/

JFrog

JFrog Platform integration with MCP, security skills, supply-chain best practices, and JFrog MCP Gateway governance for adding, removing, and listing MCP servers.

Created by JFrogVerified by CursorView Source

supply-chain-securityAudits dependencies and artifacts for vulnerabilities, license compliance, and curation policy violations using JFrog Platform data.

jfrog-platformUse when working with the JFrog Platform -- Artifactory (repositories, artifacts, builds, AQL, replication, federation), Security/Xray (vulnerabilities, CVEs, policies, watches, SBOM, SAST, secrets detection), Access (tokens, users, groups, permissions, projects, RBAC), Distribution (release bundles, promotion, environments, edge nodes, evidence), Curation (package firewall, blocked packages, waivers), AppTrust (application entities, versions, trusted releases), Runtime (clusters, running images, sensors), Mission Control (JPDs, deployment health, licenses), Workers (serverless TypeScript, event hooks), CLI (jf command, jf rt, jf audit, jf scan), and architectural patterns/best practices. Triggers on mentions of any JFrog product, artifactory, xray, security, access token, curation, distribution, release bundle, apptrust, runtime, mission control, worker, jf command, pattern, or best practice.

sessionstartHook: sessionStart

jfrog-securitySupply-chain security practices when adding or updating dependencies