Governing web APIs on Anypoint Platform17% of the exam
API Access Requests and Contract Lifecycle
Request and approve the intended application's API access, review tier changes and alternative group grants, and choose scoped revocation, restoration or deletion.
Explain how to request access to an API version for an API client, and how that access is approved and revoked.
~7 min read · 6 practice questions
What the exam expects
- Request access for a new or existing client application to the intended API version and instance.
- Distinguish application ownership, access requests, approval and enforceable contracts.
- Review manual approval, negotiated tiers and changes to existing tier terms.
- Revoke, restore or delete the correct contract while checking alternative group access.
A client application is the registered consumer; an access request asks for permission to use an instance; a contract records that application-to-instance grant; an SLA tier defines access terms and approval behavior; revocation blocks a contract's access while preserving a restoration path (Requesting access, SLA tiers, Contract removal).
Key facts
Request authority
- Detail
- API instance owners and the particular application's owners can request for it.
Existing application
- Detail
- Another user can be added to its owners list by an application or instance owner.
Provider match
- Detail
- Existing application selection is filtered to the instance's client provider.
Different granted tier
- Detail
- The owner can apply another tier rather than changing the requested tier for everyone.
Tier edits
- Detail
- Existing approved apps immediately receive edited terms.
Approval-mode change
- Detail
- Manual-to-automatic grants pending requests.
Coexisting contracts
- Detail
- The least restrictive available contract for that API applies.
Revocation
- Detail
- Blocks the contract's API access and can be restored.
Deletion
- Detail
- Requires prior revocation and removes the approved contract from Exchange.
- When an Exchange asset has terms and conditions, what happens before access and what does the resulting contract retain?
- When the application URL is omitted during creation, what does the documented form assume?
- When manual approval is delegated without an administrator title, which listed permission can authorize that workflow?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the MuleSoft Platform Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 47 lessons of the MuleSoft Platform Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (6 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both