# apply-universal-policy

Protect a portfolio slice by applying one Universal (canonical) policy across
API instances on any gateway (Kong, Apigee, Azure, AWS, MuleSoft). Use when
the user says all / many / my APIs / a portfolio slice — JWT validation, rate
limiting, spike arrest, IP filtering, or apply one config across providers.
DO NOT TRIGGER for "what protection do I have" / listing or editing already-
applied native policies — use skill apply-native-policy-to-instance. DO NOT
TRIGGER for a single already-chosen instance that needs a provider-native
plugin — same skill. Do not use to remove, detach, enable, or disable a
policy (those tools do not exist).

- **Skill Source:** [SKILL.md](https://dev-portal.mulesoft.com/skills/apply-universal-policy/SKILL.md)