> ## Documentation Index
> Fetch the complete documentation index at: https://onecli.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# JFrog Artifactory as Your Agents' Package Registry

> Agents pull npm, PyPI, and other packages through your JFrog Artifactory instead of public registries. Connect with an access token and your host.

## Overview

OneCLI routes your agents' package installs through your own [JFrog Artifactory](https://jfrog.com/artifactory/), using an access token. Agents pull npm, PyPI, and other packages from your approved remote repositories, and the gateway injects the token so your agent never sees it.

Connecting takes about a minute.

## Connect JFrog Artifactory

**1. Create an access token in JFrog**

In the JFrog Platform, open **Administration** > **User Management** > **Access Tokens** and click **Generate Token**. Give it **read and deploy** on the remote repositories agents should use, and copy it right away.

**2. Enter it in OneCLI**

In the OneCLI dashboard, open **Connections** > **JFrog Artifactory** and fill in:

* **Access Token:** the token you copied.
* **JFrog Host:** your host, for example `mycompany.jfrog.io`.

Click **Connect JFrog Artifactory**.

![OneCLI connect window for JFrog Artifactory, showing the setup guide link, the Access Token and JFrog Host fields, and the Connect JFrog Artifactory button.](https://mintcdn.com/chartdbinc/L4k9tYUENUtEpMY8/images/integrations/jfrog-artifactory/onecli-connect-jfrog-artifactory.png?fit=max\&auto=format\&n=L4k9tYUENUtEpMY8\&q=85\&s=b5a86bf9db5db7be04460c8f7abd9f6f)

The JFrog Artifactory connect window in OneCLI.

> [!NOTE]
>
> OneCLI doesn't test the token when you connect. A wrong token or host shows up on the agent's first package install.

## What it changes for agents

When JFrog is connected, OneCLI blocks the public npm registry (`registry.npmjs.org`) and PyPI (`pypi.org`) by default, so installs go through your Artifactory. You can change these blocks under **Connections** > **JFrog Artifactory**.

## Controlling access

[Grant](https://onecli.sh/docs/guides/agent-access.md) the connection to each agent that needs it. Organization [rules](https://onecli.sh/docs/guides/rules.md) add guardrails on top. A blocked request never reaches JFrog.

To disconnect, remove the connection in **Connections** > **JFrog Artifactory**, then revoke the token in JFrog under **Access Tokens**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.