Before You Begin
Install the latest JFrog CLI
Configure your Artifactory instance with JAS entitlements using:
jf c add
Installing JFrog SAST MCP
Open a project of interest in Cursor.
Go to
Command Palette → Open MCP Settings.Click New MCP Server.
Edit the opened JSON file to look like this:
jsonCopyEdit{ "mcpServers": { "jfrog-mcp": { "command": "jf", "args": ["source-mcp", "."] } } }Go to Cursor Settings > MCP Tools, and confirm the new tools appear (may take time to load for large projects)
(Optional) Once MCP is set up, try prompting the AI assistant with:
- “Do I have SAST vulnerabilities in my code?”
- “Can you help me fix them?”
Troubleshooting
- If something isn’t working as expected:
- Open the Command Palette > Show Output Channels.
- Select the relevant MCP output MCP: {server name}.
- In the AI assistant chat, unfold the MCP tool call to view:
- Tool input
- Tool output