<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk" -->

---
title: How to Control AI Assets Before They Become Shadow AI
description: JFrog's Agent Guard addresses the growing security risk of unreviewed AI assets — MCP servers, agent skills, and plugins — used by coding agents like Claude...
canonical: https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: How to Control AI Assets Before They Become Shadow AI | daily.dev
og:description: JFrog's Agent Guard addresses the growing security risk of unreviewed AI assets — MCP servers, agent skills, and plugins — used by coding agents like Claude...
og:url: https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk
og:image: https://api.daily.dev/og/posts/2KdicNMrK.png
og:image:alt: How to Control AI Assets Before They Become Shadow AI
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Control AI Assets Before They Become Shadow AI

**[JFrog](https://daily.dev/sources/jfrog)** · 5 min read · 0 upvotes · 0 comments

## Summary

JFrog's Agent Guard addresses the growing security risk of unreviewed AI assets — MCP servers, agent skills, and plugins — used by coding agents like Claude Code and Cursor. It enforces governance through three layers: an approved-only proxy routing traffic through JFrog Artifactory, an enforcement hook inside VS Code and Cursor that blocks unapproved MCP tool calls, and MDM lockdown via Jamf/Intune/Kandji to prevent developers from disabling controls. All AI assets live alongside existing Docker images and npm packages in Artifactory under one RBAC model, with full audit logging. Support for agent skills and plugins is planned alongside the currently available MCP server enforcement.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://jfrog.com/blog/agent-guard-control-ai-assets-before-they-become-shadow-ai>

## Similar posts on daily.dev

- [Beyond Models: JFrog AI Catalog Evolves to Detect Shadow AI and Govern MCPs](https://daily.dev/posts/beyond-models-jfrog-ai-catalog-evolves-to-detect-shadow-ai-and-govern-mcps-jsreyq0ej) · JFrog · 0 upvotes · 0 comments
- [Developers can finally own security](https://daily.dev/posts/developers-can-finally-own-security-ddwyajnag) · Arcjet · 1 upvotes · 0 comments
- [Unlock the Power of Agents with JFrog’s Skills and MCP Tools](https://daily.dev/posts/unlock-the-power-of-agents-with-jfrog-s-skills-and-mcp-tools-ptvhdgpvj) · JFrog · 0 upvotes · 0 comments
- [Stop Rogue AI: How Unity Catalog Secures Your Agent Actions](https://daily.dev/posts/stop-rogue-ai-how-unity-catalog-secures-your-agent-actions-tctgpua3j) · databricks · 0 upvotes · 0 comments
- [GitHub builds an immune system for AI coding agents running on MCP](https://daily.dev/posts/github-builds-an-immune-system-for-ai-coding-agents-running-on-mcp-kbo1bxvmn) · The New Stack · 2 upvotes · 0 comments

---

Tags: [#mcp](https://daily.dev/tags/mcp), [#ai-security](https://daily.dev/tags/ai-security), [#agentic-ai](https://daily.dev/tags/agentic-ai), [#jfrog](https://daily.dev/tags/jfrog)

[View this post on daily.dev](https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"How to Control AI Assets Before They Become Shadow AI","url":"https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk"},"datePublished":"2026-07-29T17:42:17.760Z","dateModified":"2026-07-30T12:54:42.126Z","description":"JFrog's Agent Guard addresses the growing security risk of unreviewed AI assets — MCP servers, agent skills, and plugins — used by coding agents like Claude...","image":"https://media.daily.dev/image/upload/s--ZrL_HSsR--/f_auto/v1722860399/public/Placeholder%2006","thumbnailUrl":"https://media.daily.dev/image/upload/s--ZrL_HSsR--/f_auto/v1722860399/public/Placeholder%2006","isAccessibleForFree":true,"articleSection":"JFrog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"JFrog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b11bf37102384ac9983be701b2cf7cd5","url":"https://daily.dev/sources/jfrog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-control-ai-assets-before-they-become-shadow-ai-2kdicnmrk","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"mcp,ai-security,agentic-ai,jfrog","timeRequired":"PT5M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"JFrog","item":"https://daily.dev/sources/jfrog"},{"@type":"ListItem","position":3,"name":"How to Control AI Assets Before They Become Shadow AI"}]}
```

