Enables AI assistants to query Maven artifacts in JFrog Artifactory by reusing credentials from ~/.m2/settings.xml and providing tools like getting latest stable versions, listing artifacts, and checking dependency updates.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
xmldom: Uncontrolled recursion in XML serialization leads to DoS
xmldom has XML injection through unvalidated DocumentType serialization
process.env. You'll be asked to provide them before it can run.ARTIFACTORY_PASSWORD— 1. Env vars — ARTIFACTORY_URL, ARTIFACTORY_USERNAME, ARTIFACTORY_TOKEN (or ). If all are set, they're used directly.ARTIFACTORY_SERVER_ID— Override the server id with (defaults to artifactory).ARTIFACTORY_TOKEN— 1. Env vars — ARTIFACTORY_URL, ARTIFACTORY_USERNAME, (or ARTIFACTORY_PASSWORD). If all are set, they're used directly.ARTIFACTORY_URL— 1. Env vars — , ARTIFACTORY_USERNAME, ARTIFACTORY_TOKEN (or ARTIFACTORY_PASSWORD). If all are set, they're used directly.ARTIFACTORY_USERNAME— 1. Env vars — ARTIFACTORY_URL, , ARTIFACTORY_TOKEN (or ARTIFACTORY_PASSWORD). If all are set, they're used directly.[](https://m8ven.ai/mcp/charanchelloju-artifactory-mcp-1bf0no)