Jfrog MCP Server

JFrog Platform API access for repository management and build tracking.

Data last scanned last week · Reviewed last month

4522 tools118TypeScriptApache-2.0

Overview

This experimental MCP server provides an interface to the JFrog Platform API, allowing AI assistants to perform tasks such as repository management, build tracking, and runtime monitoring. It includes capabilities for artifact searching via AQL, cataloging, and security scanning through Xray. Note that this repository is officially deprecated and is no longer maintained. It served as an experimental demonstration of MCP integration, but it does not receive updates, bug fixes, or security patches. Users are strongly advised to migrate to the official, supported JFrog MCP server.

Our verdict

This repository carries a high risk level with a security score of 45/100. The project is explicitly marked as deprecated and abandoned, and the lack of editorial review or official vendor maintenance means users have no support or security oversight. You should not use this server for any purpose; please utilize the official, vendor-supported JFrog MCP server instead.

  • Uses Apache-2.0 open-source licensing
  • Limited supply-chain footprint with 11 direct dependencies
  • Explicitly marked as deprecated and abandoned by the publisher
  • High security risk score due to lack of maintenance
  • No official support or verification provided

Setup

Claude Desktop
{
  "mcpServers": {
    "mcp-jfrog": {
      "args": [
        "-y",
        "mcp-jfrog"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
check_jfrog_availabilityCheck if JFrog platform is ready and functioninglow
create_local_repositoryCreate a new local repository in Artifactorymedium
create_remote_repositoryCreate a new remote repository in Artifactory to proxy external package registriesmedium
create_virtual_repositoryCreate a new virtual repository in Artifactory that aggregates multiple repositoriesmedium
list_repositoriesList all repositories in Artifactory with optional filteringlow
set_folder_propertySet properties on a folder in Artifactory, with optional recursive applicationmedium
execute_aql_queryExecute an Artifactory Query Language (AQL) query to search for artifacts, builds, or other entities in JFrog Artifactorylow
list_jfrog_buildsReturn a list of all builds in the JFrog platformlow
get_specific_buildGet details for a specific build by namelow
list_jfrog_runtime_clustersReturn a list of all runtime clusters in the JFrog platformlow

Compatibility

ClientLocalDockerRemoteRead-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

Should I use this repository for my projects?

No, this project is deprecated and no longer maintained. You should not use it for new or existing integrations.

Is there a recommended alternative?

Yes, you should use the official JFrog MCP Server provided by JFrog, which is secure, production-ready, and receives ongoing updates.

Alternatives

Badge

Jfrog MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.