# Cloudsmith — MCP server on mcp.ai
> Connect your Cloudsmith account and use 10 tools for developer tools straight from your AI agent. Connect with your own API key. Cloudsmith is a cloud-native artifact management platform for securely managing, distributing, and governing software packages across teams and repositories.

By: mcp.ai · official
Page: https://mcp.ai/cloudsmith

## Connect (MCP protocol)
Remote MCP endpoint (HTTP, streamable): https://api.mcp.ai/p_cloudsmith?ms=1787295780000
Add it as a custom/remote MCP connector, then authenticate when prompted.

## REST API (no MCP client required)
Every tool is also a REST endpoint, authed with a workspace API key.
Discover: GET https://api.mcp.ai/api/cloudsmith/_endpoints   # public; lists every endpoint
Call:     POST https://api.mcp.ai/api/cloudsmith/<endpoint>
  Authorization: Bearer sk_live_…   # create one at https://mcp.ai/settings/api-keys
  Content-Type: application/json
  Body: { …args }   →   { "ok": true, "tool": "<id>", "result": { … } }

## Developer docs
How to use (MCP or REST), markdown: https://mcp.ai/cloudsmith/skill.md
Postman collection (v2.1): https://mcp.ai/cloudsmith/postman.json

## Tools
- cloudsmith_get_current_user() — Return the identity authenticated by the connected Cloudsmith API key. Fails if Cloudsmith reports authenticated=false, even when the HTTP response is 200.
- cloudsmith_get_package(repo: string, owner: string, identifier: string, include_connected_repositories?: boolean) — Get metadata, status, checksums, licensing, and security state for one package in a Cloudsmith repository.
- cloudsmith_get_quota(owner: string) — Return current storage and bandwidth usage and allowances for a Cloudsmith namespace without inferring a billing plan name.
- cloudsmith_get_rate_limits() — Return Cloudsmith's current per-resource request limits, remaining counts, intervals, and throttling state for the authenticated principal.
- cloudsmith_get_repository(owner: string, identifier: string) — Get configuration, visibility, usage, and capability details for one Cloudsmith repository without returning repository signing keys or certificates.
- cloudsmith_list_organizations(sort?: string, page_size?: integer, next_cursor?: string) — List Cloudsmith organizations associated with the authenticated principal so an agent can discover namespace slugs for later calls.
- cloudsmith_list_repository_vulnerabilities(repo: string, owner: string, page_size?: integer, next_cursor?: string) — List vulnerability scan summaries for packages in a Cloudsmith repository.
- cloudsmith_search_audit_log(owner: string, query?: string, page_size?: integer, next_cursor?: string) — Search paginated audit events for a Cloudsmith namespace by event, actor, or timestamp text.
- cloudsmith_search_packages(repo: string, sort?: string, owner: string, query?: string, page_size?: integer, next_cursor?: string, include_connected_repositories?: boolean) — Search packages in a Cloudsmith repository by name, filename, version, distribution, architecture, format, or status.
- cloudsmith_search_repositories(sort?: string, owner: string, query?: string, page_size?: integer, next_cursor?: string) — Search and list repositories within a Cloudsmith namespace, returning identifiers and summary state without repository signing keys.

## Example prompts
- "What can I do in Cloudsmith?"
- "Show me a summary of my Cloudsmith account"

## Links
Docs: https://mcp.ai/docs/mcps/cloudsmith
Website: https://mcp.ai/mcps/cloudsmith