cloudsmith.com
Cloudsmith is a cloud-hosted artifact management and software supply chain platform for storing, securing, and distributing software packages across many package formats. It provides repositories, access control, automation, and distribution features for development and release workflows.
Cloudsmith exposes a REST API at `https://api.cloudsmith.io/`, a Python-based `cloudsmith` CLI, and documentation for an MCP server; no GraphQL surface was found.
- Cloudsmith MCP serverdiscovered
- Cloudsmith APIdiscovered
- Cloudsmith CLIdiscovered
In the Cloudsmith web app, open your user settings API key page as described in API Keys to view or manage your personal API key. You can also retrieve it with the CLI using cloudsmith login as noted in Cloudsmith CLI.
Create a service account from the Cloudsmith workspace/team settings described in Service Accounts. Service accounts provide a Cloudsmith API key not tied to a specific user, for automation and machine use.
Configure OpenID Connect in Cloudsmith following OpenID Connect. After setting up an external IdP/workload identity mapping, obtain a JWT from Cloudsmith's OIDC flow; the docs state this token works with Cloudsmith API endpoints and can be used like an API key in the X-Api-Key header.
conventions · 1/7 published
- integrations.json——
- llms.txt✓https://cloudsmith.com/llms.txt
- API catalog✗
/.well-known/api-catalog - OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✗
/.well-known/oauth-protected-resource - Agent card✗
/.well-known/agent-card.json - Agent skills✗
/.well-known/agent-skills/index.json
Publish these signals → /publishing