@W-22137880 add protect mcp skill - #23
Merged
Merged
Conversation
New 9-step JTBD skill for protecting MCP servers with policies on Flex Gateway. Searches Exchange with types=mcp (no org filter) and includes a list-instances step for the apply-policy-only path. Also fixes a duplicate environmentId key in the deploy step YAML block of both skills, which caused ruamel.yaml to silently drop the block and render the step as prose-only without the interactive panel.
Simplified 4-step skill for applying a policy to an existing MCP server instance in API Manager. Assumes the user is already authenticated. Steps: list environments, list instances, browse policy templates, apply.
This reverts commit 42e5f1e.
Add undocumented `family` enum parameter (api, agentic, llm) to the listOrganizationsEnvironmentsApis operation in the API Manager spec. Use `family=agentic` as a hardcoded filter in protect-mcp-server Step 7 to list only MCP server instances instead of all API instances.
Wrap auth-panel-right and auth modal in prose_only conditional so prose-only skills (like Anypoint Platform Operations) show the header bar with logo and title but not the authentication controls. Add prose-only skill fixture and 6 smoke tests verifying the header bar is present, auth panel right is absent, no auth modal, no interactive mode toggle, and Guide badge is shown.
Prose-only skills (0 steps) no longer show "0 steps" on homepage cards or API detail page sidebar. The badge is simply omitted.
machaval
approved these changes
Apr 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
protect-mcp-server-with-policies— 9-step JTBD skill for protecting MCP servers with policies on a self-managed Flex Gateway. Supports three execution paths: full setup (publish to Exchange + deploy + apply policy), from Exchange asset (search + deploy + apply policy), and apply-policy-only (list existing instances + apply policy).mcpto thetypesenum in Exchange ExperiencegetAssetsSearchoperationfamilyquery parameter (api,agentic,llm) to API ManagerlistOrganizationsEnvironmentsApis— used withfamily=agenticin the MCP skill to filter for MCP server instancesenvironmentIdYAML key inprotect-api-with-policiesStep 5 that caused ruamel.yamlDuplicateKeyError, silently dropping the YAML block and rendering the deploy step as prose-only without the interactive panel