MuleSoft Agent Fabric

Salesforce (MuleSoft)

Vendor

MuleSoft suite to register, route, govern and visualize agents, MCP servers and APIs across vendors using MCP and A2A.

Curated by Tiberiu ArvaVerified

Proprietary

Strengths

  • Agent Registry with auto-discovery scanners
  • Omni Gateway policies for agent and LLM traffic
  • Agent Visualizer for multi-agent flows

Practitioner note

Natural fit for organizations already on Anypoint that want agent governance on the same gateway as their APIs; less compelling without an existing MuleSoft footprint.

Warning

MuleSoft Agent Fabric: Announced 2025-09-25; Registry, Broker and Visualizer were slated for GA in October 2025 per the announcement.

Governance posture

Reviewed 2026-09-30
PartialData residency

Anypoint Platform offers US, EU, Canada, Japan, India, Australia and Government control planes; Agent Fabric availability per control plane not confirmed.

Source
PartialDeployment model

MuleSoft-managed control planes plus hybrid runtime options (Runtime Fabric, hybrid runtimes); which Agent Fabric components run outside MuleSoft cloud is not stated. (saas, hybrid)

Source
UnknownAudit logging

Agent Fabric overview describes monitoring via Agent Visualizer but no audit-log statement was found.

UnknownSOC 2

MuleSoft trust center could not be retrieved during review; Agent Fabric SOC 2 scope unverified.

UnknownISO 27001

MuleSoft trust center could not be retrieved during review; Agent Fabric ISO 27001 scope unverified.

UnknownISO 42001

No ISO 42001 statement found for MuleSoft or Agent Fabric in reviewed sources.

N/AEU AI Act

Integration and governance tooling for agents, not itself an AI system placed on the market. (role: not-applicable)

YesLicense risk

Proprietary Salesforce/MuleSoft product; pricing not published. (medium)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-08-23

Source-backed information mapped from MuleSoft Agent Fabric's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.