mcp-jfrog

Overview

The mcp-jfrog server is an experimental project that connects to the JFrog Platform API to enable DevOps workflows through MCP. It offers comprehensive functionality for managing repositories, tracking builds, monitoring runtime environments, and performing security scans with Xray. The server exposes numerous tools for repository operations, artifact management, and package vulnerability scanning, making it valuable for teams working with JFrog as their DevOps platform.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• check_jfrog_availability

  Check if JFrog platform is ready and functioning

  Try:Is the JFrog platform available?Try:Check if JFrog is ready
• create_local_repository

  Create a new local repository in Artifactory

  Try:Create a local npm repository named my-npm-repoTry:Make a new maven local repository
• create_remote_repository

  Create a new remote repository in Artifactory to proxy external package registries

  Try:Create a remote repository for npm packagesTry:Set up a remote maven repository
• create_virtual_repository

  Create a new virtual repository in Artifactory that aggregates multiple repositories

  Try:Create a virtual repository combining local and remote npm reposTry:Set up a virtual repository to aggregate multiple maven repos
• list_repositories

  List all repositories in Artifactory with optional filtering

  Try:Show all npm repositoriesTry:List all local repositories
• execute_aql_query

  Execute an Artifactory Query Language (AQL) query to search for artifacts, builds, or other entities

  Try:Find all artifacts in the my-repo repositoryTry:Search for builds created in the last week
• list_jfrog_builds

  Return a list of all builds in the JFrog platform

  Try:Show all buildsTry:List recent builds
• get_specific_build

  Get details for a specific build by name

  Try:Get details for the my-app buildTry:Show information for build version 1.2.3
• list_jfrog_runtime_clusters

  Return a list of all runtime clusters in the JFrog platform

  Try:List all runtime clustersTry:Show me available runtime clusters
• list_projects

  Get a list of all projects in the JFrog platform

  Try:Show all projectsTry:List my JFrog projects
• jfrog_get_package_info

  Get publicly available information about a software package

  Try:Get information about the react packageTry:Show details for package angular version 16
• jfrog_get_package_vulnerabilities

  Get a list of known vulnerabilities affecting a specific version of an open source package

  Try:Check for vulnerabilities in the lodash packageTry:Show security issues for package version 1.2.3

Comparable tools

Installation

npx -y @smithery/cli install @jfrog/mcp-jfrog --client claude

{
  "mcpServers": {
    "jfrog": {
      "command": "node",
      "args": ["/path/to/mcp-jfrog/dist/index.js"],
      "env": {
        "JFROG_ACCESS_TOKEN": "your_token",
        "JFROG_URL": "https://your-jfrog-instance.com"
      }
    }
  }
}

FAQ

Is this an official JFrog product?

No, this is an experimental project. JFrog now provides an official, secure, and remotely hosted MCP server for production use.

What authentication method is supported?

The server uses JFrog access tokens for authentication, which must be provided via the JFROG_ACCESS_TOKEN environment variable.

Compare mcp-jfrog with