The visibility level of the API instances of that API that need to be publicly accessible should be set to public visibility

The users needing access to the API should be added to the appropriate role in Anypoint Platform

The API should be functional with at least an initial implementation deployed and accessible for users to interact with

The API should be secured using one of the supported authentication/authorization mechanisms to ensure that data is not compromised