Qflex-APIM - API Manager for Anypoint Platform

API Manager for Anypoint

Apply API Policies Without Changing a Line of Code

CORS, JWT, Basic Auth, Client-ID enforcement, Circuit Breaker - injected directly into your running Mule apps through intelligent code injection. No gateway. No sidecar. No rewrite.

Get Started Free Features & Setup ↓

No credit card required. Free Community Edition available.

The API Policy Problem

MuleSoft's API Manager works - but it comes with overhead most teams don't need.

Expensive Gateway Tier

MuleSoft API Manager policies require the API Gateway or Flex Gateway. That's additional licensing, infrastructure, and vCores just to enforce a CORS header.

Manual Code Changes

Without a gateway, adding policies means editing every app manually - adding modules, configuring XML, testing, redeploying. Multiply that by 50 apps.

No Centralized Control

Each developer implements policies differently. There's no single place to see which apps have CORS, auth, or rate limiting applied across environments.

Slow Rollout

Need JWT validation on 20 APIs by Friday? With manual changes, that's a sprint's worth of work. With a gateway, it's a procurement cycle.

How Qflex-APIM Works

Intelligent code injection. Select your apps, pick your policies, click Apply.

1

Discover

Qflex-APIM auto-discovers all apps across all environments using Anypoint Platform APIs.

2

Configure

Select which policies to apply via the web UI - CORS, JWT, Basic Auth, Client-ID, Circuit Breaker, or Property Updater.

3

Inject

APIM extracts the app source, identifies injection points, inserts policy code, and redeploys - automatically.

4

Done

Your app restarts with the policy active. No manual code changes. No gateway required. Roll back anytime.

Supported Policies

Security and resilience policies injected into your apps with zero code changes.

🌐

CORS

Enable cross-origin resource sharing with configurable allowed origins, methods, and headers. Essential for any API consumed by browsers.

🔑

JWT Validation

Validate JSON Web Tokens with configurable issuers, audiences, and signing keys. Secure your APIs with industry-standard token authentication.

🔒

Basic Authentication

Add username/password authentication to any API endpoint. Simple, effective, and configured through the UI - not hardcoded.

💳

Client-ID Enforcement

Ensure only authorized clients can access your APIs. Manage client credentials centrally and enforce them across all environments.

Circuit Breaker

Protect your APIs from cascading failures. Configurable error thresholds and wait times automatically trip the breaker and restore when healthy.

⚙️

Property Updater

Update YAML or Java properties across deployed apps without rewriting code. Change configs, toggle features, update endpoints - all from the UI.

0 Code
Changes Required
Mule 4
Native App
6 Policies
Built In
CH + Hybrid
All Deployments
Web UI
Point & Click
Auto
Rollback

Simple, Honest Pricing

Start free. Upgrade when your team needs more.

Community

Free / forever
  • ✔ 1 environment
  • ✔ Up to 5 applications
  • ✔ All 6 policy types
  • ✔ Web UI included
  • ✔ Community support
Get Started Free
MOST POPULAR

Enterprise

Contact Us / custom
  • ✔ Unlimited environments
  • ✔ Unlimited applications
  • ✔ All 6 policy types
  • ✔ Policy stacks & scheduling
  • ✔ CloudHub + Hybrid
  • ✔ Audit logs
  • ✔ Priority support & onboarding
Contact Sales

Frequently Asked Questions

How does code injection work? Is it safe?

Qflex-APIM uses the Anypoint Platform APIs to download your app's JAR, identifies the correct injection points in the Mule XML, inserts the policy configuration, and redeploys. The original artifact is preserved so you can always roll back. No changes are made to your source repo.

Does this replace MuleSoft API Manager?

It's an alternative for teams that don't need the full API Gateway. If you just need to enforce policies (CORS, auth, rate limiting), Qflex-APIM does it without the gateway overhead and licensing cost.

What happens during app restart?

When a policy is applied, the target app is redeployed with the injected code. This causes a brief restart (same as any CloudHub redeployment). For zero-downtime, use multiple workers.

Can I apply multiple policies to the same app?

Yes. Qflex-APIM supports policy stacks - combine CORS + JWT + Circuit Breaker on the same app. Policies are processed in a defined order.

Does it work with on-premise / Hybrid deployments?

Yes. Qflex-APIM supports both CloudHub and Hybrid (on-premise) deployments. It discovers apps across both runtime types automatically.

Qflex-APIM: Your Free, Effective API Manager for Anypoint Platform

Welcome to the world of Netflexity's Qflex-APIM, an innovative, free API manager designed as a native Mule 4 application. Purposefully built to complement the Mulesoft Anypoint Platform, it presents an effective and reliable alternative to manage your APIs without breaking the bank.


API Manager for Anypoint Platform / v1.0.3 (Mule 4.4.0+)

February 15, 2024

Download.jar Mule App

Qflex-APIM Serial Number Request

Email with a Serial Number will be sent to the email account

Request

Overview

In an increasingly digital world, APIs have become crucial building blocks of modern applications, creating a need for efficient and reliable API Management. API Management ensures the optimal performance, security, and governance of APIs in the software lifecycle. With Qflex-APIM, we bring an efficient API Management solution that is both user-friendly and packed with powerful features.

Key Features

  • Native Mule 4 Application: Qflex-APIM is a native Mule 4 application, ensuring seamless integration with your existing Mulesoft Anypoint Platform.

  • Cloud and Hybrid Compatibility: Whether your applications run on the Anypoint Cloud (CloudHub) or on-premise environments, Qflex-APIM smoothly integrates with them.

  • Intelligent Code Injection: Using Anypoint Platform APIs, Qflex-APIM extracts the application source, identifies injection areas, performs smart code injection, and re-deploys applications. All these without needing any extra code changes or additional plugins.

  • Ease of Deployment: Qflex-APIM is effortlessly deployable to cloud or on-premise environments, just like any regular Mulesoft application.

  • User-friendly Web UI: Comes with an intuitive Web User Interface, making it a breeze to set up and apply policies to your applications.

Supported Policies:

Qflex-APIM supports a variety of API policies to enhance the security and functionality of your APIs without making any code changes. These include:

  • CORS (Cross-Origin Resource Sharing): Enable safe cross-domain communication from the browser.

  • Basic Authentication: Set up a simple authentication policy for APIs using a username and password.

  • JWT (JSON Web Tokens): Implement secure, token-based authentication and information exchange.

  • Client-ID Enforcement: Ensure only authorized clients can access your APIs.

  • Property Value Updater (YAML or Java properties): Update your application properties easily without having to alter your codebase.

The Importance of API Management

As organizations become more data-driven, the role of APIs is becoming increasingly critical in ensuring seamless information exchange and improving business efficiency. However, without proper management, APIs can become a security risk, and their performance can be sub-optimal. That's where Qflex-APIM comes in. We provide a user-friendly, effective solution for API management, ensuring optimal performance, security, and control over your APIs.

Get started with Qflex-APIM today and unlock a hassle-free way to manage your APIs. Experience the true potential of your Mulesoft Anypoint Platform with our free API manager!