Java talks to a Maven server, frontend to npm, images to Harbor — three keys. AngusRepo fixes the three logins, not a format-count race. A login password in the password field returns 401 invalid_token — use an access token.
What is AngusRepo?
The Ship product in Xiaocan Cloud’s AngusKit: a universal artifact repository. Ten formats, HOSTED / PROXY / GROUP, in-repo scanning that can block downloads, and read-only MCP by default.
Which artifact formats are supported?
Maven, Docker/OCI, npm, PyPI, NuGet, Helm, Go, APT, YUM/RPM, and Raw.
What are HOSTED, PROXY, and GROUP?
HOSTED accepts uploads. PROXY caches upstream and is read-only. GROUP aggregates members in order and is read-only. Writes go only to HOSTED. Pushing to a GROUP fails.
How do we choose versus Nexus and JFrog?
JFrog covers more formats; Nexus has more plugins and field stories. Harbor is a registry and is not the same row as a universal repo. Compare AngusRepo when you need the ten main formats, three repo types, download blocking, and shared login.
Can it be a private Docker registry?
Yes. Create a Docker/OCI HOSTED, docker login, then push/pull using the Setup URL. Harbor stays stronger at replication and lifecycle—keep it if that is all you need.
Who owns deep governance—Repo scanning or AngusSecurity?
Repo handles CVE, license, and download blocking for artifacts already in the repo. Cross-repo SAST, secrets, normalized findings, and four-state release gates live in AngusSecurity. After linking, use each product’s own menus.
Is MCP read-only? Can it delete packages?
Read-only by default: no delete, promote, or publish tools. You can preview stale packages; cleanup runs in the console. Hosting still works with MCP off.
Do /maven and /npm protocol paths go through MCP?
No. MCP carries metadata only. mvn, npm, and docker still use protocol paths. Agents cannot take JARs or images with them.
Are permissions per repository or per user?
Repository ACL: grant a role on one repo to a user, group, or department. Accounts come from AngusGM. Public repos may be read anonymously; writes always require auth.
What is the public /explore portal?
An unauthenticated read-only browser for public repositories. Writes still require authentication.
How do cleanup policies work?
Use Cleanup policies in the console: preview, then execute. Deletes are irreversible. Do not empty a repo instead of gradual cleanup. MCP cannot run cleanup.
Where should we start in the docs?
Start with the AngusRepo introduction and quick start. The ten formats are chapter 5; repo types are in concepts and repository management.