About JFrog Remote MCP Server
JFrog Remote MCP Server gives developers and coding assistants access to JFrog platform capabilities through natural-language requests. It covers artifact discovery, resource management, package curation, and security information, and is hosted on JFrog Cloud with OAuth authentication.
Key features
- 01Manage projects and repositories
- 02Find packages, versions, and builds
- 03Review catalog details and curation status
- 04Inspect Xray summaries and policy violations
- 05Trace resources affected by a CVE or package
- 06Over 100 tools across JFrog areas
Use cases
- 01Check package versions, vulnerabilities, and licenses
- 02Find artifact locations and search builds
- 03Review security findings and affected resources
- 04Track JFrog projects and artifacts
MCP support
The remote MCP server exposes over 100 JFrog platform tools to MCP clients, including resource management, artifact search, catalog, and security capabilities. Clients connect to the JFrog Cloud endpoint and authenticate with OAuth.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://myPlatform.jfrog.github.io/mcpclaude mcp add --transport http jfrog-jfrog https://myPlatform.jfrog.github.io/mcp{"mcpServers":{"jfrog-jfrog":{"type":"http","url":"https://myPlatform.jfrog.github.io/mcp"}}}Open in Cursor{"servers":{"jfrog-jfrog":{"type":"http","url":"https://myPlatform.jfrog.github.io/mcp"}}}Open in VS Code{"mcpServers":{"jfrog-jfrog":{"type":"http","url":"https://myPlatform.jfrog.github.io/mcp"}}}{"mcpServers":{"jfrog-jfrog":{"serverUrl":"https://myPlatform.jfrog.github.io/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
Details
From the project README
JFrog Remote MCP Server
The Model Context Protocol (MCP) connects AI systems with external tools, data, and services using a standardized, lightweight interface.
JFrog MCP Server empowers developers, bringing the advanced capabilities of the JFrog platform to the development environment. The JFrog MCP Server integrates with IDEs and AI coding assistants such as VS Code, Cursor, Claude, Kiro, and Codex to respond to natural-language AI queries with rich, actionable information from the JFrog platform.
Among the capabilities you can access with direct, friendly AI interactions:
- Resource Management: Create and view projects, repositories, and other JFrog components.
- Artifact & Build Discovery: Find packages and their versions, locate where artifacts are stored, and search builds using AQL.
- Catalog and Curation: Access package information, versions, and vulnerabilities, and check curation status.
- Security Monitoring: Get Xray security summaries and policy violations for artifacts, check an artifact's scan/indexing status, and trace every resource impacted by a specific CVE or package.
Use these resources and real-time information for various use cases. For example:
- Ensure that only approved packages are used by developers during coding.
- Query the JFrog Catalog about OSS package versions, changes in reported vulnerabilities, and license requirements.
- Track and manage JFrog Projects and artifacts.
And much more. See the full tool reference for everything the server exposes.
Note: The JFrog MCP Server is now generally available (GA) on JFrog Cloud (SaaS). The self-managed server is in Beta. Individual tools marked Beta in the tool reference are experimental and must be enabled for your environment.
Remote Server Implementation
The JFrog MCP Server is hosted on JFrog Cloud, and the tools it provides to the client are continuously updated — you automatically get new features and improvements as they are released, with no installation or upgrade required on the client side.
You connect to the JFrog MCP Server using OAuth for authentication. This eliminates the need to manage API keys.
Note: Because this is a remote server, the tool set evolves on the server. The
TOOLS.mdreference reflects the current tool surface.
Set up the JFrog MCP Server
The JFrog Remote MCP Server is generally available (GA) to JFrog users with a Cloud (SaaS) subscription.
Subscription information: Supported on the Cloud (SaaS) and Self-Managed platforms for all licenses.
Self-Managed (Beta): A self-managed JFrog MCP Server is also available. See MCP Server Installation for Helm and Docker Compose deployment.
- An Admin user must enable the JFrog MCP Server on a JPD in the subscription.
- You can then add the JFrog MCP Server to an MCP client.
- Save the configuration file.
- Restart or refresh your MCP client. An OAuth window opens in your browser.
- Follow the prompts to authorize your MCP client to access the JFrog MCP Server.
In the examples below, replace <JFROG_PLATFORM_URL> with your JFrog platform URL (for example, https://mycompany.jfrog.io).
Visual Studio Code
{
"mcp": {
"servers": {
"jfrog": {
"url": "https://<JFROG_PLATFORM_URL>/mcp"
}
}
}
}
Cursor
{
"mcpServers": {
"jfrog": {
"url": "https://<JFROG_PLATFORM_URL>/mcp"
}
}
}
For more MCP clients (Kiro, Claude, Codex, and others), see Add the JFrog MCP Server to an MCP client.
Tools
The server exposes over 100 tools across Access, Artifactory, Security, Curation, Distribution, AI Catalog, Grid, Workers, OneModel, Event, Evidence, and AppTrust.
See the full reference in TOOLS.md.
Documentation
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.