# Web API Contracts and Characteristics

*MuleSoft Platform Architect Study Guide · Explaining application network basics · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/mulesoft-platform-architect/explaining-application-network-basics/web-api-contracts-and-characteristics*

Identify the network contract a web API exposes, choose interactions by resource intent, and distinguish each transport boundary from the implementation behind it.

- Certification: Salesforce MuleSoft Platform Architect
- Exam section: Explaining application network basics
- Study guide: https://www.certifyforce.com/study-guide/mulesoft-platform-architect

**Official exam objective:**

> Describe the role and characteristics of web APIs.

## What the exam expects

- Distinguish a local software interface from a network-accessible service.
- Explain how consumers use a documented interface across implementation languages.
- Match HTTP operations to resource intent.
- Trace transport protection across the connections involved in an API call.

An **API** defines software interactions; a **web service** exposes interactions over a network; a **resource** is an addressable subject of an HTTP interaction; a **TLS context** configures transport security. These terms describe different parts of the contract and communication path ([APIs and web services](https://trailhead.salesforce.com/content/learn/modules/application-networks-and-api-led-connectivity-in-mulesoft/examine-apis-and-web-services), [HTTPS proxies](https://docs.mulesoft.com/api-manager/latest/building-https-proxy)).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Language boundary | Compatible network messages allow different implementation languages. | [APIs and web services](https://trailhead.salesforce.com/content/learn/modules/application-networks-and-api-led-connectivity-in-mulesoft/examine-apis-and-web-services) |
| Local interface | A library API is not automatically a remote service. | [APIs and web services](https://trailhead.salesforce.com/content/learn/modules/application-networks-and-api-led-connectivity-in-mulesoft/examine-apis-and-web-services) |
| Retrieval | GET requests resource information. | [APIs and web services](https://trailhead.salesforce.com/content/learn/modules/application-networks-and-api-led-connectivity-in-mulesoft/examine-apis-and-web-services) |
| Proxy transport | Inbound and outbound connections have separate TLS configuration. | [HTTPS proxies](https://docs.mulesoft.com/api-manager/latest/building-https-proxy) |
| Secret preparation | Enable Secret Group Downloadable and target the TLS context to Mule. | [HTTPS proxies](https://docs.mulesoft.com/api-manager/latest/building-https-proxy) |
| Configuration access | Read secrets metadata and Manage API Configuration address different permissions. | [HTTPS proxies](https://docs.mulesoft.com/api-manager/latest/building-https-proxy) |

## Check yourself

- Why should a proxy engineer check secret-metadata access separately from API configuration access?
- When preparing the secret group for this workflow, which setting must be enabled?
- Which target should the prepared TLS context use for the Mule proxy?

## Sources

- [APIs and Web Services](https://trailhead.salesforce.com/content/learn/modules/application-networks-and-api-led-connectivity-in-mulesoft/examine-apis-and-web-services)
- [Build HTTPS API Proxies](https://docs.mulesoft.com/api-manager/latest/building-https-proxy)
- [Configure an HTTPS Endpoint](https://docs.mulesoft.com/api-manager/latest/https-reference)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 4 linked practice questions, and unlimited timed mock exams are included with the MuleSoft Platform Architect pack (USD $19): https://www.certifyforce.com/practice-exams