MuleSoft Anypoint Platform — Auto-Registration (2026-07-25)

Overview

MuleSoft (Salesforce) Developer Trial: 30 days, 2 vCores, Einstein GenAI, Agentforce, CloudHub 2.0. Registration via API POST to /accounts/api/signup with reCAPTCHA v2 bypass.

Credentials

Login: alexmorgan26 / MuleSoft2026!@#Secure
Email: [REDACTED-NAME]+mulesoft@gmail.com (Gmail +alias)
Org: TechNova Solutions (id: 50597a0b-36b0-4a8b-9130-169fd33bf633)
Domain: technova-solutions-0
Subscription: Developer Trial, expires 2026-08-24

Registration API

Endpoint

POST https://anypoint.mulesoft.com/accounts/api/signup

CSRF Token (REQUIRED)

The API requires a CSRF token obtained via cookie from a pre-flight request:

POST https://anypoint.mulesoft.com/accounts/api/signup/existingUser
Body: {} (any JSON)
→ Extract XSRF-TOKEN cookie from Set-Cookie header
→ Send as X-XSRF-TOKEN header in signup request

reCAPTCHA v2

Sitekey: 6Le79gsUAAAAAGle4VM80JTRciqNwTYzPc9vbHdu
Page URL: https://anypoint.mulesoft.com/login/signup
Solver: 2captcha (key [REDACTED], ~$0.003 per solve)
Token lifetime: ~1-2 minutes — solve synchronously with request

Working JSON Payload

{
  "firstName": "Alex",
  "lastName": "Morgan",
  "email": "[REDACTED-NAME]+mulesoft@gmail.com",
  "title": "Software Engineer",
  "country": "US",
  "state": "CA",
  "organizationName": "TechNova Solutions",
  "numberOfEmployees": "10",
  "industry": "High Tech",
  "phoneNumber": "111-111-1111",
  "username": "alexmorgan26",
  "password": "MuleSoft2026!@#Secure",
  "confirmPassword": "MuleSoft2026!@#Secure",
  "captchaCode": "<FRESH_TOKEN>",
  "termsAccepted": true
}

Pitfalls Discovered

organizationName is REQUIRED — companyName returns 400 "invalid fields: organizationName"
title is REQUIRED — job title field
numberOfEmployees must be STRING — "10" not 10
termsAccepted must be BOOLEAN — true not "true" (JSON, not form-encoded)
confirmPassword must match password — returns "passwords do not match"
CSRF token must be fresh — from pre-flight request, not cached
reCAPTCHA token expires fast — solve in parallel with CSRF fetch, then send together

Platform Capabilities (Trial)

Entitlements (from API)

vCoresSandbox: 1          — PaaS container for Mule apps
vCoresDesign: 1           — Design environment
muleDxGenAI: true         — Einstein for Code Builder (AI code gen)
muleDxWebIde: true        — Web IDE
muleDxEDA: true           — Event-driven architecture
cloudhub1: false          — ❌ No VPS-style deployment
llmProxy: false           — ❌ No direct Claude/GPT API access
flexGateway: true         — API gateway
serviceMesh: true         — Service mesh
managedGatewaySmall: 1    — API gateway instance
apiGovernance: 5 APIs/mo  — API governance
runtimeFabricCloud: true  — Runtime Fabric

Environments

Design (da1d76e3-0f6e-4218-ba2d-bb72f86cd422)
Sandbox (07ec48be-9c3e-4ba4-9535-4c9d3eebe654)

Key Features

Einstein for Anypoint Code Builder — AI code generation in IDE (VS Code extension)
Agentforce — AI agent platform (needs terms acceptance in Salesforce→Access Management)
Agent & Tool Instances — API Manager → deploy AI agents
CloudHub 2.0 Shared Space — deploy Mule applications (Java JAR via Exchange)
Flex Gateway — API proxy/gateway
API Manager — manage APIs, policies, SLA tiers

Limitations

Cloud IDE requires Enterprise license (trial = desktop only)
No direct LLM API (llmProxy: false)
CloudHub 2.0 deployment requires Mule app JAR (needs Maven)
Trial API blocks CloudHub 1.0 deployment endpoints
Email verification required but not enforced for most features

Deployment Target IDs (CloudHub 2.0 Shared Spaces)

cloudhub-us-east-2      — US East (Ohio) [default]
cloudhub-us-east-1      — US East (N. Virginia)
cloudhub-us-west-2      — US West (Oregon)
cloudhub-eu-central-1   — EU (Frankfurt)
cloudhub-ap-southeast-1 — Asia Pacific (Singapore)
... (12 total)

Email Verification

Email [REDACTED-NAME]+mulesoft@gmail.com → Gmail inbox
Verification email from MuleSoft
Not required for most platform features (Code Builder, Runtime Manager, API Manager work without it)

Key Decisions

2captcha over AntiCaptcha/Capsolver (better stability for reCAPTCHA v2)
Gmail +alias for disposable email (not blocked by MuleSoft)
organizationName + title fields (not companyName + jobTitle)
String numberOfEmployees, boolean termsAccepted

4.6 KiB Raw Blame History