Thx, @comptly, that helps a lot!
Went ahead and created the API portal, which was private by default, as you said it would be.
When I viewed the portal and checked the RAML Console, though, that is public by default. Changed it to hidden using the tools menu (gear icon) but it still says:
…Your RAML is publicly accessible at: http://api-portal.anypoint.mulesoft.com/foo/bar/…
It would be nice to see the entire interface make clear what is hidden/shown or private/public, and to see the console page stop saying the RAML is publically accessible when you have changed it to hidden.
I am new to this community. What’s the best thing for me to do here, file an issue somewhere?