JFrog Ltd has unveiled the JFrog Platform plugin for Anthropic Claude Code, providing enterprise-grade software supply chain governance for AI coding agents. Available immediately, the integration aims to secure the rapidly expanding AI agent environment by offering governed access to scan, curate, and secure artifacts and dependencies. This move reinforces JFrog's position as a system of record for trusted software artifacts, binaries, and AI assets.
The collaboration addresses the need for agent-specific security, highlighted by Anthropic, which noted that as agents grow more capable, attack surfaces shift, requiring collective investment in security posture. Yoav Landman, Co-Founder and CTO of JFrog, emphasized that AI agents often operate without supply chain context, exposing organizations to malicious packages and vulnerabilities. The integration provides a universal system of record with real-time control and visibility into agent decisions.
Governing the Binaries Surge
AI coding agents are driving a significant increase in binaries, with the JFrog Platform managing over 18 billion artifacts, a 136% increase from the previous year. The plugin helps organizations govern AI agent behavior by extending Claude Code with domain-specific JFrog Platform Skills, enabling developers to execute platform operations using natural language. Combined with the JFrog MCP Registry and JFrog Agent Skills Registry, the plugin delivers several key benefits:
| Feature |
Description |
| Real-time, Upstream Governance |
Governance, package security, and license compliance occur within the development workflow, with agents enforcing policies as code is written. |
| MCP and Agent Skills Governance |
Ensures agents and developers only pull verified, secure, and governed MCP servers and agent skills, blocking rogue access. |
| Accelerated DevOps Workflows |
Agents handle repetitive tasks like repository management and project provisioning, allowing developers to focus on building. |
| Strengthened Auditability |
Provides end-to-end traceability from source commits to build artifacts for faster incident response and compliance proof. |
Agent Universality and Connectivity
The plugin reflects JFrog's strategy to support multiple AI agents while maintaining governance. The JFrog Platform provides three layers of agent connectivity across any AI coding environment: JFrog Platform Skills for deep domain knowledge, JFrog MCP Tools for standardized access to security data, and additional agent-native plugins starting with Claude Code, alongside Cursor and VS Code Copilot. These layers establish the JFrog Platform as a foundational system of record across multi-agent environments.
The JFrog Platform plugin for Claude Code is available immediately at https://claude.com/plugins/jfrog .