AngusRepo hosts, proxies, and aggregates 28 formats, including Maven, npm, and Docker. You publish and pull with each language’s native commands, so developers and pipelines can share one URL. Data can stay on your network.
What is AngusRepo?
The Ship product in Xiaocan Cloud’s AngusKit: a universal artifact repository. 28 formats, HOSTED / PROXY / GROUP (Hugging Face, CocoaPods, and p2 are used as PROXY), in-repo scanning that can block downloads, and fully read-only MCP (not in Community).
Which artifact formats are supported?
Maven, Docker, npm, PyPI, NuGet, Helm, Go, APT, YUM, Raw, Alpine, Ansible, Arch, Cargo, Chef, CocoaPods, Composer, Conan, Conda, CRAN, Hugging Face, OCI, p2, Pub, RubyGems, Swift, Terraform, and Vagrant. Hugging Face, CocoaPods, and p2 are used as PROXY. Conan 1 cannot be GROUP.
What are HOSTED, PROXY, and GROUP?
HOSTED accepts uploads. PROXY caches upstream and is read-only. GROUP aggregates members in order and is read-only. Writes go only to HOSTED. Pushing to a GROUP fails.
How do we choose versus Nexus and JFrog?
JFrog covers more formats; Nexus has more plugins and field stories. Harbor is a registry and is not the same row as a universal repo. Compare AngusRepo when you need the 28 formats, three repo types, download blocking, and shared login.
Can it be a private Docker registry?
Yes. Create a Docker/OCI HOSTED, docker login, then push/pull using the Setup URL. Harbor stays stronger at replication and lifecycle—keep it if that is all you need.
Who owns deep governance—Repo scanning or AngusSecurity?
Repo handles CVE, license, and download blocking for artifacts already in the repo. Cross-repo SAST, secrets, normalized findings, and four-state release gates live in AngusSecurity. After linking, use each product’s own menus.
Is MCP read-only? Can it delete packages?
Fully read-only: the write switch stays off—no delete, promote, or publish tools. You can preview cleanup; execute runs in the console. The endpoint is on when `angus.mcp.enabled` is unset; hosting still works with MCP off. Community does not include MCP.
Do /maven and /npm protocol paths go through MCP?
No. MCP carries metadata only (locate, deps, vuln counts, client setup, and similar). mvn, npm, and docker still use protocol paths. Agents cannot take JARs or images with them.
Are permissions per repository or per user?
Repository ACL: grant a role on one repo to a user, group, or department. Accounts come from AngusGM. Public repos may be read anonymously; writes always require auth.
What is the public /explore portal?
An unauthenticated read-only browser for public repositories. Writes still require authentication.
How do cleanup policies work?
Use Cleanup policies in the console: preview, then execute. Deletes are irreversible. Do not empty a repo instead of gradual cleanup. MCP cannot run cleanup.
Where should we start in the docs?
Start with the AngusRepo introduction and quick start. MCP is get-started/mcp. The 28 formats are chapter 5; repo types are in concepts and repository management.