Install JFrog Agent Power for Kiro
Install the JFrog Agent Power for Kiro with bundled Skills and MCP.
The JFrog Agent Power for Kiro ships official JFrog Skills within the package and registers them at load time, so JFrog capabilities are available to your agent out-of-the-box. When your environment is configured, the Power also registers the JFrog Platform remote MCP server alongside those skills. Kiro calls an installable extension a Power rather than a Plugin.
Kiro has two surfaces, and JFrog supports both from the same skills: the IDE Power, for the Kiro IDE Powers panel, and the CLI, for kiro-cli, the terminal agent. Install the surface you use. A single-surface setup needs no further configuration.
- Install the JFrog Agent Power in the Kiro IDE
- Install JFrog for kiro-cli
- Uninstall JFrog for kiro-cli
What's Included
The Power bundles:
- JFrog Skills: The skills ship with the Power. Because a Kiro Power can't bundle a
skills/directory, the IDE Power delivers them as steering files that Kiro loads automatically, so the knowledge works immediately and offline with no download. Deep reference material is bundled as#jfrog-referencesand#jfrog-ai-catalog-skills-references. For more information about JFrog skills, see JFrog Skills. - JFrog Platform MCP: When the environment is configured, the Power registers the JFrog Platform remote MCP server at
https://<JFROG_PLATFORM_URL>/mcp, so JFrog Platform tools appear in Kiro alongside the skills. The connection uses OAuth. Kiro opens a browser sign-in on first use and caches the session, so there is no bearer token to generate or paste into a configuration file. For more information, see JFrog MCP.
Prerequisites
- A JFrog Platform instance you can authenticate against.
- Kiro installed for the IDE Power, or
kiro-cliinstalled for the CLI surface. - JFROG_PLATFORM_URL: Your JFrog Platform hostname. The JFrog Platform MCP server uses it automatically once connected.
- Node.js (v18 or higher) — with
npxon yourPATH. - For running the bundled skills at runtime, the following must be on your
PATH:jfJFrog CLI 2.100.0 or later,jq, andcurl.- A configured JFrog CLI server, for example through
jf loginorjf config add. Generate an access token athttps://<your-platform>/ui/admin/configuration/security/access_tokens. Once the JFrog CLI is configured, it handles authentication for alljfsubcommands automatically, and no environment variables or.envfile are required. For more information, see Download and Install the JFrog CLI.
Install the JFrog Agent Power in the Kiro IDE
Install the Power from its GitHub repository. The JFrog steering ships with the Power and loads automatically, so nothing else is required to start using it.
To install the JFrog Agent Power in the Kiro IDE:
-
Open Kiro and click the Powers icon in the sidebar.
-
Click Add Custom Power, then click Import power from GitHub.
-
Enter the repository URL
https://github.com/jfrog/jfrog-kiro-power. -
Press Enter.
-
Verify your prerequisites:
npm run verify-install # macOS and Linux pwsh scripts/verify-install.ps1 # Windows
Note
Install from GitHub rather than from a local folder. Kiro copies the Power files into
~/.kiro/powers/installed/jfrog-kiro-power/, so the agent activates it reliably. A local folder import is referenced in place and might not populateinstalled/, which prevents activation.
-
(Optional) If you plan to invoke skills using slash commands (for example,
/SKILLor/jfrog-init), install the global skill manifests first by running:curl -fsSL https://raw.githubusercontent.com/jfrog/jfrog-kiro-power/main/scripts/bootstrap-cli.sh | bash -
Then, open a new agent chat in Kiro and run the readiness check:
-
/jfrog-initThe readiness check automatically inspects and configures your environment:
- Node.js: Verifies compatible runtime installation.
- JFrog CLI: Checks jf CLI installation, active server connections, and credentials (configures new connections if needed).
- MCP Entry: Verifies the jfrog MCP server entry and resolves the host URL.
- Entitlements: Validates your project setup and JFrog AI Catalog entitlement.
/jfrog-initfixes detected issues upon your approval or outputs the exact command(s) to resolve them manually.
-
-
To confirm the installation, open a new agent chat in Kiro and ask a JFrog question, such as searching for artifacts in Artifactory or whether a package is safe to use.
-
(Optional) If a request needs a skill's runnable helper script, install the scripts from a checkout of the repository with
npm run install-scripts, which installs to~/.kiro/jfrog-scripts/. Add-- --workspaceto scope the install to the current workspace instead.
Note:
/jfrog-initdoesn't sign you in to the MCP server, so run it in addition to the sign-in step, not instead of it. Run it again whenever you switch projects, machines, or JFrog servers, or if you hit unexpected authentication or CLI errors.
For installation and configuration issues, see Troubleshoot the JFrog Agent Plugin.
Install JFrog for kiro-cli
kiro-cli, the terminal agent, is a separate runtime from the IDE. It doesn't read ~/.kiro/powers/, so it can't consume the IDE Power. Its mechanism is skills in ~/.kiro/skills/, which the default agent loads automatically, so JFrog composes into any session. The install is additive and never registers JFrog as your agent, so kiro-cli chat composes JFrog alongside whatever else you use.
To install JFrog for kiro-cli:
-
Open your terminal.
-
Install the skills:
curl -fsSL https://raw.githubusercontent.com/jfrog/jfrog-kiro-power/main/scripts/bootstrap-cli.sh | bashFrom a checkout of the repository, run
npm run install-cliinstead, ornpm run install-cli -- --workspaceto scope the install to the current workspace. -
Start a chat. No
--agentflag is needed:kiro-cli chat -
(Optional) To pin a specific version, set
JFROG_KIRO_REF=<tag|branch>. -
(Optional) For headless or CI runs, trust the shell tool with
kiro-cli chat --no-interactive --trust-tools=execute_bash "…". The runtime IDexecute_bashand the friendly aliasshellname the same tool.
Note
Installs are idempotent, so re-running produces identical files. The installer installs the latest published release by default, falling back to
mainif there are no releases yet. Ifkiro-cliis on yourPATH, the installer also registers the JFrog MCP server usingkiro-cli mcp add. Ifkiro-cliis not yet installed, the installer prints amcp skipped (kiro-cli not found on PATH)line rather than failing, so you can re-run it oncekiro-cliis installed. An existingjfrogentry is never overwritten.
JFrog work runs through the jf CLI, never curl.
Uninstall JFrog for kiro-cli
You can remove the JFrog skills and MCP entry without affecting your other Kiro files. Every JFrog skill directory uses the jfrog prefix, so your own files are left untouched.
To uninstall JFrog for kiro-cli:
-
Run
rm -rf ~/.kiro/skills/jfrog*, orrm -rf "$KIRO_HOME/skills/jfrog*"if you installed with a customKIRO_HOME. -
Remove the MCP entry separately with
kiro-cli mcp remove --name jfrog --scope global, using--scope workspaceif you installed with--workspace.
Frequently Asked Questions
This section provides answers to frequently asked questions.
FAQs
Q: How do I verify the JFrog Agent Power is active in Kiro?
A: For the IDE, confirm that the Power appears in the Powers panel and that Kiro copied it into ~/.kiro/powers/installed/jfrog-kiro-power/. Run npm run verify-install to check that the JFrog CLI version and server configuration meet the prerequisites, then open a new agent chat and ask a JFrog question. For kiro-cli, confirm that the JFrog skill directories exist under ~/.kiro/skills/, then run kiro-cli chat and ask a JFrog question (Install the JFrog Agent Power in the Kiro IDE).
Q: Do I need to install the helper scripts?
A: No, not for normal use. The bundled steering is complete on its own. Install the helper scripts only when a request uses a skill's runnable helper script, such as login or an environment check.
Q: Do I need a bearer token for the JFrog Platform MCP server?
A: No. The connection uses OAuth. Kiro opens a browser sign-in on first use and caches the session, so there is no token to generate or paste into a configuration file.
Q: Does /jfrog-init sign me in to the JFrog Platform MCP server?
/jfrog-init sign me in to the JFrog Platform MCP server?A: No. /jfrog-init checks that the jfrog MCP entry exists and resolves its host, and it handles the jf CLI login, which is a separate credential. It never authenticates to the MCP server itself. The MCP sign-in happens through a one-time browser OAuth prompt that Kiro opens on first use.
Q: How are bundled skills updated?
A: Skills are vendored at a pinned version inside the Power. Updating them is a build-time step and requires a new Power release from JFrog. There are no runtime skill updates.
Related Topics
Updated 4 days ago
