JFrog Remote

The JFrog MCP Server lets you query and manage JFrog resources from AI assistants in your development environment. It provides real-time access to projects, repositories, artifacts, catalog data, and security insights, so you can ask natural-language questions and receive actionable results without leaving your IDE or coding assistant.

How to use

You connect your MCP client to the JFrog MCP Server using OAuth for authentication. Once connected, you can ask your AI assistant to retrieve resource information, search artifacts, check catalog data, or monitor security issues. Typical use cases include ensuring only approved packages are used during coding, querying OSS package versions and vulnerability updates, and tracking JFrog projects and artifacts.

How to install

Prerequisites: you will need an MCP client installed in your development environment (for example, the MCP client in your IDE or coding assistant). You should also have an active JFrog Cloud subscription and the appropriate admin permissions to enable the MCP Server.

Steps to set up the JFrog MCP Server connection and enable access from your MCP client:

1. Admin enablement: An Admin user enables the JFrog MCP Server on your JPD within your JFrog Cloud subscription.

2. Add to MCP client: In your MCP client, add the JFrog MCP Server definition to your MCP configuration.

3. Save the configuration file: Save the updated MCP client configuration so the client can recognize the new server.

4. Restart or refresh the MCP client: Restart the MCP client or trigger a refresh so it reloads the server definitions. An OAuth window opens in your browser.

5. Authorize access: Follow the prompts to authorize your MCP client to access the JFrog MCP Server. This establishes a secure OAuth-based connection.

Provider examples for MCP client configurations are shown below, representing how the server is defined in popular IDEs.

{  
  "mcp":  
      "servers": {  
          "jfrog":   
              "url":"https://<​​JFROG_PLATFORM_URL​​>/mcp" 
          } 
      }

Additional configuration examples

These examples show how to declare the JFrog MCP Server in common MCP client configurations.

{
  "mcp": {
    "servers": {
      "jfrog": {
        "url": "https://<​​JFROG_PLATFORM_URL​​>/mcp"
      }
    }
  }
}

Available tools

resource_management

Create and view JFrog projects, repositories, and other components from your MCP-enabled tooling.

artifact_search

Execute AQL-like queries to locate artifacts used within your organization.

catalog_and_curation

Access package information, versions, vulnerabilities, and check curation status.

security_monitoring

Generate real-time DevSecOps reports on CVEs, severity, and vulnerability applicability.