# API Access Requests and Contract Lifecycle

*MuleSoft Platform Architect Study Guide · Governing web APIs on Anypoint Platform · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/mulesoft-platform-architect/governing-web-apis-on-anypoint-platform/api-access-requests-and-contract-lifecycle*

Request and approve the intended application's API access, review tier changes and alternative group grants, and choose scoped revocation, restoration or deletion.

- Certification: Salesforce MuleSoft Platform Architect
- Exam section: Governing web APIs on Anypoint Platform
- Study guide: https://www.certifyforce.com/study-guide/mulesoft-platform-architect

**Official exam objective:**

> Explain how to request access to an API version for an API client, and how that access is approved and revoked.

## What the exam expects

- Request access for a new or existing client application to the intended API version and instance.
- Distinguish application ownership, access requests, approval and enforceable contracts.
- Review manual approval, negotiated tiers and changes to existing tier terms.
- Revoke, restore or delete the correct contract while checking alternative group access.

A **client application** is the registered consumer; an **access request** asks for permission to use an instance; a **contract** records that application-to-instance grant; an **SLA tier** defines access terms and approval behavior; **revocation** blocks a contract's access while preserving a restoration path ([Requesting access](https://docs.mulesoft.com/exchange/to-request-access), [SLA tiers](https://docs.mulesoft.com/api-manager/latest/defining-sla-tiers), [Contract removal](https://docs.mulesoft.com/api-manager/latest/remove-client-app-latest-task)).

## Key facts

| Fact | Detail | Source |
| --- | --- | --- |
| Request authority | API instance owners and the particular application's owners can request for it. | [Requesting access](https://docs.mulesoft.com/exchange/to-request-access) |
| Existing application | Another user can be added to its owners list by an application or instance owner. | [Requesting access](https://docs.mulesoft.com/exchange/to-request-access) |
| Provider match | Existing application selection is filtered to the instance's client provider. | [Requesting access](https://docs.mulesoft.com/exchange/to-request-access) |
| Different granted tier | The owner can apply another tier rather than changing the requested tier for everyone. | [SLA tiers](https://docs.mulesoft.com/api-manager/latest/defining-sla-tiers) |
| Tier edits | Existing approved apps immediately receive edited terms. | [SLA tiers](https://docs.mulesoft.com/api-manager/latest/defining-sla-tiers) |
| Approval-mode change | Manual-to-automatic grants pending requests. | [SLA tiers](https://docs.mulesoft.com/api-manager/latest/defining-sla-tiers) |
| Coexisting contracts | The least restrictive available contract for that API applies. | [Requesting access](https://docs.mulesoft.com/exchange/to-request-access) |
| Revocation | Blocks the contract's API access and can be restored. | [Contract removal](https://docs.mulesoft.com/api-manager/latest/remove-client-app-latest-task) |
| Deletion | Requires prior revocation and removes the approved contract from Exchange. | [Contract removal](https://docs.mulesoft.com/api-manager/latest/remove-client-app-latest-task) |

## Check yourself

- When an Exchange asset has terms and conditions, what happens before access and what does the resulting contract retain?
- When the application URL is omitted during creation, what does the documented form assume?
- When manual approval is delegated without an administrator title, which listed permission can authorize that workflow?

## Sources

- [Requesting Access](https://docs.mulesoft.com/exchange/to-request-access)
- [Reviewing SLA Tiers Concepts](https://docs.mulesoft.com/api-manager/latest/defining-sla-tiers)
- [Revoke and Delete API Contracts](https://docs.mulesoft.com/api-manager/latest/remove-client-app-latest-task)
- [Approve or Reject Access Requests](https://docs.mulesoft.com/api-manager/latest/manage-client-apps-latest-task)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 6 linked practice questions, and unlimited timed mock exams are included with the MuleSoft Platform Architect pack (USD $19): https://www.certifyforce.com/practice-exams