- 1 minutes to read

What permissions does the Monitoring Agent need on Mule servers?

The Monitoring Agent requires JMX read access only—a least-privilege model. The agent connects to the Mule runtime via JMX (Java Management Extensions, default port 1099) and requires read-only JMX access to query application status, connector status, and server metrics.

Not Required

The agent does not require:

  • OS admin rights
  • Mule filesystem access
  • MMC admin credentials
  • Anypoint Platform credentials

Remote Actions

For Remote Actions (Start/Stop/Restart), the agent sends JMX management commands—still JMX-based with no OS-level privileges required.

JMX Authentication

Configure JMX authentication in the Mule wrapper.conf file if your security policy requires it. Most deployments use unauthenticated JMX on an internal network.

Next Steps