What permissions does the Monitoring Agent need on Mule servers?
JMX read access only—least-privilege model. Agent connects to Mule runtime via JMX (Java Management Extensions, default port 1099), requires read-only JMX access to query application status, connector status, server metrics. Does not require: OS admin rights, Mule filesystem access, MMC admin, Anypoint Platform credentials. For Remote Actions (Start/Stop/Restart), agent sends JMX management commands—still JMX-based, no OS-level privileges. Configure JMX authentication in Mule wrapper.conf if security policy requires (most deployments use unauthenticated JMX on internal network).