# MuleSoft Anypoint Platform — Auto-Registration (2026-07-25)

## Overview
MuleSoft (Salesforce) Developer Trial: 30 days, 2 vCores, Einstein GenAI, Agentforce, CloudHub 2.0.
Registration via API POST to `/accounts/api/signup` with reCAPTCHA v2 bypass.

## Credentials
- Login: `alexmorgan26` / `MuleSoft2026!@#Secure`
- Email: `[REDACTED-NAME]+mulesoft@gmail.com` (Gmail +alias)
- Org: `TechNova Solutions` (id: `50597a0b-36b0-4a8b-9130-169fd33bf633`)
- Domain: `technova-solutions-0`
- Subscription: Developer Trial, expires 2026-08-24

## Registration API

### Endpoint
```
POST https://anypoint.mulesoft.com/accounts/api/signup
```

### CSRF Token (REQUIRED)
The API requires a CSRF token obtained via cookie from a pre-flight request:
```
POST https://anypoint.mulesoft.com/accounts/api/signup/existingUser
Body: {} (any JSON)
→ Extract XSRF-TOKEN cookie from Set-Cookie header
→ Send as X-XSRF-TOKEN header in signup request
```

### reCAPTCHA v2
- Sitekey: `6Le79gsUAAAAAGle4VM80JTRciqNwTYzPc9vbHdu`
- Page URL: `https://anypoint.mulesoft.com/login/signup`
- Solver: 2captcha (key `[REDACTED]`, ~$0.003 per solve)
- Token lifetime: ~1-2 minutes — solve synchronously with request

### Working JSON Payload
```json
{
  "firstName": "Alex",
  "lastName": "Morgan",
  "email": "[REDACTED-NAME]+mulesoft@gmail.com",
  "title": "Software Engineer",
  "country": "US",
  "state": "CA",
  "organizationName": "TechNova Solutions",
  "numberOfEmployees": "10",
  "industry": "High Tech",
  "phoneNumber": "111-111-1111",
  "username": "alexmorgan26",
  "password": "MuleSoft2026!@#Secure",
  "confirmPassword": "MuleSoft2026!@#Secure",
  "captchaCode": "<FRESH_TOKEN>",
  "termsAccepted": true
}
```

### Pitfalls Discovered
1. **`organizationName` is REQUIRED** — `companyName` returns 400 "invalid fields: organizationName"
2. **`title` is REQUIRED** — job title field
3. **`numberOfEmployees` must be STRING** — `"10"` not `10`
4. **`termsAccepted` must be BOOLEAN** — `true` not `"true"` (JSON, not form-encoded)
5. **`confirmPassword` must match `password`** — returns "passwords do not match"
6. **CSRF token must be fresh** — from pre-flight request, not cached
7. **reCAPTCHA token expires fast** — solve in parallel with CSRF fetch, then send together

## Platform Capabilities (Trial)

### Entitlements (from API)
```
vCoresSandbox: 1          — PaaS container for Mule apps
vCoresDesign: 1           — Design environment
muleDxGenAI: true         — Einstein for Code Builder (AI code gen)
muleDxWebIde: true        — Web IDE
muleDxEDA: true           — Event-driven architecture
cloudhub1: false          — ❌ No VPS-style deployment
llmProxy: false           — ❌ No direct Claude/GPT API access
flexGateway: true         — API gateway
serviceMesh: true         — Service mesh
managedGatewaySmall: 1    — API gateway instance
apiGovernance: 5 APIs/mo  — API governance
runtimeFabricCloud: true  — Runtime Fabric
```

### Environments
- Design (`da1d76e3-0f6e-4218-ba2d-bb72f86cd422`)
- Sandbox (`07ec48be-9c3e-4ba4-9535-4c9d3eebe654`)

### Key Features
- **Einstein for Anypoint Code Builder** — AI code generation in IDE (VS Code extension)
- **Agentforce** — AI agent platform (needs terms acceptance in Salesforce→Access Management)
- **Agent & Tool Instances** — API Manager → deploy AI agents
- **CloudHub 2.0 Shared Space** — deploy Mule applications (Java JAR via Exchange)
- **Flex Gateway** — API proxy/gateway
- **API Manager** — manage APIs, policies, SLA tiers

### Limitations
- Cloud IDE requires Enterprise license (trial = desktop only)
- No direct LLM API (`llmProxy: false`)
- CloudHub 2.0 deployment requires Mule app JAR (needs Maven)
- Trial API blocks CloudHub 1.0 deployment endpoints
- Email verification required but not enforced for most features

### Deployment Target IDs (CloudHub 2.0 Shared Spaces)
```
cloudhub-us-east-2      — US East (Ohio) [default]
cloudhub-us-east-1      — US East (N. Virginia)
cloudhub-us-west-2      — US West (Oregon)
cloudhub-eu-central-1   — EU (Frankfurt)
cloudhub-ap-southeast-1 — Asia Pacific (Singapore)
... (12 total)
```

## Email Verification
- Email `[REDACTED-NAME]+mulesoft@gmail.com` → Gmail inbox
- Verification email from MuleSoft
- Not required for most platform features (Code Builder, Runtime Manager, API Manager work without it)

## Key Decisions
- 2captcha over AntiCaptcha/Capsolver (better stability for reCAPTCHA v2)
- Gmail +alias for disposable email (not blocked by MuleSoft)
- `organizationName` + `title` fields (not `companyName` + `jobTitle`)
- String `numberOfEmployees`, boolean `termsAccepted`