JFrog CLI Command Reference

JFrog CLI Documentation by Product Area

These sections provide deeper guidance on using JFrog CLI with specific JFrog products and platform capabilities.

Binary Management (Artifactory)

Use JFrog CLI to upload, download, promote, and manage binaries and packages with Artifactory.

Agent Skills (Artifactory)

Use the jf agent skills namespace to publish, install, search, and manage skills in Artifactory Skills repositories.

Security (Xray)

Scan dependencies, binaries, and containers for vulnerabilities and license compliance issues.

Governance and Lifecycle

Automate promotion, distribution, and lifecycle policies using JFrog CLI.

Integrations

Integrate JFrog CLI with CI/CD tools, package managers, and cloud platforms.

Platform Administration

Manage users, permissions, system settings, and platform operations.

--format flag (JFrog CLI 2.105.0+)

Many commands accept --format json or --format table for machine-readable or tabular output. Most commands support both values. Some are json-only. Per-command details are in the relevant tabs below.

When the flag is omitted, output stays backward-compatible (or silent on json-only commands). Json-only commands emit a status payload instead of structured data:

{"status_code": N, "message": "..."}

The flag requires a value. Passing --format without a value prints:

Incorrect Usage: flag needs an argument: -format

Passing an unsupported value (for example --format yaml) prints:

[Error] only the following output formats are supported: json, table

On json-only commands, the supported-formats message lists json only.

Quick Start

# Install JFrog CLI
curl -fL https://install-cli.jfrog.io | sh

# Initial login (interactive, opens browser)
jf login

# Or configure manually
jf config add my-server --url=https://mycompany.jfrog.io --user=admin --password=password

# Verify connection
jf rt ping

Command Summary

Category	Prefix	Commands
Configuration	`jf c`	7
General	`jf`	8
Artifactory	`jf rt`	Many
Build Tools	`jf mvn`, `jf npm`, and others	28
Security/Xray	`jf audit`, `jf scan`	4
Distribution	`jf ds`, `jf rbc`	10
Evidence	`jf evd`	2
Plugins	`jf plugin`	3
Agent Skills	`jf agent skills`	6

Configuration Commands

Command	Alias	Description
`jf config add`	`jf c add`	Add a new server configuration
`jf config edit`	`jf c edit`	Edit an existing server configuration
`jf config show`	`jf c s`	Show server configurations
`jf config remove`	`jf c rm`	Remove server configuration(s)
`jf config use`	`jf c use`	Set the default server to use
`jf config export`	`jf c ex`	Export server configuration as token
`jf config import`	`jf c im`	Import server configuration from token

jf config add

Description: Add a new server configuration

Use Case: Set up authentication and server URLs for JFrog Platform access

Syntax:

jf config add [server-id] [options]
jf c add [server-id] [options]

Examples:

# Add server interactively
jf config add my-server

# Add server with URL and credentials
jf config add my-server --url=https://acme.jfrog.io --user=admin --password=password

# Add server with access token
jf config add my-server --url=https://acme.jfrog.io --access-token=<token>

# Add server using OIDC
jf config add my-server --url=https://acme.jfrog.io --oidc-provider-name=github

Flags:

Flag	Description
`--url`	JFrog Platform URL
`--user`	Username for authentication
`--password`	Password for authentication
`--access-token`	Access token for authentication
`--interactive`	Interactive configuration mode (default: true)
`--overwrite`	Overwrite existing configuration
`--ssh-key-path`	SSH key file path
`--client-cert-path`	Client certificate file in PEM format
`--insecure-tls`	Skip TLS certificate verification
`--basic-auth-only`	Disable automatic access token refresh

jf config show

Alias: jf c s, jf c show

Description: Show server configurations

Syntax:

jf config show [server-id] [options]
jf c show [server-id] [options]

Examples:

# Show all servers (default table output)
jf config show

# Show one server as JSON for scripting
jf config show my-server --format=json

Flags:

Flag	Description
`--format`	Output format. Accepts `json` or `table`. Defaults to `table`. Sensitive fields (password, accessToken) are masked.

General Commands

Command	Alias	Description
`jf login`	-	Log in to JFrog Platform via web browser
`jf access-token-create`	`jf atc`	Create an access token
`jf api`	-	Invoke JFrog REST APIs
`jf exchange-oidc-token`	`jf eot`	Exchange OIDC token for JFrog access token
`jf generate-summary-markdown`	`jf gsm`	Build Markdown from recorded command summaries
`jf stats`	`jf st`	Product statistics for a configured server (for example, Artifactory)
`jf options`	-	Show all supported environment variables

jf login

Description: Log in to JFrog Platform via web browser

Use Case: Quick authentication using SSO/browser-based login (Artifactory 7.64.0+)

Syntax:

jf login

jf access-token-create

Alias: jf atc

Description: Create an access token

Syntax:

jf access-token-create [username] [options]
jf atc [username] [options]

Examples:

# Create token for current user
jf atc

# Create token for specific user
jf atc my-user

# Create refreshable token with 1 hour expiry
jf atc --expiry=3600 --refreshable

# Create admin token
jf atc --grant-admin

Flags:

Flag	Description
`--expiry`	Token expiry time in seconds
`--refreshable`	Create a refreshable token
`--groups`	Groups to associate with the token
`--grant-admin`	Grant admin privileges
`--scope`	Token scope
`--description`	Token description
`--project`	Project key
`--format`	Output format (`json` or `table`). Defaults to `json`. In table output the `access_token` is truncated to 40 characters.

jf exchange-oidc-token

Alias: jf eot

Description: Exchange an OIDC token ID for a JFrog access token

Syntax:

jf exchange-oidc-token <oidc-provider-name> [oidc-token-id] [options]

Flags:

Flag	Description
`--url`	JFrog Platform URL
`--oidc-provider-type`	OIDC provider type (`GitHub`, `Azure`, `GenericOidc`)
`--oidc-audience`	Audience for the OIDC token
`--application-key`	JFrog Application Key for application-scoped OIDC
`--project`	JFrog Artifactory project key
`--repository`	Repository name to filter the OIDC resource scope
`--format`	Output format (`json` or `table`). Defaults to `json` for backward compatibility.

File Operations

Command	Alias	Description
`jf rt upload`	`jf rt u`	Upload files to Artifactory
`jf rt download`	`jf rt dl`	Download files from Artifactory
`jf rt search`	`jf rt s`	Search for files in Artifactory
`jf rt copy`	`jf rt cp`	Copy files within Artifactory
`jf rt move`	`jf rt mv`	Move files within Artifactory
`jf rt delete`	`jf rt del`	Delete files from Artifactory
`jf rt set-props`	`jf rt sp`	Set properties on artifacts
`jf rt delete-props`	`jf rt delp`	Delete properties from artifacts

--format support (set-props, delete-props):

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing brief summary is preserved (backward-compatible).

jf rt upload

Alias: jf rt u

Description: Upload files to Artifactory

Use Case: Deploy artifacts, binaries, or any files to Artifactory repositories

Syntax:

jf rt upload <source-path> <target-path> [options]
jf rt u <source-path> <target-path> [options]

Examples:

# Upload single file
jf rt upload my-file.jar libs-release-local/com/example/

# Upload with wildcards
jf rt upload "*.jar" libs-release-local/jars/

# Upload recursively
jf rt upload "target/*.jar" libs-release-local/ --recursive

# Upload with properties
jf rt upload my-file.jar libs-release-local/ --target-props="version=1.0;build=100"

# Upload with build info
jf rt upload "*.jar" libs-release-local/ --build-name=my-build --build-number=1

# Dry run (preview only)
jf rt upload "*.jar" libs-release-local/ --dry-run

Flags:

Flag	Description
`--recursive`	Upload files from subdirectories (default: true)
`--flat`	Upload without preserving directory structure
`--regexp`	Use regular expression for source path
`--target-props`	Properties to attach to uploaded artifacts
`--build-name`	Build name for build info
`--build-number`	Build number for build info
`--module`	Module name for build info
`--explode`	Extract archive after upload
`--dry-run`	Preview without actual upload
`--threads`	Number of upload threads (default: 3)
`--retries`	Number of retries (default: 3)
`--exclusions`	Patterns to exclude
`--fail-no-op`	Exit code 2 if no files affected
`--format`	Output format (`json` or `table`). When set, forces detailed-summary mode and emits a per-file report. When omitted, the existing summary output is preserved.

jf rt download

Alias: jf rt dl

Description: Download files from Artifactory

Syntax:

jf rt download <source-path> [target-path] [options]
jf rt dl <source-path> [target-path] [options]

Examples:

# Download single file
jf rt download libs-release-local/my-file.jar ./

# Download with wildcards
jf rt download "libs-release-local/*.jar" ./jars/

# Download build artifacts
jf rt download --build=my-build/42 ./artifacts/

# Download with properties filter
jf rt download "libs-release-local/*" ./ --props="version=1.0"

# Download and extract
jf rt download "libs-release-local/archive.zip" ./ --explode

Flags:

Flag	Description
`--recursive`	Download from subdirectories (default: true)
`--flat`	Download without preserving directory structure
`--build`	Download artifacts from specific build
`--bundle`	Download artifacts from release bundle
`--props`	Filter by properties
`--exclude-props`	Exclude by properties
`--explode`	Extract archive after download
`--threads`	Number of download threads
`--skip-checksum`	Skip checksum verification
`--format`	Output format (`json` or `table`). When set, forces detailed-summary mode and emits a per-file report. When omitted, the existing summary output is preserved.

jf rt search

Alias: jf rt s

Syntax:

jf rt search <pattern> [options]

Examples:

jf rt search "libs-release-local/*.jar"
jf rt search "libs-release-local/*" --props="version=1.0"
jf rt search --build=my-build/42
jf rt search "libs-release-local/*" --count

Flags:

Flag	Description
`--format`	Output format (`json` or `table`). Defaults to `json` for backward compatibility.

jf rt copy, move, and delete

# Copy
jf rt copy libs-snapshot-local/app/ libs-release-local/app/
jf rt cp "libs-snapshot-local/*.jar" libs-release-local/ --flat

# Move
jf rt move libs-snapshot-local/old/ libs-release-local/new/
jf rt mv "libs-snapshot-local/*.jar" libs-release-local/

# Delete
jf rt delete "libs-snapshot-local/old-files/*"
jf rt del "libs-snapshot-local/temp/*" --quiet
jf rt delete --build=my-build/42 --dry-run

Flags (copy, move, delete):

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing brief summary is preserved (backward-compatible).

Build Info

Command	Alias	Description
`jf rt build-publish`	`jf rt bp`	Publish build info to Artifactory
`jf rt build-collect-env`	`jf rt bce`	Collect environment variables
`jf rt build-add-git`	`jf rt bag`	Add Git information to build
`jf rt build-add-dependencies`	`jf rt bad`	Add dependencies to build info
`jf rt build-append`	`jf rt ba`	Append a build to another build
`jf rt build-promote`	`jf rt bpr`	Promote a build
`jf rt build-discard`	`jf rt bdi`	Discard old builds

jf rt build-publish

Alias: jf rt bp

Syntax:

jf rt build-publish <build-name> <build-number> [options]
jf rt bp <build-name> <build-number> [options]

Examples:

jf rt bp my-build 42
jf rt bp my-build 42 --project=my-project
jf rt bp my-build 42 --build-url="https://ci.example.com/build/42"

Flags:

Flag	Description
`--project`	Project key
`--dry-run`	Preview without publishing
`--build-url`	CI server build URL
`--env-include`	Environment variables to include
`--env-exclude`	Environment variables to exclude
`--format`	Output format (`json` or `table`). When omitted, the existing log output is preserved (backward-compatible).

jf rt build-promote

Alias: jf rt bpr

Syntax:

jf rt build-promote <build-name> <build-number> <target-repo> [options]

Examples:

jf rt bpr my-build 42 libs-release-local
jf rt bpr my-build 42 libs-release-local --status="Released"
jf rt bpr my-build 42 libs-release-local --copy
jf rt bpr my-build 42 libs-release-local --include-dependencies

Flags:

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

jf rt build-discard

Alias: jf rt bdi

Syntax:

jf rt build-discard <build-name> [options]

Examples:

jf rt bdi my-build --max-builds=10
jf rt bdi my-build --max-days=30
jf rt bdi my-build --max-builds=5 --delete-artifacts

Flags:

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

jf rt build-add-dependencies

Alias: jf rt bad

Flags:

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing brief summary is preserved (backward-compatible).

Repository Management

Command	Alias	Description
`jf rt repo-create`	`jf rt rc`	Create a repository
`jf rt repo-update`	`jf rt ru`	Update a repository
`jf rt repo-delete`	`jf rt rdel`	Delete a repository
`jf rt repo-template`	`jf rt rpt`	Create repository template
`jf rt replication-create`	`jf rt rplc`	Create replication job
`jf rt replication-delete`	`jf rt rpldel`	Delete replication job

--format support (repo-create, repo-update, replication-create):

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

User and Permission Management

Command	Alias	Description
`jf rt user-create`	-	Create a single user
`jf rt users-create`	`jf rt uc`	Create users from CSV
`jf rt users-delete`	`jf rt udel`	Delete users
`jf rt group-create`	`jf rt gc`	Create a group
`jf rt group-add-users`	`jf rt gau`	Add users to a group
`jf rt group-delete`	`jf rt gdel`	Delete a group
`jf rt permission-target-create`	`jf rt ptc`	Create permission target
`jf rt permission-target-update`	`jf rt ptu`	Update permission target
`jf rt permission-target-delete`	`jf rt ptdel`	Delete permission target

--format support (users-create, permission-target-create, permission-target-update):

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

Transfer Commands

Command	Alias	Description
`jf rt transfer-config`	-	Transfer configuration between instances
`jf rt transfer-files`	-	Transfer files between instances
`jf rt transfer-config-merge`	-	Merge configurations
`jf rt transfer-plugin-install`	-	Install data transfer plugin

Flags for transfer-config:

Flag	Description
`--force`	Allow transfer to non-empty target
`--include-repos`	Repositories to include
`--exclude-repos`	Repositories to exclude
`--prechecks`	Run pre-transfer checks
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

--format support (transfer-config-merge, transfer-files):

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing log output (transfer-config-merge) or progress bar (transfer-files) is preserved (backward-compatible).

Other Artifactory Commands

Command	Alias	Description
`jf rt ping`	`jf rt p`	Ping Artifactory server
`jf rt curl`	-	Execute cURL against Artifactory
`jf rt docker-promote`	`jf rt dpr`	Promote Docker image
`jf rt git-lfs-clean`	`jf rt glc`	Clean Git LFS files

# Ping server
jf rt ping

# Send a REST API request
jf rt curl -XGET /api/system/ping
jf rt curl -XPUT /api/repositories/my-repo -T repo-config.json

--format support (ping, git-lfs-clean):

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing output is preserved (`OK` for ping, log output for git-lfs-clean).

--format support (docker-promote):

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

Java

Command	Alias	Description
`jf mvn-config`	`jf mvnc`	Configure Maven with Artifactory
`jf mvn`	-	Run Maven build
`jf gradle-config`	`jf gradlec`	Configure Gradle with Artifactory
`jf gradle`	-	Run Gradle build

jf mvn

Syntax:

jf mvn <maven-goals> [options]

Examples:

jf mvn clean install --build-name=my-app --build-number=1
jf mvn deploy --build-name=my-app --build-number=1 --scan
jf mvn clean package -DskipTests
jf mvn deploy --detailed-summary

Flags:

Flag	Description
`--build-name`	Build name for build info
`--build-number`	Build number for build info
`--project`	Project key
`--threads`	Number of deployment threads
`--scan`	Xray scan before upload
`--detailed-summary`	Show detailed deployment summary

jf gradle

Syntax:

jf gradle <gradle-tasks> [options]

Examples:

jf gradle clean build --build-name=my-app --build-number=1
jf gradle artifactoryPublish --build-name=my-app --build-number=1
jf gradle publish --scan

JavaScript

Command	Alias	Description
`jf npm-config`	`jf npmc`	Configure npm with Artifactory
`jf npm`	-	Run npm commands
`jf yarn-config`	`jf yarnc`	Configure Yarn with Artifactory
`jf yarn`	-	Run Yarn commands
`jf pnpm-config`	`jf pnpmc`	Configure pnpm with Artifactory

jf npm

Syntax:

jf npm <npm-command> [options]

Examples:

jf npm install --build-name=my-app --build-number=1
jf npm ci --build-name=my-app --build-number=1
jf npm publish --build-name=my-app --build-number=1
jf npm publish --detailed-summary
jf npm publish --workspaces

Python

Command	Alias	Description
`jf pip-config`	`jf pipc`	Configure pip with Artifactory
`jf pip`	-	Run pip commands
`jf pipenv-config`	`jf pipec`	Configure Pipenv
`jf pipenv`	-	Run Pipenv commands
`jf poetry-config`	`jf poc`	Configure Poetry
`jf poetry`	-	Run Poetry commands
`jf twine`	-	Run Twine for publishing

jf pip

Syntax:

jf pip <pip-command> [options]

Examples:

jf pip install -r requirements.txt --build-name=my-app --build-number=1

Go

Command	Alias	Description
`jf go-config`	`jf goc`	Configure Go with Artifactory
`jf go`	-	Run Go commands
`jf go-publish`	`jf gp`	Publish Go module

jf go and jf go-publish

Syntax:

jf go <go-command> [options]
jf go-publish <version> [options]

Examples:

jf go build --build-name=my-app --build-number=1
jf go get github.com/example/pkg
jf gp v1.0.0 --build-name=my-module --build-number=1

Docker

Command	Alias	Description
`jf docker login`	-	Login to Docker registry
`jf docker push`	-	Push Docker image
`jf docker pull`	-	Pull Docker image
`jf docker build`	-	Build Docker image
`jf docker scan`	-	Scan Docker image

jf docker

Syntax:

jf docker <docker-command> [options]

Examples:

jf docker login
jf docker pull my-registry.jfrog.io/my-image:latest --build-name=my-build --build-number=1
jf docker push my-registry.jfrog.io/my-image:1.0 --build-name=my-build --build-number=1
jf docker build -t my-registry.jfrog.io/my-image:1.0 . --push --build-name=my-build --build-number=1
jf docker scan my-image:latest

Flags:

Flag	Description
`--build-name`	Build name for build info
`--build-number`	Build number for build info
`--module`	Module name for build info
`--skip-login`	Skip docker login
`--threads`	Number of threads for push
`--detailed-summary`	Show detailed summary

.NET

Command	Alias	Description
`jf nuget-config`	`jf nugetc`	Configure NuGet
`jf nuget`	-	Run NuGet commands
`jf dotnet-config`	`jf dotnetc`	Configure .NET CLI
`jf dotnet`	-	Run .NET CLI commands

Examples:

jf nuget restore --build-name=my-app --build-number=1

Other Build Tools

Command	Alias	Description
`jf helm`	-	Run Helm commands
`jf conan`	-	Run Conan commands
`jf terraform-config`	`jf tfc`	Configure Terraform
`jf terraform`	`jf tf`	Publish Terraform modules

Examples:

jf helm registry login mycompany.jfrog.io
jf helm package ./my-chart --build-name=my-chart --build-number=1
jf helm push my-chart-1.0.0.tgz oci://mycompany.jfrog.io/helm-local --build-name=my-chart --build-number=1

Security and Scanning Commands

Command	Alias	Description
`jf audit`	-	Audit project dependencies for vulnerabilities
`jf scan`	`jf s`	Scan files/packages for vulnerabilities
`jf docker scan`	-	Scan local Docker image
`jf curation-audit`	`jf ca`	Audit against curation policies

jf audit

Description: Audit project for security vulnerabilities

Syntax:

jf audit [options]

Examples:

jf audit
jf audit --format=table
jf audit --working-dirs="./app1,./app2"
jf audit --min-severity=High
jf audit --fixable-only

Flags:

Flag	Description
`--format`	Output format (table, json, sarif)
`--watches`	Xray watches to use
`--working-dirs`	Directories to audit
`--min-severity`	Minimum severity (Low, Medium, High, Critical)
`--fixable-only`	Show only fixable issues
`--licenses`	Show license information

jf scan

Alias: jf s

Syntax:

jf scan <pattern> [options]

Examples:

jf scan "*.jar"
jf scan "./artifacts/*" --format=json

jf curation-audit

Alias: jf ca

Syntax:

jf curation-audit [options]

Distribution v1 Commands

Command	Alias	Description
`jf ds release-bundle-create`	`jf ds rbc`	Create a release bundle v1
`jf ds release-bundle-update`	`jf ds rbu`	Update a release bundle v1
`jf ds release-bundle-sign`	`jf ds rbs`	Sign a release bundle v1
`jf ds release-bundle-distribute`	`jf ds rbd`	Distribute a release bundle v1
`jf ds release-bundle-delete`	`jf ds rbdel`	Delete a release bundle v1

Lifecycle v2 Commands

Command	Alias	Description
`jf release-bundle-create`	`jf rbc`	Create a release bundle v2
`jf release-bundle-search`	`jf rbs`	Search release bundle v2 names and versions
`jf release-bundle-promote`	`jf rbp`	Promote a release bundle v2
`jf release-bundle-distribute`	`jf rbd`	Distribute a release bundle v2
`jf release-bundle-delete-local`	`jf rbdell`	Delete a release bundle v2 locally
`jf release-bundle-export`	`jf rbe`	Export a release bundle v2

jf release-bundle-create

Alias: jf rbc

Syntax:

jf release-bundle-create <bundle-name> <bundle-version> [options]

Examples:

jf rbc my-bundle 1.0.0 --spec=bundle-spec.json
jf rbc my-bundle 1.0.0 --builds="my-build/42"
jf rbc my-bundle 1.0.0 --release-bundles="other-bundle/1.0"
jf rbc my-bundle 1.0.0 --spec=spec.json --signing-key=my-key

Flags:

Flag	Description
`--spec`	File spec path
`--builds`	Build name and number (name/number)
`--release-bundles`	Source release bundles (name/version)
`--signing-key`	Signing key name
`--project`	Project key
`--sync`	Wait for creation to complete

jf release-bundle-promote

Alias: jf rbp

Syntax:

jf release-bundle-promote <bundle-name> <bundle-version> <environment> [options]

Examples:

jf rbp my-bundle 1.0.0 PROD
jf rbp my-bundle 1.0.0 PROD --project=my-project
jf rbp my-bundle 1.0.0 PROD --signing-key=my-key

jf release-bundle-distribute

Alias: jf rbd

Syntax:

jf release-bundle-distribute <bundle-name> <bundle-version> [options]

Examples:

jf rbd my-bundle 1.0.0
jf rbd my-bundle 1.0.0 --site="edge-1,edge-2"
jf rbd my-bundle 1.0.0 --dist-rules=rules.json

jf release-bundle-delete-local

Alias: jf rbdell

Syntax:

jf release-bundle-delete-local <bundle-name> <bundle-version> [environment] [options]

Examples:

jf rbdell my-bundle 1.0.0
jf rbdell my-bundle 1.0.0 --quiet
jf rbdell my-bundle 1.0.0 QA

📘
Note
This deletes the bundle only from the local platform. Use jf release-bundle-delete-remote to remove copies already distributed to edge nodes.

jf release-bundle-export

Alias: jf rbe

Syntax:

jf release-bundle-export <bundle-name> <bundle-version> [target-pattern] [options]

Examples:

jf rbe my-bundle 1.0.0
jf rbe my-bundle 1.0.0 ./path/to/export/

Supply Chain Attestation

Command	Alias	Description
`jf evd create`	-	Create evidence for supply chain attestation
`jf evd verify`	-	Verify evidence

jf evd create

Description: Create evidence for software supply chain attestation

Syntax:

jf evd create [options]

Examples:

jf evd create --build-name=my-build --build-number=42
jf evd create --subject-repo-path=libs-release/app.jar --predicate=predicate.json

Flags:

Flag	Description
`--format`	Output format (`json` or `table`). When omitted, the existing log-only output is preserved (backward-compatible). Empty fields are omitted from output.

📘
Note
The canonical command name is create-evidence. create is its shorter alias. Both forms work (jf evd create-evidence and jf evd create).

jf evd verify

Description: Verify evidence

Syntax:

jf evd verify [options]

Examples:

jf evd verify --subject-repo-path=libs-release/app.jar

Plugin Management

Command	Alias	Description
`jf plugin install`	`jf plugin i`	Install a JFrog CLI plugin
`jf plugin uninstall`	`jf plugin ui`	Uninstall a JFrog CLI plugin
`jf plugin publish`	`jf plugin p`	Publish a JFrog CLI plugin

jf plugin install

Alias: jf plugin i

Syntax:

jf plugin install <plugin-name[@version]>

Examples:

jf plugin install hello-frog
jf plugin install [email protected]

Flags:

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

jf plugin uninstall and publish

jf plugin uninstall <plugin-name>
jf plugin publish <plugin-name> <plugin-version>

Flags for publish:

Flag	Description
`--format`	Output format. Only `json` is supported (`{"status_code":N,"message":"..."}`). When omitted, no output is produced.

Shell Completion

Command	Description
`jf completion bash`	Generate Bash completion script
`jf completion zsh`	Generate Zsh completion script
`jf completion fish`	Generate Fish completion script

Examples:

jf completion bash
jf completion bash --install
jf completion zsh --install

Deprecated Commands

The following commands are deprecated (use direct invocation without rt prefix):

Deprecated	Current
`jf rt mvn`	`jf mvn`
`jf rt gradle`	`jf gradle`
`jf rt npm`	`jf npm`
`jf rt yarn`	`jf yarn`
`jf rt go`	`jf go`
`jf rt pip`	`jf pip`
`jf rt pipenv`	`jf pipenv`
`jf rt poetry`	`jf poetry`
`jf rt nuget`	`jf nuget`
`jf rt dotnet`	`jf dotnet`
`jf rt docker`	`jf docker`

📘
Note
Skills repositories is an open beta feature. The jf agent skills command is supported from JFrog CLI version 2.98.0.

Use jf agent skills for ClawHub-compatible skill packages (SKILL.md) in Skills repositories.

Agent Skills Commands

Command	Description
`jf agent skills publish`	Publish a skill bundle to a Skills repository
`jf agent skills install`	Install a skill for one or more harnesses (`--harness` or `--path`)
`jf agent skills search`	Search for skills across Skills repositories
`jf agent skills update`	Update an installed skill to a newer version
`jf agent skills list`	List skills in a repository or installed for a harness
`jf agent skills delete`	Delete a specific skill version from a Skills repository

Full reference: JFrog CLI for Skills in Agent Commands.

Product guide: Skills Repositories.

JFrog CLI Documentation by Product Area

Quick Start

Command Summary

Configuration Commands

jf config add

jf config show

General Commands

jf login

jf access-token-create

jf exchange-oidc-token

File Operations

jf rt upload

jf rt download

jf rt search

jf rt copy, move, and delete

Build Info

jf rt build-publish

jf rt build-promote

jf rt build-discard

jf rt build-add-dependencies

Repository Management

User and Permission Management

Transfer Commands

Other Artifactory Commands

Java

jf mvn

jf gradle

JavaScript

jf npm

Python

jf pip

Go

jf go and jf go-publish

Docker

jf docker

.NET

Other Build Tools

Security and Scanning Commands

jf audit

jf scan

jf curation-audit

Distribution v1 Commands

Lifecycle v2 Commands

jf release-bundle-create

jf release-bundle-promote

jf release-bundle-distribute

jf release-bundle-delete-local

jf release-bundle-export

Supply Chain Attestation

jf evd create

jf evd verify

Plugin Management

jf plugin install

jf plugin uninstall and publish

Shell Completion

Deprecated Commands

Agent Skills Commands

What’s Next