Install JFrog Plugin for OpenCode

The JFrog plugin for OpenCode, ships official JFrog Skills within the package and registers them at load time, so JFrog capabilities are available to your agent out-of-the-box. When your environment is configured, the plugin also registers the JFrog Platform remote MCP server alongside those skills.

What's Included

The plugin bundles:

JFrog Skills: The skills ship with the plugin. For more information about JFrog skills, see JFrog Skills.
JFrog Platform MCP: When the environment is configured, the plugin registers the JFrog Platform remote MCP server (https://<JFROG_URL>/mcp) in config.mcp.jfrog, so JFrog Platform tools appear in OpenCode alongside the skills. For more information, see JFrog MCP.

Prerequisites

A JFrog Platform instance you can authenticate against.
OpenCode installed. Compatibility verified against OpenCode 1.17.7 and newer (the first version confirmed to honor config.skills.paths in object form). Older versions are not supported.
For running the bundled skills at runtime, the following must be on your PATH:
- jf (JFrog CLI), jq, and curl.
- A configured JFrog CLI server (for example, via jf login or jf config add). For more information, see Download and Install the JFrog CLI.

Install the JFrog Plugin for OpenCode

The plugin is published to public npm as @jfrog/opencode-jfrog-plugin and is listed on the OpenCode ecosystem page. OpenCode has no plugin marketplace. You install by referencing the npm package in your OpenCode config.

To install the JFrog plugin for OpenCode:

Open your OpenCode config file (opencode.json).
Add the plugin reference:

{
  "plugin": ["@jfrog/opencode-jfrog-plugin"]
}

Restart OpenCode or start a new session. OpenCode resolves the package from npm and loads the plugin.

To pin a specific release, add a version suffix to the plugin reference in opencode.json:

{
  "plugin": ["@jfrog/opencode-jfrog-plugin@<version>"]
}

Omitting the version tracks the latest npm release.

For an organization-wide rollout, set the plugin in OpenCode remote configuration so every developer receives it automatically.

For installation and configuration issues, see Troubleshoot Plugins.

Frequently Asked Questions

This section provides answers to frequently asked questions.

plusFAQs

Q: How do I verify the JFrog plugin is active in OpenCode?

A: After you add the plugin to opencode.json, start OpenCode and check that the jfrog and jfrog-package-safety-and-download skills appear via /skills or when you ask the agent to list skills. If you configured JFROG_URL and JFROG_ACCESS_TOKEN, run opencode mcp list and confirm the JFrog MCP server is listed.

Q: How are bundled skills updated?