JFrog CLI for Agent Plugins

This page is the CLI reference for jf agent plugins in JFrog CLI v2.106.0 or later. It covers publish, install, update, list, search, and delete commands, including flags and environment variables. Improved list and update behavior (and related publish version handling) requires JFrog CLI v2.116.0 or later.

For repository setup, marketplace files, and agent connection walkthroughs, see Agent Plugins Repositories.

All examples use the full command path (for example, jf agent plugins publish). Agent Plugins commands require JFrog CLI v2.106.0 or later (introduced with the jf agent namespace). Standard JFrog CLI server override flags (--url, --user, --password, --access-token, --server-id) apply to every command. When omitted, credentials and server URL come from your active jf config profile.

Commands and reference

When to Use

Use jf agent plugins when you publish, install, update, list, search, or delete AI agent plugin packages stored in JFrog Artifactory repositories with package type agentplugins. Plugins are distributed as zip bundles described by plugin.json.

Prerequisites

Before using jf agent plugins, you need:

• A local JFrog Artifactory repository configured for the agentplugins package type.
• JFrog CLI v2.106.0 or later configured to point to your JFrog Artifactory server. For list and update, use v2.116.0 or later. For installation steps, see Download and Install the JFrog CLI.
• For harness-based installs when you omit --version, a <HARNESS>-marketplace.json file in the repository root (for example, cursor-marketplace.json).

The following tasks cover each command in the jf agent plugins namespace:

• Publish a Plugin
• Install a Plugin
• Update a Plugin
• Delete a Plugin
• List Plugins
• Search Plugins

Interactive and CI Non-Interactive Modes

Agent Plugins commands follow the same interactive rules as JFrog CLI for Skills: prompts appear in a normal terminal; CI, piped stdin, or --quiet skip prompts and require explicit flags. Per-command Expected Output and Examples are under Publish, Install, and Update.

Search, list, and delete have no interactive confirmation prompts. update --all asks for confirmation in an interactive terminal (skipped for --quiet, --dry-run, or CI). For commands that use repository auto-discovery, if --repo is omitted and more than one agentplugins repository exists, the repository picker applies. See Plugins Repository Resolution.

What to Set Explicitly for CI or Quiet Mode

Commands at a Glance

The following table summarizes each documented command in the jf agent plugins namespace.

Publish a Plugin

Packages the local plugin folder into a zip and uploads it to JFrog Artifactory. The version is resolved from --version, then plugin.json, then a default of 1.0.0 when neither provides a version. Version collision prompts match Publish a Skill (Enter version to publish:, collision menu). Plugins do not run the Skills Xray post-publish gate.

To publish a plugin folder:

jf agent plugins publish PATH_TO_PLUGIN_FOLDER --repo REPOSITORY_NAME

Where:

• PATH_TO_PLUGIN_FOLDER: Path to the plugin folder containing plugin.json (CLI argument name: path)
• REPOSITORY_NAME: Agent plugins local repository key in JFrog Artifactory

Flags

The following table lists flags for jf agent plugins publish.

Expected Output

When the requested version already exists:

10:14:02 [Warn] Version 1.0.0 of plugin 'my-plugin' already exists in repository 'agents-local'.
Choose an action:
  [o] Overwrite the existing version
  [n] Enter a new version
  [a] Abort
Your choice (o/n/a): o
10:14:03 [Info] Overwriting version 1.0.0...

For missing-version prompts, see Publish a Skill.

CI Behavior

Version collision errors: version 1.0.0 of plugin 'my-plugin' already exists. Use a different version or remove the existing one. See What to Set Explicitly for CI or Quiet Mode on this page and JFrog CLI for Skills.

Examples

jf agent plugins publish ~/plugins/my-plugin --repo agents-local

Publish with evidence signing:

jf agent plugins publish ~/plugins/my-plugin --repo agents-local \
  --signing-key ./private.key \
  --key-alias my-evd-key

Install a Plugin

Downloads a plugin zip from JFrog Artifactory and installs it for one or more harnesses, or to a custom local directory.

To install a plugin:

jf agent plugins install PLUGIN_NAME \
  (--harness HARNESS_NAME[,HARNESS_NAME...] [--global] | --path DIR) \
  [--repo REPOSITORY_NAME] \
  [--version PLUGIN_VERSION]

This matches the usage string registered in the CLI: jf agent plugins install SLUG (--harness … | --path DIR) [--repo REPO] [--version VER].

Where:

• PLUGIN_NAME: Plugin slug in the repository (CLI argument name: slug)
• HARNESS_NAME: Built-in or custom harness name (comma-separated for multiple harnesses on install)
• REPOSITORY_NAME: Agent plugins repository key (optional when auto-discovered)
• PLUGIN_VERSION: SemVer, latest, or omitted. If you pass --version, the CLI installs that version directly from the repository, even when the plugin is not listed in the harness marketplace.json. Installation can fail if that version is not compatible with the harness.

One of --harness or --path is required.

Version Resolution

If marketplace lookup fails, re-run with --version VER (for example, --version 1.0.0 or --version latest) to install directly from JFrog Artifactory.

Plugin slugs must match ^[a-z0-9][a-z0-9-]*$ (lowercase letters, digits, and hyphens; must start with a letter or digit).

Install Modes

Built-in harnesses (claude, cursor, codex) support global scope only. When you omit both --global and --project-dir, the CLI defaults to global scope. Project-scoped harness installs (--project-dir without --global) are rejected for built-in harnesses.

Flags

The following table lists flags for jf agent plugins install.

During installation, the CLI verifies evidence when signing keys are configured in JFrog Artifactory.

Expected Output

When evidence verification fails:

10:14:10 [Warn] Evidence verification failed: <reason from server>
The plugin is unattested. Continue with installation? (y/n) [n]? y

When plugin files install successfully but the native agent CLI is missing from PATH (Claude or Codex harness only), the install summary reports a warning status with instructions to complete registration manually.

For path installs with a missing --version, the version picker matches Install a Skill (Select a version:).

CI Behavior

Evidence verification failure fails unless JFROG_AGENT_PLUGINS_DISABLE_QUIET_FAILURE=true. See What to Set Explicitly for CI or Quiet Mode.

Examples

Install for Cursor using marketplace version:

jf agent plugins install my-plugin --harness cursor --repo agents-local

Install a specific version for multiple harnesses:

jf agent plugins install my-plugin --harness cursor,claude --repo agents-local --version 1.0.0

Install globally for Codex:

jf agent plugins install my-plugin --harness codex --repo agents-local --version latest

Install to a custom path:

jf agent plugins install my-plugin --path ./vendor/plugins --repo agents-local

Install Metadata

On successful install, the CLI writes .jfrog/plugin-info.json under each installed plugin directory. This manifest records the source repository, installed version, harness, scope, and project directory. jf agent plugins list --harness and jf agent plugins update use this file for registry comparisons and update targeting.

Supported Built-in Harnesses

The following harnesses are supported out of the box for plugins. Paths are resolved from ~/.jfrog/agents/agent-config.json under the plugins-agents key. Built-in harnesses support global scope only.

<REPO_KEY> is the agent plugins repository key from --repo or auto-discovery.

To add or override a harness:

{
  "plugins-agents": {
    "my-agent": {
      "projectDir": ".my-agent/plugins",
      "globalDir": "~/.my-agent/plugins"
    }
  }
}

Custom harness entries may define both projectDir and globalDir. Project-scoped install is only available for harnesses with a non-empty projectDir.

You can also set plugin-manifest-paths in the same file to customize the ordered list of relative plugin.json paths checked during publish.

Update a Plugin

Updates an installed plugin to a newer (or specific) version. The CLI compares the currently installed version against the target version and skips targets that are already up to date. If the update fails, the previous install is restored from a backup under <install-base>/.plugin-backup/.

Requires JFrog CLI v2.116.0 or later.

To update a single installed plugin:

jf agent plugins update --slug PLUGIN_NAME \
  (--harness HARNESS_NAME[,HARNESS_NAME...] [--global] [--project-dir DIR] | --path DIR) \
  [--repo REPOSITORY_NAME] \
  [--version PLUGIN_VERSION] \
  [--dry-run] [--force] [--format table|json]

To update every JFrog CLI-installed plugin for one or more harnesses:

jf agent plugins update --all --harness HARNESS_NAME[,HARNESS_NAME...] \
  [--global] [--project-dir DIR] \
  [--repo REPOSITORY_NAME] \
  [--dry-run] [--force] [--format table|json]

Where:

• PLUGIN_NAME: Plugin slug to update (required as --slug, not as a positional argument)
• HARNESS_NAME, DIR, REPOSITORY_NAME: Same meaning as jf agent plugins install
• PLUGIN_VERSION: Target SemVer or latest (default for single-plugin update)

--slug and --all are mutually exclusive. --all cannot be combined with --version or --path.

Flags

The following table lists flags for jf agent plugins update.

Examples

Update my-plugin to the latest version for Cursor:

jf agent plugins update --slug my-plugin --harness cursor --repo agents-local

Update to a specific version with dry-run preview:

jf agent plugins update --slug my-plugin --harness cursor --repo agents-local --version 2.0.0 --dry-run

Update every jf-installed plugin for Claude and Codex:

jf agent plugins update --all --harness claude,codex

Force reinstall even if already at the target version:

jf agent plugins update --slug my-plugin --harness cursor --repo agents-local --force

Get a machine-readable update summary:

jf agent plugins update --slug my-plugin --harness cursor --repo agents-local --format json

Example JSON response:

{
  "slug": "my-plugin",
  "version": "2.0.0",
  "results": [
    {
      "agent": "cursor",
      "scope": "global",
      "path": "/Users/you/.cursor/plugins/local/my-plugin",
      "status": "ok",
      "detail": "Executed successfully with no issues."
    }
  ]
}

Delete a Plugin

Removes a specific version of a plugin from an agent plugins repository. The CLI does not show an interactive confirmation prompt or other terminal prompts. Repository auto-discovery behaves like other commands; see Plugins Repository Resolution.

To delete a plugin version from an agent plugins repository:

jf agent plugins delete PLUGIN_NAME --version PLUGIN_VERSION [--repo REPOSITORY_NAME]

Where:

• PLUGIN_NAME: Plugin slug to delete (CLI argument name: slug)
• PLUGIN_VERSION: Version to remove (required)
• REPOSITORY_NAME: Agent plugins repository key (optional when auto-discovered)

Flags

Examples

jf agent plugins delete my-plugin --version 1.0.0 --repo agents-local

Preview deletion:

jf agent plugins delete my-plugin --version 1.0.0 --repo agents-local --dry-run

List Plugins

Lists plugins in the following modes:

• Registry (--repo): Plugins in an Agent Plugins repository (latest version per plugin)
• Local / global (--harness): Plugins installed for one or more harnesses

Exactly one of --repo or --harness is required. --repo and --harness are mutually exclusive. --global and --project-dir are mutually exclusive.

When you pass --harness without --global or --project-dir, list defaults to global scope (same default as install and update for built-in harnesses). Built-in harnesses (claude, cursor, codex) reject project-scoped list; use --global or omit scope flags.

Requires JFrog CLI v2.116.0 or later.

To list plugins in a repository or installed for a harness:

# List plugins in a repository
jf agent plugins list --repo REPOSITORY_NAME [--limit N] [--sort-by updated|downloads] [--format table|json]

# List plugins installed for one or more harnesses (global by default)
jf agent plugins list --harness HARNESS_NAME[,HARNESS_NAME...] [--global] [--check-updates]

# List plugins installed for a custom harness that supports project scope
jf agent plugins list --harness CUSTOM_HARNESS --project-dir DIR

Where:

• REPOSITORY_NAME: Agent plugins repository to list (mutually exclusive with --harness)
• HARNESS_NAME: Harness for installed-plugin listing (comma-separated for multiple harnesses)
• N: Maximum number of results

Flags

The following table lists flags for jf agent plugins list.

Status Values for Check Updates

When you use --check-updates with --harness, the STATUS column uses the following values.

Examples

List all plugins in a repository:

jf agent plugins list --repo agents-local

List plugins installed for Cursor and check for updates:

jf agent plugins list --harness cursor --check-updates

List plugins for Claude and Codex as JSON (object keyed by harness name):

jf agent plugins list --harness claude,codex --format json

Example JSON response (single harness):

[
  {
    "name": "my-plugin",
    "version": "1.0.0",
    "description": "Example plugin.",
    "repo": "agents-local",
    "path": "$HOME/.cursor/plugins/local/my-plugin"
  }
]

Example JSON response (repository mode):

[
  {
    "name": "my-plugin",
    "version": "1.2.0",
    "source": "Repo: agents-local"
  }
]

Search Plugins

Searches for plugins by name using the Artifactory property search API. The CLI matches against the agentplugins.name property. Queries without * are wrapped as *QUERY* so substring matches work; if your query already contains *, it is passed through unchanged. This command has no interactive prompts; see Interactive and CI Non-Interactive Modes.

Repo resolution for search is different from publish/install/delete: search uses only --repo or JFROG_AGENT_PLUGINS_REPO. It does not auto-discover agentplugins repositories or show the repository picker. If both are omitted, the property search runs without a repository filter.

To search for plugins by name:

jf agent plugins search QUERY [--repo REPOSITORY_NAME] [--format json]

Where:

• QUERY: Plugin name or search term (required positional argument; substring match by default)
• REPOSITORY_NAME: Optional repository to search (or set JFROG_AGENT_PLUGINS_REPO)

Flags

Examples

Search without a repository filter:

jf agent plugins search web-scraper

Search a specific repository with JSON output:

jf agent plugins search web-scraper --repo agents-local --format json

Example JSON response:

[
  {
    "name": "web-scraper",
    "version": "1.2.0",
    "repository": "agents-local",
    "description": "Scrapes web pages for agent workflows."
  }
]

Plugins Repository Resolution

For publish, install, update (single-plugin), and delete, when --repo is omitted the CLI resolves the repository using the following priority order:

1. --repo flag value
2. JFROG_AGENT_PLUGINS_REPO environment variable
3. Auto-discovery: queries JFrog Artifactory for all local repositories with package type agentplugins
   • If exactly one is found, it is used automatically.
   • If multiple are found in interactive mode, you are prompted to select one.
   • If multiple are found in CI or quiet mode, the command fails with the list of options.

Exceptions:

• list --repo: requires an explicit --repo value (no env var fallback and no auto-discovery).
• list --harness: local listing; --repo is not used. --check-updates reads each plugin's recorded repository from install metadata or the native registry.
• update --all: --repo is an optional filter against each plugin's recorded repository; it does not resolve a shared target repository.
• search: uses only --repo or JFROG_AGENT_PLUGINS_REPO; no auto-discovery or repository picker.

Expected Output

When more than one agentplugins repository exists and --repo is omitted for a command that uses auto-discovery:

Select an agent plugins repository: agents-local

CI Behavior

Fails with: multiple agent plugins repositories found (repo-a, repo-b); specify --repo or set JFROG_AGENT_PLUGINS_REPO.

Plugins Environment Variables

Related Topics

• Agent Plugins Repositories
• JFrog CLI
• JFrog CLI Command Reference
• JFrog CLI for Skills
• Skills Repositories