Policies for Agents (P4A)
Now supporting PDK 1.8+

Deploy policies for Agentic AI at scale

The community marketplace for MuleSoft Omni Gateway policies and API Governance rulesets. Enforce rules on agent and API traffic at runtime, and check API specs before they ship.

Policies for Agents (P4A)
222
Global Users
64
Connected Organizations
371
Deployments
59
Available Policies
2
Available Rulesets
56
Submitted Ideas

Features

Everything you need to discover, deploy, and manage custom policies for MuleSoft Omni Gateway.

Enterprise Security

Deploy policies with confidence using Connected App authentication and encrypted credentials. Per-tenant isolation via Postgres Row-Level Security.

Multi-Region Support

Connect to US, EU, or custom Anypoint instances. Manage all your environments in one place.

One-Click Deploy

Select a policy, choose your environment, and deploy. We handle the publish and release process — watch the pipeline stream its logs in real time.

Workspaces

Collaborate as a team: shared Anypoint connections, deployments, and policy visibility scoped to your workspace.

Community Ideas

Propose and upvote policy ideas; the catalog grows from what the community actually needs.

Bring Your Own Policy

Submit a GitHub-hosted PDK policy; we validate the repo and build it through our pipeline.

MCP Server

Connect any MCP-compatible agent or LLM. Browse the policy catalog and deploy to your Anypoint org over Model Context Protocol, scoped to a personal access token.

REST API

Drive the portal from your own tools. Manage policies, deployments, and connections over a token-scoped REST API — try every endpoint in the interactive reference.

Rich Policy Documentation

Document every policy in tabbed Markdown — standard Overview, Configuration, Examples, and FAQ tabs plus your own custom tabs. Reorder freely, track completeness, and preview exactly what users will see.

Governance Rulesets

Share and reuse API Governance rulesets (AMF Validation Profiles) that check API specs at design time. Browse community rulesets and publish them to Exchange.

Build a policy with P4A

Drive the whole contributor workflow with Claude Code — install our skills, then write, validate, and submit your PDK policy.

1

Install the Claude Code skills

Clone or symlink our PDK skills into ~/.claude/skills so Claude Code can coach you through the whole workflow.

PDK Skills repo
2

Write & test your policy

Follow the PDK reference for idiomatic Rust policy code and local testing.

PDK Docs
3

Validate the build

Use the MuleSoft Developer Hub to validate the toolchain and build artifacts.

Developer Hub
4

Submit to P4A

Submit your public GitHub repo; we validate it and build it through our pipeline.

Submitting a policy

Policies

Browse our curated collection of policies for MuleSoft AI Gateway. Each policy is validated and ready for deployment.

Sign up to see all policies

Browse every policy. Built for any API, agent, MCP, or LLM.

Rulesets

API Governance rulesets check your API and agent specs at design time, before anything reaches the gateway. Reuse what the community has written, or share your own.

MCP Server Safety

MCP

Checks that an MCP server's manifest declares how clients authenticate, what each tool does to the world, and that tool inputs reject undeclared fields, so gateways and agents can call it safely. Four rules: two…

2violations2warnings
MCP

MCP Server Usability

MCP

Checks that an MCP server's tools, resources and prompts are named and described well enough for an agent to pick the right one and call it correctly. Eight rules: one violation, six warnings and one informational…

1violation6warnings1info
MCP

Sign up to see all rulesets

See every rule, its severity, and which APIs it applies to.

Ideas

Policies the community wants next. Vote on the ideas you need or propose your own.

Sign up to vote or submit ideas

Help decide what the community builds next.

Leaderboards

What the community values most — the most-liked policies and rulesets and the most-voted ideas.

Top Policies
Ranked by likes
  1. OTLP Log ForwarderTroubleshooting
    5 likes
  2. MCP Apps PolicyMCP
    1 likes
  3. Salesforce UserInfo Claims EnrichmentMCP
    1 likes
  4. AI Semantic Cache (OpenAI-compatible embedder + Qdrant)LLM
    1 likes
  5. LLM Explainability EnforcementLLM
    1 likes
Top Rulesets
Ranked by likes
  1. MCP Server SafetyMCP
    0 likes
  2. MCP Server UsabilityMCP
    0 likes
Top Contributors
Ranked by contribution points

Sign up to see top contributors

Top Ideas
Ranked by votes
  1. AI System 1 Decision & Compaction Policy (TypeSafe Jev)
    2 votes
  2. A2A Agent Card Drift Detection (Exchange)
    2 votes
  3. Aporia Guardrails
    2 votes
  4. Lakera Guard Policy
    1 votes
  5. Omni Gateway DQ Gate for MCP — Trusted Data Foundation for Agents
    1 votes

Testimonials

What the community says about building and shipping policies with P4A.

Be the first to share a testimonial

Sign up and tell the community what P4A has done for you.

Sign up to share

Sign up to unlock the full P4A

Browse every policy, deploy and install on your Anypoint org, vote on ideas, and propose new ones — built for any API, agent, MCP, or LLM. Free account.