JFrog Remote MCP Server — Claude Code MCP server: setup and tools
Gives your coding assistant JFrog data: package and artifact lookup, build search, Xray findings, curation status. Hosted remotely and authenticated with OAuth.
claude mcp add --transport http jfrog-mcp-server https://myPlatform.jfrog.github.io/mcpWhat JFrog Remote MCP Server does
The server runs on JFrog Cloud, so there is no local install or upgrade to babysit. Its tool surface changes on the server side and reaches past a hundred tools, grouped under Access, Artifactory, Security, Curation, Distribution, AI Catalog, Grid, Workers, OneModel, Event, Evidence and AppTrust. With them an assistant can create projects and repositories, resolve a package version, locate where an artifact lives, and dig through builds using AQL queries.
Security is the other half. Xray summaries and policy violations come back for an artifact, along with its scan and indexing state, and you can walk from a single CVE or package to every resource it touches. A common use: stop unapproved packages from reaching the codebase in the first place.
Setup starts with an admin enabling the MCP server on a JPD in the subscription. Then you put a URL of the form https://<JFROG_PLATFORM_URL>/mcp into the client config, restart or refresh the client, and approve access in the OAuth window that pops up. No API keys to store. The hosted server is GA on Cloud (SaaS) for every license; the self-managed build is in beta, and tools marked experimental have to be turned on for your environment.
What it helps with
- locate which repository holds a given artifact
- block unapproved packages before they land in code
- pull Xray findings and policy violations for an artifact
- trace every resource affected by one CVE
- spin up a new project or repository from the chat
Example prompts for the agent
- List all versions of
lodashin JFrog and tell me which repos hold them. - Give me the Xray summary for
app-1.2.0.jarand its policy violations. - Check the curation status of
requests— is it approved for use?
How to install JFrog Remote MCP Server
Platform CLI: remote server
claude mcp add --transport http jfrog-mcp-server https://myPlatform.jfrog.github.io/mcpPlatform CLI: remote server
codex mcp add jfrog-remote-mcp-server --url https://myPlatform.jfrog.github.io/mcpConfig file
{
"mcpServers": {
"jfrog-remote-mcp-server": {
"url": "https://myPlatform.jfrog.github.io/mcp"
}
}
}Config file
{
"servers": {
"jfrog-remote-mcp-server": {
"type": "http",
"url": "https://myPlatform.jfrog.github.io/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http jfrog-remote-mcp-server https://myPlatform.jfrog.github.io/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about JFrog Remote MCP Server
How do I install JFrog Remote MCP Server in Claude Code?
Run claude mcp add --transport http jfrog-mcp-server https://myPlatform.jfrog.github.io/mcp, then restart the client and approve access in the OAuth window.
What does JFrog Remote MCP Server do?
It feeds JFrog platform data into your assistant: projects, repositories, package versions, build records, Xray security summaries, curation status, and CVE impact.
Do I need an API key to connect?
No. Authentication happens through OAuth, after an admin enables the MCP server on a JPD in your subscription.
