--- title: "JFrog Artifactory MCP server for AI agents - actionlake" description: "Give Claude 270 JFrog Artifactory actions through one MCP server: artifactory, access, xray. Your agent never holds the credential. 100,000 calls a month free." canonical: https://actionlake.com/connectors/jfrog-artifactory updated: 2026-10-23 --- Connectors · Identity & security # JFrog Artifactory MCP server for AI agents. actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to JFrog Artifactory and the rest of your systems. It gives your agent 270 JFrog Artifactory actions (111 reads, 120 writes and 39 that wait for a confirmation) and holds the JFrog Artifactory credential itself, so the agent never does. It paces JFrog Artifactory's limits and records every call. [Connect JFrog Artifactory free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) 100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you. `claude mcp add --transport http actionlake https://connect.actionlake.com/mcp` the first call ``` do { action: "jfrog_artifactory.projects.list", intent: "check which JFrog Artifactory account is connected" } # List projects · read · 1 upstream call ``` - 270 actions in one signed file - 111 read look, never change - 120 write create and update - 39 wait for a yes destructive, confirmed first Set up ## Connect JFrog Artifactory in three steps. 1. 01 ### Add actionlake to Claude. Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us. `https://connect.actionlake.com/mcp` 2. 02 ### Connect JFrog Artifactory. Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. actionlake stores what you paste write-only, sealed under your tenant's key. - `access_token` JFrog access token or identity token - `host` Where your JFrog Artifactory lives: your host ``` account { op: "connections.requirements", service: "jfrog_artifactory" } # free: exactly what to paste, and what is found for you ``` 3. 03 ### Make the first call. Check before a write. Ask in plain words; Claude picks the action. Before anything changes, `check` validates the call and prices it, for free. ``` do { action: "jfrog_artifactory.projects.list" } # list projects · read · 1 upstream call check { action: "jfrog_artifactory.items.copy", input: { … } } # free: inputs, permissions, cost and confirmations, nothing sent ``` JFrog Artifactory at a glance **Sign-in** Bearer token. No consent screen: your agent can connect it for you, but the key then passes through your chat. To keep it out of the model's context, paste it in the console instead. **You provide** `access_token` **Setup fields** `host` **Limits we pace to** 600 calls a minute, per connection **API covered** JFrog Platform (Artifactory, Access, Xray, Release Lifecycle) API JFrog Platform REST APIs: Artifactory /artifactory/api, Access /access/api v1-v2, Xray /xray/api v1-v2, Lifecycle /lifecycle/api/v2, Event /event/api/v1, at your JFrog Artifactory instance's API base URL, which you enter when connecting **Built from** JFrog Artifactory's documentation, read 23 October 2026[jfrog.com](https://jfrog.com/help/r/jfrog-rest-apis) [GitHub](https://github.com/jfrog/jfrog-client-go) **Service file** Version 1.0.0, signed (Ed25519) **Cached reads** 95 of 111 reads, for up to 5 minutes; a write clears what it affects **Shared entities** 5, so ask can line JFrog Artifactory up with your other systems **Data** Processed and stored in Sydney, Australia. No US region yet Capabilities ## What an AI agent can do in JFrog Artifactory. 270 actions in 5 areas. Every one carries its effect, so a key can allow the reads and hold the rest. - **111** read look, never change - **120** write create and update - **39** destructive wait for a confirmation 1. ### Artifactory 143 55 read · 73 write · 15 destructive List repositories · List builds · Promote a build · Upload build info 2. ### Access 65 24 read · 25 write · 16 destructive List projects · List groups · List users · Create a project 3. ### Xray 39 20 read · 15 write · 4 destructive List Xray policies · Scan an artifact · Get an artifact's scan status · Scan a build 4. ### Lifecycle 18 10 read · 5 write · 3 destructive Create a release bundle · Distribute a release bundle version · Export a release bundle version · List a release bundle version's distributions 5. ### Event 5 2 read · 2 write · 1 destructive Create a webhook · List webhooks · Get a webhook · Update a webhook Top actions ## The JFrog Artifactory API, shaped for agents. The ids your agent types, what each does, and the one name it shares with other systems. | Action | What it does | Effect | Same name in | | --- | --- | --- | --- | | `jfrog_artifactory.projects.list` List projects | List projects. | read | this connector | | `jfrog_artifactory.repositories.list` List repositories | List repositories. | read | this connector | | `jfrog_artifactory.access.users.list` List users | List users. | read | this connector | | `jfrog_artifactory.access.groups.list` List groups | List groups. | read | this connector | | `jfrog_artifactory.items.copy` Copy an item | Copy an item. | write | this connector | | `jfrog_artifactory.items.list` List files under a folder | List files under a folder. | read | this connector | | `jfrog_artifactory.search.aql` Run an AQL query | Run an AQL query. | read | this connector | | `jfrog_artifactory.builds.list` List builds | List builds. | read | this connector | | `jfrog_artifactory.builds.upload` Upload build info | Upload build info. | write | this connector | | `jfrog_artifactory.system.export` Export the system | Export the system. | write | this connector | | `jfrog_artifactory.system.import` Import a full system export | Import a full system export. | write | this connector | | `jfrog_artifactory.items.delete` Delete a file or folder | Delete a file or folder. | destructive | this connector | Try it ## Prompts to paste into Claude. Each one names the JFrog Artifactory actions it will call, so you know what it reads and what it changes before you send it. 1. Read read Give me a one-line status for every active JFrog Artifactory project. calls `jfrog_artifactory.projects.list` 2. Write write Copy an item in JFrog Artifactory. Show me exactly what you will send before you save it. calls `jfrog_artifactory.items.copy` Governance for JFrog Artifactory ## Destructive actions wait for a yes. 39 JFrog Artifactory actions are destructive. The first 10: - Delete a file or folder `jfrog_artifactory.items.delete` - Delete builds `jfrog_artifactory.builds.delete` - Delete a project `jfrog_artifactory.projects.delete` - Apply build retention `jfrog_artifactory.builds.retention` - Delete a repository `jfrog_artifactory.repositories.delete` - Delete a user `jfrog_artifactory.access.users.delete` - Delete a group `jfrog_artifactory.access.groups.delete` - Revoke an access token `jfrog_artifactory.access.tokens.revoke` - Delete a project role `jfrog_artifactory.projects.roles.delete` - Remove a project user `jfrog_artifactory.projects.users.remove` A destructive action runs only with `confirm: true`. Under the `human` policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after. do jfrog_artifactory.items.delete confirm_policy: **human** Delete a file or folder? **intent:** the user asked me to delete a file or folder run suspended · waiting for a named person · key _jfrog-artifactory-agent_ cannot confirm itself In the console, or from an emailed signed link. a key for this connector ``` account { op: "keys.create", name: "jfrog-artifactory-agent", allowed_actions: ["jfrog_artifactory.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "jfrog_artifactory.items.delete", approver: "lead@example.com" }, { match: "jfrog_artifactory.builds.delete", approver: "lead@example.com" }, { match: "jfrog_artifactory.projects.delete", approver: "lead@example.com" } ] } ``` Illustrative. Scoped to JFrog Artifactory only, capped at 2,000 upstream calls, every write confirmed, and the destructive ones approved by a named person. Cost ## What JFrog Artifactory costs on actionlake. Every JFrog Artifactory action is one upstream call, the only thing actionlake bills. Searching, `check`, `cost`, `account` and any call JFrog Artifactory refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. - 1 upstream call per action all 270 JFrog Artifactory actions - 270 actions page each page of a long list is one call - 95 reads can be cached a cache hit costs nothing - 100,000 calls a month, free paid plans from US$49 a month for 250,000 [See pricing](https://actionlake.com/pricing) Action index ## Every JFrog Artifactory action. 270 actions by area: the id your agent calls, what it does, and its effect. **Artifactory 143** - `jfrog_artifactory.artifacts.deploy` Deploy a text artifact write - `jfrog_artifactory.artifacts.deploy_by_checksum` Deploy an artifact by checksum write - `jfrog_artifactory.builds.delete` Delete builds destructive - `jfrog_artifactory.builds.diff` Diff two build runs read - `jfrog_artifactory.builds.get` Get build info read - `jfrog_artifactory.builds.list` List builds read - `jfrog_artifactory.builds.promote` Promote a build write - `jfrog_artifactory.builds.rename` Rename a build write - `jfrog_artifactory.builds.retention` Apply build retention destructive - `jfrog_artifactory.builds.runs.list` List a build's runs read - `jfrog_artifactory.builds.upload` Upload build info write - `jfrog_artifactory.docker.images.promote` Promote a Docker image write - `jfrog_artifactory.docker.repositories.list` List Docker repositories in a registry read - `jfrog_artifactory.docker.tags.list` List Docker image tags read - `jfrog_artifactory.federation.full_sync` Run a full sync of a federated repository write - `jfrog_artifactory.federation.migrate` Convert a local repository to federated write - `jfrog_artifactory.federation.mirrors_lag` Get federation mirror lag read - `jfrog_artifactory.federation.status` Get a federated repository's sync status read - `jfrog_artifactory.folders.create` Create a folder write - `jfrog_artifactory.items.checksum.set_sha256` Calculate an item's SHA-256 write - `jfrog_artifactory.items.copy` Copy an item write - `jfrog_artifactory.items.delete` Delete a file or folder destructive - `jfrog_artifactory.items.get` Get file or folder info read - `jfrog_artifactory.items.last_modified` Get an item's last modified time read - `jfrog_artifactory.items.list` List files under a folder read - `jfrog_artifactory.items.move` Move an item write - `jfrog_artifactory.items.permissions.get` Get effective item permissions read - `jfrog_artifactory.items.properties.delete` Delete item properties destructive - `jfrog_artifactory.items.properties.get` Get item properties read - `jfrog_artifactory.items.properties.set` Set item properties write - `jfrog_artifactory.items.properties.update` Update item properties (JSON) write - `jfrog_artifactory.items.stats` Get file download statistics read - `jfrog_artifactory.plugins.build_promote` Run a build promotion plugin write - `jfrog_artifactory.plugins.build_staging` Get a build staging strategy read - `jfrog_artifactory.plugins.execute` Execute a plugin write - `jfrog_artifactory.plugins.list` List user plugins read - `jfrog_artifactory.plugins.list_by_type` List user plugins of a type read - `jfrog_artifactory.plugins.reload` Reload user plugins write - `jfrog_artifactory.replications.create` Create a repository replication write - `jfrog_artifactory.replications.create_multiple` Create multi-push replications write - `jfrog_artifactory.replications.delete` Delete a repository replication destructive - `jfrog_artifactory.replications.execute` Run a pull or push replication now write - `jfrog_artifactory.replications.get` Get a repository's replication configuration read - `jfrog_artifactory.replications.list` List replication configurations read - `jfrog_artifactory.replications.status` Get scheduled replication status read - `jfrog_artifactory.replications.update` Update a repository replication write - `jfrog_artifactory.replications.update_multiple` Update multi-push replications write - `jfrog_artifactory.repositories.batch_create` Create several repositories write - `jfrog_artifactory.repositories.batch_update` Update several repositories write - `jfrog_artifactory.repositories.create` Create a repository write - `jfrog_artifactory.repositories.delete` Delete a repository destructive - `jfrog_artifactory.repositories.get` Get a repository configuration read - `jfrog_artifactory.repositories.import` Import repository content from the server's file system write - `jfrog_artifactory.repositories.list` List repositories read - `jfrog_artifactory.repositories.reindex_bower` Reindex a Bower repository write - `jfrog_artifactory.repositories.reindex_chef` Reindex a Chef repository write - `jfrog_artifactory.repositories.reindex_conda` Calculate Conda repository metadata write - `jfrog_artifactory.repositories.reindex_cran` Calculate CRAN repository metadata write - `jfrog_artifactory.repositories.reindex_debian` Calculate Debian repository metadata write - `jfrog_artifactory.repositories.reindex_helm` Calculate a Helm chart index write - `jfrog_artifactory.repositories.reindex_maven` Calculate Maven metadata write - `jfrog_artifactory.repositories.reindex_npm` Reindex an npm repository write - `jfrog_artifactory.repositories.reindex_nuget` Reindex a NuGet repository write - `jfrog_artifactory.repositories.reindex_opkg` Calculate Opkg repository metadata write - `jfrog_artifactory.repositories.reindex_puppet` Reindex a Puppet repository write - `jfrog_artifactory.repositories.reindex_pypi` Reindex a PyPI repository write - `jfrog_artifactory.repositories.reindex_yum` Calculate YUM repository metadata write - `jfrog_artifactory.repositories.update` Update a repository configuration write - `jfrog_artifactory.search.aql` Run an AQL query read - `jfrog_artifactory.search.archive_entries` Search archive entries read - `jfrog_artifactory.search.artifacts` Search artifacts by name read - `jfrog_artifactory.search.bad_checksum` Search artifacts with bad checksums read - `jfrog_artifactory.search.build_artifacts` Search a build's artifacts read - `jfrog_artifactory.search.checksum` Search by checksum read - `jfrog_artifactory.search.creation` Search artifacts created in a date range read - `jfrog_artifactory.search.dates` Search artifacts by date range read - `jfrog_artifactory.search.dependency` Find builds that use an artifact as a dependency read - `jfrog_artifactory.search.gavc` Search by Maven coordinates read - `jfrog_artifactory.search.pattern` Search by path pattern read - `jfrog_artifactory.search.unused` Search artifacts not downloaded since a date read - `jfrog_artifactory.search.versions` Search artifact versions by Maven coordinates read - `jfrog_artifactory.security.groups.create` Create or replace a group (Artifactory) write - `jfrog_artifactory.security.groups.delete` Delete a group (Artifactory) destructive - `jfrog_artifactory.security.groups.get` Get a group (Artifactory) read - `jfrog_artifactory.security.groups.list` List groups (Artifactory) read - `jfrog_artifactory.security.groups.update` Update a group (Artifactory) write - `jfrog_artifactory.security.keypairs.create` Create a key pair write - `jfrog_artifactory.security.keypairs.delete` Delete a key pair destructive - `jfrog_artifactory.security.keypairs.get` Get a key pair read - `jfrog_artifactory.security.keypairs.list` List key pairs read - `jfrog_artifactory.security.lock_policy.get` Get the user lock policy read - `jfrog_artifactory.security.lock_policy.update` Set the user lock policy write - `jfrog_artifactory.security.locked_users.list` List locked-out users read - `jfrog_artifactory.security.locked_users.unlock` Unlock a user write - `jfrog_artifactory.security.locked_users.unlock_all` Unlock all users write - `jfrog_artifactory.security.locked_users.unlock_many` Unlock several users write - `jfrog_artifactory.security.password_policy.get` Get the password expiration policy read - `jfrog_artifactory.security.password_policy.update` Set the password expiration policy write - `jfrog_artifactory.security.passwords.expire_all` Expire every user's password write - `jfrog_artifactory.security.passwords.expire_user` Expire a user's password write - `jfrog_artifactory.security.passwords.expire_users` Expire several users' passwords write - `jfrog_artifactory.security.passwords.unexpire_user` Unexpire a user's password write - `jfrog_artifactory.security.permissions.create` Create a permission target (Artifactory) write - `jfrog_artifactory.security.permissions.delete` Delete a permission target (Artifactory) destructive - `jfrog_artifactory.security.permissions.get` Get a permission target (Artifactory) read - `jfrog_artifactory.security.permissions.list` List permission targets (Artifactory) read - `jfrog_artifactory.security.permissions.replace` Replace a permission target (Artifactory) write - `jfrog_artifactory.security.trusted_keys.create` Add a trusted key write - `jfrog_artifactory.security.trusted_keys.delete` Delete a trusted key destructive - `jfrog_artifactory.security.trusted_keys.list` List trusted keys read - `jfrog_artifactory.security.users.create` Create or replace a user (Artifactory) write - `jfrog_artifactory.security.users.delete` Delete a user (Artifactory) destructive - `jfrog_artifactory.security.users.get` Get a user (Artifactory) read - `jfrog_artifactory.security.users.list` List users (Artifactory) read - `jfrog_artifactory.security.users.update` Update a user (Artifactory) write - `jfrog_artifactory.storage_info.calculate` Refresh the storage summary write - `jfrog_artifactory.storage_info.get` Get storage summary read - `jfrog_artifactory.system.base_url.update` Set the custom base URL write - `jfrog_artifactory.system.certificates.add` Add a trusted certificate write - `jfrog_artifactory.system.certificates.delete` Delete a trusted certificate destructive - `jfrog_artifactory.system.certificates.list` List trusted certificates read - `jfrog_artifactory.system.configuration.patch` Patch the global configuration (YAML) write - `jfrog_artifactory.system.encryption.decrypt` Decrypt stored passwords write - `jfrog_artifactory.system.encryption.encrypt` Encrypt stored passwords write - `jfrog_artifactory.system.export` Export the system write - `jfrog_artifactory.system.ha_licenses.delete` Delete HA cluster licenses destructive - `jfrog_artifactory.system.ha_licenses.install` Install HA cluster licenses write - `jfrog_artifactory.system.ha_licenses.list` List HA cluster licenses read - `jfrog_artifactory.system.import` Import a full system export write - `jfrog_artifactory.system.license.get` Get license information read - `jfrog_artifactory.system.license.install` Install a license write - `jfrog_artifactory.system.liveness.get` Get Artifactory liveness read - `jfrog_artifactory.system.readiness.get` Get Artifactory readiness read - `jfrog_artifactory.system.replications.block` Block push and pull replications write - `jfrog_artifactory.system.replications.unblock` Unblock push and pull replications write - `jfrog_artifactory.system.reverse_proxy.get` Get reverse proxy configuration read - `jfrog_artifactory.system.reverse_proxy.update` Update reverse proxy configuration write - `jfrog_artifactory.system.storage.gc` Run garbage collection write - `jfrog_artifactory.system.storage.optimize` Optimize system storage write - `jfrog_artifactory.system.version.get` Get Artifactory version and add-ons read - `jfrog_artifactory.trash.empty` Empty the trash can destructive - `jfrog_artifactory.trash.items.delete` Delete an item from the trash can destructive - `jfrog_artifactory.trash.items.restore` Restore an item from the trash can write **Access 65** - `jfrog_artifactory.access.groups.create` Create a group write - `jfrog_artifactory.access.groups.delete` Delete a group destructive - `jfrog_artifactory.access.groups.get` Get a group read - `jfrog_artifactory.access.groups.list` List groups read - `jfrog_artifactory.access.groups.members.update` Add or remove group members write - `jfrog_artifactory.access.groups.update` Update a group write - `jfrog_artifactory.access.oidc.token` Exchange an OIDC token for an access token write - `jfrog_artifactory.access.permissions.create` Create a permission write - `jfrog_artifactory.access.permissions.delete` Delete a permission destructive - `jfrog_artifactory.access.permissions.get` Get a permission read - `jfrog_artifactory.access.permissions.list` List permissions read - `jfrog_artifactory.access.permissions.resources.delete` Remove a permission's resource section destructive - `jfrog_artifactory.access.permissions.resources.get` Get a permission's resource section read - `jfrog_artifactory.access.permissions.resources.replace` Replace a permission's resource section write - `jfrog_artifactory.access.tokens.create` Create an access token write - `jfrog_artifactory.access.tokens.get` Get an access token's details read - `jfrog_artifactory.access.tokens.list` List access tokens read - `jfrog_artifactory.access.tokens.me` Get the calling token's details read - `jfrog_artifactory.access.tokens.revoke` Revoke an access token destructive - `jfrog_artifactory.access.users.create` Create a user write - `jfrog_artifactory.access.users.delete` Delete a user destructive - `jfrog_artifactory.access.users.get` Get a user read - `jfrog_artifactory.access.users.invite` Invite a user by email write - `jfrog_artifactory.access.users.list` List users read - `jfrog_artifactory.access.users.update` Update a user write - `jfrog_artifactory.environments.create` Create a global environment write - `jfrog_artifactory.environments.delete` Delete a global environment destructive - `jfrog_artifactory.environments.list` List global environments read - `jfrog_artifactory.oidc.mappings.create` Create an OIDC identity mapping write - `jfrog_artifactory.oidc.mappings.delete` Delete an OIDC identity mapping destructive - `jfrog_artifactory.oidc.mappings.get` Get an OIDC identity mapping read - `jfrog_artifactory.oidc.mappings.list` List OIDC identity mappings read - `jfrog_artifactory.oidc.mappings.update` Update an OIDC identity mapping write - `jfrog_artifactory.oidc.providers.create` Create an OIDC integration write - `jfrog_artifactory.oidc.providers.delete` Delete an OIDC integration destructive - `jfrog_artifactory.oidc.providers.get` Get an OIDC integration read - `jfrog_artifactory.oidc.providers.list` List OIDC integrations read - `jfrog_artifactory.oidc.providers.update` Update an OIDC integration write - `jfrog_artifactory.projects.create` Create a project write - `jfrog_artifactory.projects.delete` Delete a project destructive - `jfrog_artifactory.projects.environments.create` Create a project environment write - `jfrog_artifactory.projects.environments.delete` Delete a project environment destructive - `jfrog_artifactory.projects.environments.list` List a project's environments read - `jfrog_artifactory.projects.get` Get a project read - `jfrog_artifactory.projects.groups.get` Get a project group's roles read - `jfrog_artifactory.projects.groups.list` List a project's groups read - `jfrog_artifactory.projects.groups.remove` Remove a project group destructive - `jfrog_artifactory.projects.groups.set` Add or update a project group write - `jfrog_artifactory.projects.list` List projects read - `jfrog_artifactory.projects.repositories.assign` Assign a repository to a project write - `jfrog_artifactory.projects.repositories.share` Share a repository with a project write - `jfrog_artifactory.projects.repositories.share_all` Share a repository with all projects write - `jfrog_artifactory.projects.repositories.unassign` Unassign a repository from its project destructive - `jfrog_artifactory.projects.repositories.unshare` Stop sharing a repository with a project destructive - `jfrog_artifactory.projects.repositories.unshare_all` Stop sharing a repository with all projects destructive - `jfrog_artifactory.projects.roles.create` Create a project role write - `jfrog_artifactory.projects.roles.delete` Delete a project role destructive - `jfrog_artifactory.projects.roles.get` Get a project role read - `jfrog_artifactory.projects.roles.list` List a project's roles read - `jfrog_artifactory.projects.roles.update` Update a project role write - `jfrog_artifactory.projects.update` Update a project write - `jfrog_artifactory.projects.users.get` Get a project user's roles read - `jfrog_artifactory.projects.users.list` List a project's users read - `jfrog_artifactory.projects.users.remove` Remove a project user destructive - `jfrog_artifactory.projects.users.set` Add or update a project user write **Xray 39** - `jfrog_artifactory.xray.artifacts.scan` Scan an artifact write - `jfrog_artifactory.xray.artifacts.status` Get an artifact's scan status read - `jfrog_artifactory.xray.builds.scan` Scan a build write - `jfrog_artifactory.xray.components.cves_by_components` Find CVEs affecting components read - `jfrog_artifactory.xray.components.search_by_cves` Find components affected by CVEs read - `jfrog_artifactory.xray.dependency_graph.artifact` Get an artifact's dependency graph read - `jfrog_artifactory.xray.dependency_graph.build` Get a build's dependency graph read - `jfrog_artifactory.xray.ignore_rules.create` Create an Xray ignore rule write - `jfrog_artifactory.xray.ignore_rules.delete` Delete an Xray ignore rule destructive - `jfrog_artifactory.xray.ignore_rules.get` Get an Xray ignore rule read - `jfrog_artifactory.xray.ignore_rules.list` List Xray ignore rules read - `jfrog_artifactory.xray.indexing.builds.add` Add builds to indexing write - `jfrog_artifactory.xray.indexing.builds.get` Get indexed builds read - `jfrog_artifactory.xray.indexing.builds.update` Set indexed builds write - `jfrog_artifactory.xray.indexing.repositories.get` Get indexed repositories read - `jfrog_artifactory.xray.indexing.repositories.update` Set indexed repositories write - `jfrog_artifactory.xray.policies.create` Create an Xray policy write - `jfrog_artifactory.xray.policies.delete` Delete an Xray policy destructive - `jfrog_artifactory.xray.policies.get` Get an Xray policy read - `jfrog_artifactory.xray.policies.list` List Xray policies read - `jfrog_artifactory.xray.policies.update` Update an Xray policy write - `jfrog_artifactory.xray.reports.content` Get an Xray report's rows read - `jfrog_artifactory.xray.reports.create_licenses` Generate a licenses report write - `jfrog_artifactory.xray.reports.create_operational_risks` Generate an operational risks report write - `jfrog_artifactory.xray.reports.create_violations` Generate a violations report write - `jfrog_artifactory.xray.reports.create_vulnerabilities` Generate a vulnerabilities report write - `jfrog_artifactory.xray.reports.delete` Delete an Xray report destructive - `jfrog_artifactory.xray.reports.get` Get an Xray report's status read - `jfrog_artifactory.xray.reports.list` List Xray reports read - `jfrog_artifactory.xray.summary.artifact` Get artifact security summary read - `jfrog_artifactory.xray.summary.build` Get build security summary read - `jfrog_artifactory.xray.version.get` Get Xray version read - `jfrog_artifactory.xray.violations.search` Search Xray violations read - `jfrog_artifactory.xray.watches.apply` Apply watches to existing content write - `jfrog_artifactory.xray.watches.create` Create an Xray watch write - `jfrog_artifactory.xray.watches.delete` Delete an Xray watch destructive - `jfrog_artifactory.xray.watches.get` Get an Xray watch read - `jfrog_artifactory.xray.watches.list` List Xray watches read - `jfrog_artifactory.xray.watches.update` Update an Xray watch write **Lifecycle 18** - `jfrog_artifactory.release_bundles.create` Create a release bundle write - `jfrog_artifactory.release_bundles.distribute` Distribute a release bundle version write - `jfrog_artifactory.release_bundles.distributions.get` Get a distribution's status read - `jfrog_artifactory.release_bundles.distributions.list` List a release bundle version's distributions read - `jfrog_artifactory.release_bundles.export` Export a release bundle version write - `jfrog_artifactory.release_bundles.export_status` Get a release bundle export's status read - `jfrog_artifactory.release_bundles.names.list` List release bundle names read - `jfrog_artifactory.release_bundles.promotions.create` Promote a release bundle version write - `jfrog_artifactory.release_bundles.promotions.delete` Delete a promotion destructive - `jfrog_artifactory.release_bundles.promotions.list` List a release bundle version's promotions read - `jfrog_artifactory.release_bundles.promotions.status` Get a promotion's status read - `jfrog_artifactory.release_bundles.remote_delete` Delete a release bundle version from edge nodes destructive - `jfrog_artifactory.release_bundles.versions.delete` Delete a release bundle version destructive - `jfrog_artifactory.release_bundles.versions.exists` Check whether a release bundle version exists read - `jfrog_artifactory.release_bundles.versions.get` Get a release bundle version read - `jfrog_artifactory.release_bundles.versions.list` List a release bundle's versions read - `jfrog_artifactory.release_bundles.versions.status` Get a release bundle version's creation status read - `jfrog_artifactory.release_bundles.versions.tag` Tag a release bundle version write **Event 5** - `jfrog_artifactory.webhooks.create` Create a webhook write - `jfrog_artifactory.webhooks.delete` Delete a webhook destructive - `jfrog_artifactory.webhooks.get` Get a webhook read - `jfrog_artifactory.webhooks.list` List webhooks read - `jfrog_artifactory.webhooks.update` Update a webhook write Questions ## The JFrog Artifactory MCP server, answered. **Is there a JFrog Artifactory MCP server for Claude?** Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 270 JFrog Artifactory actions across artifactory, access, xray and lifecycle, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by JFrog Artifactory. **What do I need to connect JFrog Artifactory?** JFrog access token or identity token. Plus your host. The free call account { op: "connections.requirements", service: "jfrog_artifactory" } lists exactly what to paste. **Can an AI agent delete or change things in JFrog Artifactory?** Only if its key allows it, and only with an explicit confirmation. 39 JFrog Artifactory actions are destructive, including delete a file or folder, delete builds and delete a project. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it. **Will an AI agent use up my JFrog Artifactory API limit?** actionlake paces every call to the limits in the JFrog Artifactory service file: 600 calls a minute per connection. Repeated reads are answered from cache (95 JFrog Artifactory actions can be), which never reaches JFrog Artifactory. **What does a JFrog Artifactory action cost?** One upstream call, the only unit actionlake bills. A list that pages bills one call per page (270 JFrog Artifactory actions page). Cache hits, searches, dry runs and calls JFrog Artifactory refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000. **Which JFrog Artifactory API does it cover?** The JFrog Platform (Artifactory, Access, Xray, Release Lifecycle) API JFrog Platform REST APIs: Artifactory /artifactory/api, Access /access/api v1-v2, Xray /xray/api v1-v2, Lifecycle /lifecycle/api/v2, Event /event/api/v1 at your JFrog Artifactory instance's API base URL, which you enter when connecting. It is built from JFrog Artifactory's documentation as read on 23 October 2026. 270 actions in 5 areas, each one in the signed service file (version 1.0.0). **Does actionlake keep my JFrog Artifactory data, and where?** actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to 5 minutes, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your JFrog Artifactory credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models. **Which AI clients can use it?** Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names. ## More connectors like JFrog Artifactory Joins with, on shared entities - [Azure DevOps Services 4](https://actionlake.com/connectors/azure-devops-services) - [LaunchDarkly 4](https://actionlake.com/connectors/launchdarkly) - [Sentry 4](https://actionlake.com/connectors/sentry) - [HaloPSA 3](https://actionlake.com/connectors/halopsa) - [Fortinet FortiGate 3](https://actionlake.com/connectors/fortinet-fortigate) - [GitLab 3](https://actionlake.com/connectors/gitlab) Browse - [All Identity & security connectors](https://actionlake.com/connectors/category/identity-and-security) - [All connectors](https://actionlake.com/connectors) - [How actionlake compares](https://actionlake.com/compare) actionlake is independent. It is not made or endorsed by JFrog Artifactory; the name is the vendor's own. Counts are from the JFrog Artifactory service file, version 1.0.0. ## Give your agent JFrog Artifactory today. [Connect JFrog Artifactory free](https://actionlake.com/console?start=sandbox) [See pricing](https://actionlake.com/pricing) Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free. --- Source: https://actionlake.com/connectors/jfrog-artifactory More: https://actionlake.com/llms.txt