Enforce your policies. Every agent. Every pull.

Detect and secure AI assets across your agentic software supply chain, so your agents consume only approved ones.

What is JFrog AI Security?

JFrog AI Security controls how coding agents and developers use AI assets. It detects agent skills, plugins, MCP servers, and models, scans them for risk, and blocks anything you have not approved.

JFrog AI Security is the new name for JFrog AI Catalog.

Discover Pre-Approved AI Assets

One registry for every AI asset, stored as native artifacts in Artifactory alongside your other binaries. Coding agents and developers discover and self-serve pre-approved assets from one source of truth: immutable, versioned, and traceable back to the release they shipped in.

Detect Shadow AI on Developer Machines

Expose what your coding agents actually run on developer machines: skills, MCP servers, and plugins. Spot the risky ones, see how many workstations run each, and tell which are managed in JFrog and which aren’t.

Scan and Detect Shadow AI in Your Software Supply Chain

Scan your software supply chain to expose the models and calls to external AI services in use, including the ones pulled without approval. See what's managed, unmanaged, or malicious at a glance, and govern or block it on the spot.

Block Risky AI Assets Before They’re Pulled

Stop unvetted or non-compliant AI assets at the gate before they ever reach your software supply chain. The same Curation control enforces your policies on models, MCPs, plugins, and skills.

Scan AI Assets for Risk

Continuously evaluate what each agent skill, plugin and APM instructs an agent to do. Combine deterministic and semantic scanning to catch suspicious or malicious intent hidden in plain text, using JFrog's model or your own LLM key.

Enforce Approved AI Assets with Agent Guard

Your coding agents reach only the assets you've approved, so autonomous development stays fast and on-policy. Agent Guard routes every coding agent (Cursor, Claude Code, Codex, etc.) through an authenticated bridge that validates each request against your rules.

Agentic Velocity

Doesn’t Mean Losing Control

JFrog AI Security blocks unapproved AI assets at the agent harness, so teams can ship quickly and stay in control.

Frequently asked questions about JFrog AI Security

• What is a universal AI Registry and why do enterprises need one?

A universal AI Registry is a single source of truth for every AI asset an organization uses (models, MCP servers, agent skills, plugins, and APM) so teams can discover, evaluate, and govern them all in one place. Enterprises need one because developers and coding agents now pull these assets directly from public sources onto laptops and into builds, without approval or review. That creates Shadow AI that security teams can’t see or control. An AI Registry closes the gap by treating AI assets like any other software artifact: versioned, scanned, access-controlled, and auditable, thus improving enterprise AI governance.

• How does JFrog AI Security detect Shadow AI?

JFrog AI Security detects Shadow AI in your software supply chain, exposing AI models and calls to external AI services, including the ones pulled without approval. On developer machines, it exposes the skills, MCP servers, plugins, hooks, commands, and monitors your coding agents run, including how many workstations run each.

• How does JFrog block risky AI assets before they reach your supply chain?

JFrog blocks risky AI assets at the point of request using JFrog Curation to check it against your policies and stop any asset that’s vulnerable, malicious, or unapproved.

• How does JFrog AI Security prevent coding agents from using unapproved AI assets?

JFrog AI Security uses Agent Guard that authenticates every tool call or skill usage and enforces granular, role-based access control. Agents can only reach pre-vetted, approved AI assets.

• Which coding agents and IDEs are supported?

JFrog AI Security integrates with leading AI coding agents and IDEs via the official JFrog agent plugins, including Cursor, Claude Code, GitHub Copilot, OpenAI Codex, Kiro, IntelliJ, Devin, VS Code, and OpenCode.

• What types of AI assets can JFrog AI Security detect, scan, and control?

JFrog AI Security detects agent skills, plugins, and MCP servers on developer machines, and models and calls to external AI services in your software supply chain, scanning them for local risk.