---
title: "Cloudsmith integration for LuumenAI"
url: "https://www.luumen.ai/integrations/cloudsmith/"
entity: SoftwareIntegration
category: "Source control & CI/CD"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Cloudsmith integration for LuumenAI

Read-only access to Cloudsmith packages, repositories, and audit events

## What LuumenAI can do with Cloudsmith

LuumenAI connects to Cloudsmith with an API token and exposes 10 tools (10 read-only). Every tool is read-only, so it can answer questions from Cloudsmith but cannot change anything in it.

## Key facts

- Authentication: API token
- Tools available: 10 tools (10 read-only)
- Plan: available on all plans
- Category: Source control & CI/CD

## About Cloudsmith with LuumenAI

Ask about an artifact and get an answer from Cloudsmith itself. Look up package metadata, checksums, and security state with CLOUDSMITH_GET_PACKAGE, scan a repository with CLOUDSMITH_LIST_REPOSITORY_VULNERABILITIES, check storage and bandwidth with CLOUDSMITH_GET_QUOTA, or trace a change through CLOUDSMITH_SEARCH_AUDIT_LOG. Connect with an API key. Access is read-only, so nothing in your repositories changes.

## Example tools

Read-only (10 in total):

- `CLOUDSMITH_GET_CURRENT_USER` — Return the identity authenticated by the connected Cloudsmith API key.
- `CLOUDSMITH_GET_PACKAGE` — Get metadata, status, checksums, licensing, and security state for one package in a Cloudsmith repository.
- `CLOUDSMITH_GET_QUOTA` — Return current storage and bandwidth usage and allowances for a Cloudsmith namespace without inferring a billing plan name.
- `CLOUDSMITH_GET_RATE_LIMITS` — Return Cloudsmith's current per-resource request limits, remaining counts, intervals, and throttling state for the authenticated principal.
- `CLOUDSMITH_GET_REPOSITORY` — Get configuration, visibility, usage, and capability details for one Cloudsmith repository without returning repository signing keys or certificates.
- `CLOUDSMITH_LIST_ORGANIZATIONS` — List Cloudsmith organizations associated with the authenticated principal so an agent can discover namespace slugs for later calls.
- `CLOUDSMITH_LIST_REPOSITORY_VULNERABILITIES` — List vulnerability scan summaries for packages in a Cloudsmith repository.
- `CLOUDSMITH_SEARCH_AUDIT_LOG` — Search paginated audit events for a Cloudsmith namespace by event, actor, or timestamp text.

## Frequently asked questions

### How does LuumenAI connect to Cloudsmith?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Cloudsmith on its own?

No. Every one of the 10 tools is read-only, so LuumenAI can answer questions from Cloudsmith but cannot change anything in it.

### Is there an audit trail?

Every call to Cloudsmith is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/cloudsmith/