diff --git a/CHANGELOG.md b/CHANGELOG.md
index dc9d4516f..b14a6a982 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Unified integration dispatch table in `dispatch.py` -- both install and uninstall import from one source of truth (#562)
 - Hook merge logic deduplicated: three copy-pasted JSON-merge methods replaced with `_integrate_merged_hooks()` + config dict (#562)
 
+### Added
+
+- Artifactory Archive Entry Download for virtual file packages: single-file primitives (`.prompt.md`, `.agent.md`, etc.) are now fetched via the `!/{path}` entry API instead of a full archive download, with transparent fallback on unsupported Artifactory versions (#525)
+
 ### Fixed
 
 - `apm deps update -g` now correctly passes scope, preventing user-scope updates from silently using project-scope paths (#562)
diff --git a/docs/src/content/docs/getting-started/authentication.md b/docs/src/content/docs/getting-started/authentication.md
index 6ba4b733c..7089761d8 100644
--- a/docs/src/content/docs/getting-started/authentication.md
+++ b/docs/src/content/docs/getting-started/authentication.md
@@ -199,6 +199,18 @@ With `PROXY_REGISTRY_ONLY=1`, APM will:
 2. Skip the download cache for entries that have no `registry_prefix` (forcing a fresh proxy download)
 3. Raise an error for any package reference that does not route through the configured proxy
 
+### Archive Entry Download (virtual file packages)
+
+When downloading virtual file packages (`.prompt.md`, `.agent.md`, and similar single-file primitives) through an Artifactory proxy, APM uses the **Archive Entry Download API** to fetch only the specific file instead of the full archive.
+
+The entry URL follows the Artifactory pattern:
+
+```
+GET {archive_url}!/{repo}-{ref}/{file_path}
+```
+
+This avoids downloading a multi-MB archive just to extract a single small file. If the entry API returns a 404, a connection error, or is unsupported by the Artifactory version in use, APM falls back to the standard full-archive download transparently -- no configuration required.
+
 ### Deprecated Artifactory env vars
 
 The following env vars still work but emit a `DeprecationWarning`. Migrate to the `PROXY_REGISTRY_*` equivalents: