypoint cli governance` commands are enhanced to support ruleset customization. You can now: - Evaluate the rulesets that might apply to your API: `governance api evaluate` - Scaffold rules from data schemas: - `governance api inspect` - `governance ruleset init` - Customize individual rules by changing severity levels and enabling or disabling rules: - `governance ruleset info` - `governance ruleset clone` - The `governance create profile` and `governance update profile` commands now have the `--criteria` option, where you can specify filters for tags, categories, lifecycle states, and scope, such as API types `async-api` and `rest-api` - The `governance api validate` command now has the following options: - `--remote`, to enable you to validate APIs published in Exchange - `--remote-rulesets`, to enable you to validate APIs against rulesets published in Exchange See [List of Anypoint API Governance CLI Commands](https://docs.mulesoft.com/api-governance/cli-command-list). ## September 3, 2022 ### What’s New ### User Interface Improvements - The **Conformance Status** page **Fix API Definition** menu selections more clearly indicate the subsequent action. - The instructions in the **Instructions for Anypoint CLI** page are easier to follow. ### Fixed Issues
Issue ResolutionID

A subscription limit alert now appears only when the number of governed APIs nears or exceeds the limit. Multiple versions of the same API in different profiles are counted as one governed API.

W-11611085

When you refresh the Conformance Status page, the conformance status shown on the page now immediately refreshes.

W-11565896

## August 20, 2022 ### Fixed Issues
Issue ResolutionID

The rule provide-examples in the Anypoint Best Practices ruleset now properly validates API definitions that use !include or import fragment.

W-11324363

The description for the rule headers-must-have-descriptions in the Anypoint Best Practices ruleset is now "Provide descriptions for headers" rather than "Provide descriptions for request headers", because responses can also have headers.

W-11500353

## August 6, 2022 ### What’s New - A new **Conformance Status** page in Exchange enables API developers to see details about conformance of their validated API definitions to governance rulesets. For details, see [Viewing Conformance Status in Exchange](https://docs.mulesoft.com/api-governance/find-and-fix-conformance-issues). - You are now notified when your number of governed APIs nears or exceeds your subscription level. - You can now review your monthly usage of Anypoint API Governance in usage reports. For details, see [Viewing Usage Reports](https://docs.mulesoft.com/general/usage-reports). ## July 9, 2022 ### What’s New - You can now govern AsyncAPI APIs by selecting the **AsyncAPI** API type when creating governance profiles. - When you filter by categories while creating or updating a governance profile, you can now see information about categories applied to the filtered APIs. The number of categories applied to an API is denoted by **Categories** followed by a number in parenthesis. Hover over **Categories** to see more details. - Command enhancements: - `anypoint-cli governance api validate` This command now accepts an API project ZIP file or folder and downloads dependencies, including rulesets against which to validate. You can optionally use the `--rulesets` option to specify a comma-separated list of local rulesets. See [governance api validate](https://docs.mulesoft.com/api-governance/find-conformance-issues#governance-api-validate). - `anypoint-cli governance ruleset validate` This command now accepts the following as the ruleset definition parameter: - A ruleset definition YAML file - A ZIP file that contains an API project with an `exchange.json` file that specifies the ruleset as the main file - A folder that contains an API project with an `exchange.json` file that specifies the ruleset as the main file See [governance ruleset validate](https://docs.mulesoft.com/api-governance/custom-rulesets-validate-and-publish#governance-ruleset-validate). ## June 11, 2022 ### What’s New - Anypoint API Governance now groups notifications by API so that only one email is sent if an API is validated by multiple rulesets - You can now select the following recipients for the automated conformance notifications: - **API Publisher**: Email the API publisher by using the email address specified in the listed Anypoint Platform account - **API Contact**: Email the contact specified in the asset in Exchange - **Others**: Email to a comma-separated list of email addresses - The UI is now reactive, more responsive, and more accessible ## April 30, 2022 ### What’s New - In the new API Governance console: - Configure profiles to apply rulesets to specific sets of APIs - Monitor the conformance status of APIs that are validated as part of the profiles - Export reports of API conformance data in CSV format - Notify API owners to encourage them to make their APIs conformant to the profiles - In Design Center in API Designer: - Apply rulesets to your APIs to see what parts of the definitions are noncomformant - Update the APIs to be conformant and republish them to Exchange - In Exchange: - Discover and view the new governance rulesets provided by MuleSoft - View conformance status for governed API assets - Using the new Anypoint CLI governance commands: - Automate governance in your automation tools, such as CI/CD pipelines or scripts ## See Also - [Anypoint API Governance documentation](https://docs.mulesoft.com/api-governance/) - [Salesforce Help](https://help.salesforce.com) - [MuleSoft Services](https://www.mulesoft.com/support-and-services) - [Troubleshooting Anypoint CLI](https://docs.mulesoft.com/api-governance/cli-commands-troubleshoot) - [Known Issues](https://help.salesforce.com/s/issues)