JFrog launches Claude Code plugin for AI security governance
JFrog Ltd launched the JFrog Platform plugin for Anthropic Claude Code to bring enterprise-grade software supply chain governance to AI coding agents. The plugin offers real-time security, compliance, and auditability, addressing the 136% year-over-year increase in artifacts managed by JFrog. It integrates with JFrog Platform Skills, MCP Registry, and Agent Skills Registry to provide governed access and accelerated workflows.
*this image is generated using AI for illustrative purposes only.
JFrog Ltd has unveiled the JFrog Platform plugin for Anthropic Claude Code, providing enterprise-grade software supply chain governance for AI coding agents. Available immediately, the integration aims to secure the rapidly expanding AI agent environment by offering governed access to scan, curate, and secure artifacts and dependencies. This move reinforces JFrog's position as a system of record for trusted software artifacts, binaries, and AI assets.
The collaboration addresses the need for agent-specific security, highlighted by Anthropic, which noted that as agents grow more capable, attack surfaces shift, requiring collective investment in security posture. Yoav Landman, Co-Founder and CTO of JFrog, emphasized that AI agents often operate without supply chain context, exposing organizations to malicious packages and vulnerabilities. The integration provides a universal system of record with real-time control and visibility into agent decisions.
Governing the Binaries Surge
AI coding agents are driving a significant increase in binaries, with the JFrog Platform managing over 18 billion artifacts, a 136% increase from the previous year. The plugin helps organizations govern AI agent behavior by extending Claude Code with domain-specific JFrog Platform Skills, enabling developers to execute platform operations using natural language. Combined with the JFrog MCP Registry and JFrog Agent Skills Registry, the plugin delivers several key benefits:
| Feature | Description |
|---|---|
| Real-time, Upstream Governance | Governance, package security, and license compliance occur within the development workflow, with agents enforcing policies as code is written. |
| MCP and Agent Skills Governance | Ensures agents and developers only pull verified, secure, and governed MCP servers and agent skills, blocking rogue access. |
| Accelerated DevOps Workflows | Agents handle repetitive tasks like repository management and project provisioning, allowing developers to focus on building. |
| Strengthened Auditability | Provides end-to-end traceability from source commits to build artifacts for faster incident response and compliance proof. |
Agent Universality and Connectivity
The plugin reflects JFrog's strategy to support multiple AI agents while maintaining governance. The JFrog Platform provides three layers of agent connectivity across any AI coding environment: JFrog Platform Skills for deep domain knowledge, JFrog MCP Tools for standardized access to security data, and additional agent-native plugins starting with Claude Code, alongside Cursor and VS Code Copilot. These layers establish the JFrog Platform as a foundational system of record across multi-agent environments.
The JFrog Platform plugin for Claude Code is available immediately at https://claude.com/plugins/jfrog .
Will this integration set a new industry standard for securing AI coding agents, prompting competitors to develop similar governance plugins?
How will the surge in binaries driven by AI agents impact JFrog's infrastructure costs and scalability requirements in the long term?
Could the real-time governance capabilities of this plugin slow down development velocity as AI agents enforce stricter policies?
19
Create Custom Screeners 
Access 200+ Pre-built Filters 
Use 50+ Readymade Screener 
