If you can afford it, I’d still think the Ariba OnRamp adapter is a better option. It’s still being used by many people if they are handling cXML.
I won’t recommend to allow anonymous access for any service.
wm.tn:receive is by-design a common entry service provided out-of-box.
If you use some other entry service, so you can add your own logic, you can directly call internal services like: wm.tn.route:routeBizdoc
to process the document.
HTH,
#webMethods#Integration-Server-and-ESB