# JFrog plugin

> JFrog's plugin for Claude Code: its MCP server plus skills for Artifactory, security audits, package curation and governed MCP installs.

JFrog's official plugin for Claude Code. It connects your agent to your JFrog Platform through JFrog's remote MCP server and adds JFrog's skills and hooks, so you can manage artifacts, check packages and run security audits from the chat, with your agent's installs kept inside your organization's governance.

What's in it
- The JFrog MCP server, attached to every session at your own platform's address, with OAuth sign-in and no API keys
- A JFrog Platform skill: Artifactory repositories, builds, permissions, users, access tokens, projects, release bundles and administration through the JFrog CLI and APIs, plus security audits, CVE lookups and Advanced Security exposure queries
- Package curation: check whether npm, Maven, PyPI, Go and other packages are safe and allowed, then download them through Artifactory
- Agent Guard: discover, install, configure and remove the MCP servers your project has approved in the JFrog AI Catalog, and find, install and publish catalog skills and plugins
- Package manager setup for Artifactory, and guidance on sizing and deploying the JFrog Platform from its reference architecture
- Agent Package Resolution (preview): routes the packages your agent installs (npm, PyPI, Maven, Go, Docker, Helm and NuGet) through your organization's Artifactory
- Skill Governance (preview): checks the skills Claude uses against your organization's JFrog policies and blocks the ones that break them

How to install it
In Claude Code, run /plugin install jfrog@claude-plugins-official. Then run /jfrog-init to set your JFrog host and finish setup, and restart Claude Code.

Good to know
- You need your JFrog Platform URL and an access token (set JFROG_URL and JFROG_ACCESS_TOKEN, and configure the JFrog CLI with jf config add), Node.js 18 or later, and the jf CLI, jq and curl for the skills.
- Agent Guard needs the JFrog AI Catalog on your subscription and a JFrog project.
- When an MCP server needs a secret, the agent gives you a command to run in your terminal, so secrets never appear in the chat.

- Type: Plugin
- Made by: jfrog
- Category: Security
- Formats: Claude plugins
- Version: latest
- Website: https://jfrog.com/
- Source: https://github.com/jfrog/claude-plugin
- Page: https://pluginboard.ai/plugins/jfrog-plugin

## Works with

- Claude
- GitHub Copilot
- Claude Code
- OpenClaw

## Install

### Claude

In Claude (web or desktop): Customize → Plugins → Add → Add marketplace, enter anthropics/claude-plugins-official, then add jfrog

### Claude Code

In Claude Code:

```text
/plugin marketplace add anthropics/claude-plugins-official
/plugin install jfrog@claude-plugins-official
```

---
From Pluginboard (https://pluginboard.ai).