# JFrog Remote MCP Server

Gives your coding assistant JFrog data: package and artifact lookup, build search, Xray findings, curation status. Hosted remotely and authenticated with OAuth.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: jfrog
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/jfrog/jfrog-mcp-server
- Updated: 2026-10-18
- HTML: https://affpapa.org/en/nevibecode/mcp/jfrog-remote-mcp-server

## What it does

The server runs on JFrog Cloud, so there is no local install or upgrade to babysit. Its tool surface changes on the server side and reaches past a hundred tools, grouped under Access, Artifactory, Security, Curation, Distribution, AI Catalog, Grid, Workers, OneModel, Event, Evidence and AppTrust. With them an assistant can create projects and repositories, resolve a package version, locate where an artifact lives, and dig through builds using AQL queries.

Security is the other half. Xray summaries and policy violations come back for an artifact, along with its scan and indexing state, and you can walk from a single CVE or package to every resource it touches. A common use: stop unapproved packages from reaching the codebase in the first place.

Setup starts with an admin enabling the MCP server on a JPD in the subscription. Then you put a URL of the form `https://<JFROG_PLATFORM_URL>/mcp` into the client config, restart or refresh the client, and approve access in the OAuth window that pops up. No API keys to store. The hosted server is GA on Cloud (SaaS) for every license; the self-managed build is in beta, and tools marked experimental have to be turned on for your environment.

## Requirements
- Remote server: `https://myPlatform.jfrog.github.io/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http jfrog-mcp-server https://myPlatform.jfrog.github.io/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add jfrog-remote-mcp-server --url https://myPlatform.jfrog.github.io/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "jfrog-remote-mcp-server": {
            "url": "https://myPlatform.jfrog.github.io/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "jfrog-remote-mcp-server": {
            "type": "http",
            "url": "https://myPlatform.jfrog.github.io/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http jfrog-remote-mcp-server https://myPlatform.jfrog.github.io/mcp
```

## When to use it
- locate which repository holds a given artifact
- block unapproved packages before they land in code
- pull Xray findings and policy violations for an artifact
- trace every resource affected by one CVE
- spin up a new project or repository from the chat

## Example prompts
- List all versions of `lodash` in JFrog and tell me which repos hold them.
- Give me the Xray summary for `app-1.2.0.jar` and its policy violations.
- Check the curation status of `requests` — is it approved for use?

## Similar
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [Oh My Posh Validator](https://affpapa.org/en/nevibecode/mcp/oh-my-posh-validator.md) — MCP server · ★ 23643
- [Keploy](https://affpapa.org/en/nevibecode/mcp/keploy.md) — MCP server · ★ 18727
- [Coder](https://affpapa.org/en/nevibecode/mcp/coder.md) — MCP server · ★ 17160
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md