# Automating Anypoint with CLI, APIs and connected apps

*MuleSoft Platform Integration Architect Study Guide · Applying DevOps practices and operating integration solutions · Last updated November 13, 2026 · https://www.certifyforce.com/study-guide/mulesoft-platform-integration-architect/applying-devops-practices-and-operating-integration-solutions/automating-anypoint-with-cli-apis-and-connected-apps*

Automate Anypoint Platform with Anypoint CLI 4.x and the platform APIs: how the CLI is installed, reaches the platform through proxies and other control planes, resolves credentials and defaults, deploys and promotes per deployment option, and how connected apps and their grant types authorize unattended automation.

- Certification: Salesforce MuleSoft Platform Integration Architect
- Exam section: Applying DevOps practices and operating integration solutions
- Study guide: https://www.certifyforce.com/study-guide/mulesoft-platform-integration-architect

**Official exam objective:**

> Identify the features and characteristics for automating interactions with Anypoint Platform.

## What the exam expects

- Recognize Anypoint CLI 4.x prerequisites, run modes and defaults, including which host, organization and environment a command acts on.
- Configure the CLI for proxies, other control planes and credentials, and predict which credential source wins.
- Choose the CLI command family that matches the deployment option (CloudHub 1.0, CloudHub 2.0, customer-hosted servers) and the flags that carry configuration during copy and promotion.
- Choose between the CLI and direct Anypoint Platform API calls, and pick a connected app grant for unattended automation.

**Anypoint CLI 4.x**: the `anypoint-cli-v4` command-line tool that scripts a subset of platform actions. **Connected app**: an OAuth 2.0 and OpenID Connect client that lets an application call Anypoint Platform APIs. **Grant type**: the OAuth flow a connected app uses to get an access token. **Application allowlist**: an organization setting that controls which apps can access the organization's user data ([CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/), [Connected Apps for Developers](https://docs.mulesoft.com/access-management/connected-apps-developers), [Creating Connected Apps](https://docs.mulesoft.com/access-management/creating-connected-apps-dev)).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| CLI install | Built with Node.js; install npm, then the CLI with npm. | [CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/) |
| Run mode | 4.0 and later run in batch mode only. | [CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/) |
| Default environment | Production, when none is specified. | [CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/) |
| Default host | `anypoint.mulesoft.com`; override with `--host` or `ANYPOINT_HOST`. | [CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/) |
| Credential order | Flags, then environment variables, then the config file. | [CLI Authentication](https://docs.mulesoft.com/anypoint-cli/latest/auth) |
| Proxy trust | `ANYPOINT_CERTIFICATE` sets certificates the proxy requires. | [CLI with a Network Proxy](https://docs.mulesoft.com/anypoint-cli/latest/proxy) |
| CloudHub 2.0 deploy | `runtime-mgr:application:deploy` uses an Exchange application. | [Deploying Apps with Anypoint CLI](https://docs.mulesoft.com/cloudhub-2/ch2-deploy-cli) |
| Hidden properties on copy | Pass them with `--property` in the copy command. | [CLI for CloudHub Applications](https://docs.mulesoft.com/anypoint-cli/latest/cloudhub-apps) |
| API promotion | Alerts, policies, tiers copied only with their `--copy*` flags. | [CLI for API Manager](https://docs.mulesoft.com/anypoint-cli/latest/api-mgr) |
| Hybrid targets | Servers must be manually registered first. | [CLI 4.x Commands](https://docs.mulesoft.com/anypoint-cli/latest/anypoint-platform-cli-commands) |
| JWT bearer | Gets tokens without transmitting the client secret. | [Creating Connected Apps](https://docs.mulesoft.com/access-management/creating-connected-apps-dev) |

## Check yourself

- When a CloudHub 1.0 CLI deploy prints the status `UNDEPLOYED`, what does that mean?
- What range of values does the CloudHub 1.0 deploy `--timeout` flag accept?
- Why can a CloudHub 2.0 CLI deploy fail even though the Mule version exists?
- When `--replicaSize` is omitted from a CloudHub 2.0 CLI deploy, what size is used?

## Sources

- [Anypoint Platform CLI 4.x Overview](https://docs.mulesoft.com/anypoint-cli/latest/)
- [Authentication to the Anypoint Platform CLI](https://docs.mulesoft.com/anypoint-cli/latest/auth)
- [Using Anypoint CLI with a Network Proxy](https://docs.mulesoft.com/anypoint-cli/latest/proxy)
- [Anypoint CLI 4.x List of Commands](https://docs.mulesoft.com/anypoint-cli/latest/anypoint-platform-cli-commands)
- [CLI for CloudHub Applications](https://docs.mulesoft.com/anypoint-cli/latest/cloudhub-apps)
- [Deploying Apps with Anypoint CLI](https://docs.mulesoft.com/cloudhub-2/ch2-deploy-cli)
- [CLI for API Manager](https://docs.mulesoft.com/anypoint-cli/latest/api-mgr)
- [Anypoint Platform Connected Apps for Developers](https://docs.mulesoft.com/access-management/connected-apps-developers)
- [Creating Connected Apps in Anypoint Platform](https://docs.mulesoft.com/access-management/creating-connected-apps-dev)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 11 linked practice questions, and unlimited timed mock exams are included with the MuleSoft Platform Integration Architect pack (USD $19): https://www.certifyforce.com/practice-exams