diff --git a/packages/core/forms/src/generator/FormGenerator.vue b/packages/core/forms/src/generator/FormGenerator.vue
index 3fcc3996ad..24f88dae62 100644
--- a/packages/core/forms/src/generator/FormGenerator.vue
+++ b/packages/core/forms/src/generator/FormGenerator.vue
@@ -30,12 +30,31 @@
       :key="`group-${i}`"
     >
       <KCollapse
-        v-if="group.collapsible"
-        :model-value="group.collapsedByDefault === undefined ? false : group.collapsedByDefault"
-        :title="group.legend"
+        v-if="group.collapsible !== undefined && group.collapsible !== false"
+        class="root-level-collapse"
+        :model-value="false"
+        :title="group.collapsible.title"
       >
+        <template
+          v-if="group.collapsible.description"
+          #visible-content
+        >
+          {{ group.collapsible.description }}
+        </template>
+
+        <slot
+          v-if="group.slots?.beforeContent"
+          :name="group.slots?.beforeContent"
+        />
+
+        <slot
+          v-if="group.fields.length === 0 && group.slots?.emptyState"
+          :name="group.slots?.emptyState"
+        />
+
         <component
           :is="tag"
+          v-else
           :class="getFieldRowClasses(group)"
         >
           <template
@@ -55,6 +74,37 @@
             />
           </template>
         </component>
+
+        <KCollapse
+          v-if="group.collapsible !== true && group.collapsible.nestedCollapsible && group.collapsible.nestedCollapsible.fields.length > 0"
+          class="nested-collapse"
+          :model-value="collapseStates[`group-${i}-nested`] ?? true"
+          trigger-alignment="leading"
+          :trigger-label="(collapseStates[`group-${i}-nested`] ?? true) ? group.collapsible.nestedCollapsible.triggerLabel.expand : group.collapsible.nestedCollapsible.triggerLabel.collapse"
+          @update:model-value="(value) => collapseStates[`group-${i}-nested`] = value"
+        >
+          <component
+            :is="tag"
+            :class="getFieldRowClasses(group)"
+          >
+            <template
+              v-for="field in group.collapsible.nestedCollapsible.fields"
+              :key="field.model"
+            >
+              <form-group
+                v-if="fieldVisible(field)"
+                ref="children"
+                :errors="errors"
+                :field="field"
+                :model="model"
+                :options="options"
+                :vfg="vfg"
+                @model-updated="onModelUpdated"
+                @validated="onFieldValidated"
+              />
+            </template>
+          </component>
+        </KCollapse>
       </KCollapse>
 
       <component
@@ -87,6 +137,17 @@
 </template>
 
 <script>
+/**
+ * @typedef {import('./types').FGCollapsibleOptions} FGCollapsibleOptions
+ * @typedef {import('./types').FGSlots} FGSlots
+ *
+ * @typedef PartialGroup
+ * @prop {FGCollapsibleOptions=} collapsible
+ * @prop {FGSlots=} slots
+ *
+ * @typedef {Record<string, any> & PartialGroup} Group
+ */
+
 import { get as objGet, forEach, isFunction, isNil, isArray } from 'lodash'
 import formMixin from './FormMixin.vue'
 import formGroup from './FormGroup.vue'
@@ -148,6 +209,7 @@ export default {
       vfg: this,
       errors: [], // Validation errors,
       children: ref([]),
+      collapseStates: {},
     }
   },
 
@@ -163,6 +225,7 @@ export default {
       return res
     },
     groups() {
+      /** @type {Group[]} */
       const res = []
       if (this.schema && this.schema.groups) {
         forEach(this.schema.groups.slice(0), group => {
@@ -201,7 +264,7 @@ export default {
   mounted() {
     this.$nextTick(() => {
       if (this.model) {
-        // First load, running validation if neccessary
+        // First load, running validation if necessary
         if (this.options.validateAfterLoad === true && this.isNewModel !== true) {
           this.validate()
         } else {
@@ -304,6 +367,10 @@ export default {
     box-sizing: border-box;
   }
 
+  .hidden-field {
+    display: none;
+  }
+
   .form-group {
     margin-bottom: 24px;
 
@@ -530,6 +597,7 @@ export default {
 .vue-form-generator label {
   font-weight: 500;
 }
+
 .vue-form-generator .form-group input[type=radio] {
   align-items: center;
   appearance: none;
@@ -552,4 +620,20 @@ export default {
     background-color: currentColor;
   }
 }
+
+.vue-form-generator {
+  .root-level-collapse {
+    .k-collapse-heading {
+      margin-bottom: 0 !important;
+    }
+
+    .k-collapse-visible-content {
+      color: $kui-color-text-neutral;
+    }
+  }
+
+  .nested-collapse .k-collapse-heading {
+    margin-bottom: $kui-space-80 !important;
+  }
+}
 </style>
diff --git a/packages/core/forms/src/generator/types.ts b/packages/core/forms/src/generator/types.ts
new file mode 100644
index 0000000000..19ea73da9c
--- /dev/null
+++ b/packages/core/forms/src/generator/types.ts
@@ -0,0 +1,16 @@
+export type FGCollapsibleOptions = boolean | {
+  title?: string
+  description?: string
+  nestedCollapsible?: {
+    fields: any[],
+    triggerLabel: {
+      expand: string
+      collapse: string
+    }
+  }
+}
+
+export interface FGSlots {
+  beforeContent?: string
+  emptyState?: string
+}
diff --git a/packages/core/forms/src/index.ts b/packages/core/forms/src/index.ts
index e27de4bc6f..6a498718cf 100644
--- a/packages/core/forms/src/index.ts
+++ b/packages/core/forms/src/index.ts
@@ -26,4 +26,5 @@ export const getSharedFormName = (modelName: string, enabledAcmeCustomTemplate =
 }
 
 export * from './const'
+export * from './types'
 export * as abstractField from './generator/fields/abstractField'
diff --git a/packages/core/forms/src/types.ts b/packages/core/forms/src/types.ts
new file mode 100644
index 0000000000..810308db61
--- /dev/null
+++ b/packages/core/forms/src/types.ts
@@ -0,0 +1 @@
+export * from './generator/types'
diff --git a/packages/core/forms/tsconfig.json b/packages/core/forms/tsconfig.json
index e34e90e4e4..86ddfebf86 100644
--- a/packages/core/forms/tsconfig.json
+++ b/packages/core/forms/tsconfig.json
@@ -10,7 +10,8 @@
       "cypress",
       "cypress/vue",
       "../../../cypress/support"
-    ]
+    ],
+    "allowJs": true
   },
   "include": [
     "src/**/*",
diff --git a/packages/entities/entities-plugins/src/components/PluginConfigCard.vue b/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
index 0ff4dba87f..b6624b3630 100644
--- a/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
+++ b/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
@@ -37,7 +37,7 @@
         <div class="name-cell-wrapper">
           <PluginIcon
             class="plugin-icon"
-            :name="pluginMetaData.getImageName(getPropValue('rowValue', slotProps))"
+            :name="getPropValue('rowValue', slotProps)"
             :width="24"
           />
           <span class="info-name">
diff --git a/packages/entities/entities-plugins/src/components/PluginEntityForm.vue b/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
index 458e128d2d..88ee2dc71e 100644
--- a/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
+++ b/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
@@ -25,7 +25,20 @@
         :options="formOptions"
         :schema="formSchema"
         @model-updated="onModelUpdated"
-      />
+      >
+        <template #plugin-config-empty-state>
+          <div class="plugin-config-empty-state">
+            {{ t('plugins.form.grouping.plugin_configuration.empty') }}
+          </div>
+        </template>
+
+        <template
+          v-if="PLUGIN_METADATA[formModel.name] && PLUGIN_METADATA[formModel.name].fieldRules"
+          #plugin-config-before-content
+        >
+          <PluginFieldRuleAlerts :rules="PLUGIN_METADATA[formModel.name].fieldRules!" />
+        </template>
+      </VueFormGenerator>
     </div>
   </div>
 </template>
@@ -42,12 +55,15 @@ import '@kong-ui-public/forms/dist/style.css'
 import type { AxiosRequestConfig, AxiosResponse } from 'axios'
 import { computed, defineComponent, onBeforeMount, provide, reactive, ref, watch, type PropType } from 'vue'
 import composables from '../composables'
+import useI18n from '../composables/useI18n'
+import { PLUGIN_METADATA } from '../definitions/metadata'
 import endpoints from '../plugins-endpoints'
 import {
   type KongManagerPluginFormConfig,
   type KonnectPluginFormConfig,
   type PluginEntityInfo,
 } from '../types'
+import PluginFieldRuleAlerts from './PluginFieldRuleAlerts.vue'
 
 // Must explicitly specify these as components since they are rendered dynamically
 export default defineComponent({
@@ -126,6 +142,7 @@ const { parseSchema } = composables.useSchemas(props.entityMap.focusedEntity?.id
 const { convertToDotNotation, unFlattenObject, isObjectEmpty, unsetNullForeignKey } = composables.usePluginHelpers()
 
 const { objectsAreEqual } = useHelpers()
+const { i18n: { t } } = useI18n()
 
 // define endpoints for use by KFG
 const buildGetOneUrl = (entityType: string, entityId: string): string => {
@@ -617,6 +634,15 @@ onBeforeMount(() => {
     opacity: 0;
   }
 
+  .entity-form {
+    .plugin-config-empty-state {
+      color: $kui-color-text-neutral;
+      font-size: $kui-font-size-30;
+      font-style: italic;
+      margin-bottom: $kui-space-60;
+    }
+  }
+
   :deep(.vue-form-generator) {
     .k-collapse:not(:last-child) {
       border-bottom: $kui-border-width-10 solid $kui-color-border;
diff --git a/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue b/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue
new file mode 100644
index 0000000000..ffe56ab30c
--- /dev/null
+++ b/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue
@@ -0,0 +1,86 @@
+<template>
+  <KAlert class="plugin-field-rule-alerts">
+    <ul>
+      <li
+        v-for="(alert, i) in formattedSimpleAlerts"
+        :key="`simple-alert-${i}`"
+      >
+        {{ alert }}
+      </li>
+
+      <li v-if="props.rules.onlyOneOfMutuallyRequired && props.rules.onlyOneOfMutuallyRequired.length > 0">
+        <div
+          v-for="(combinations, i) in props.rules.onlyOneOfMutuallyRequired"
+          :key="`only-one-mutually-alert-${i}`"
+        >
+          <div>{{ t('plugins.form.field_rules.only_one_of_mutually_required') }}</div>
+          <ul>
+            <li
+              v-for="(fields, j) in combinations"
+              :key="`only-one-mutually-alert-${i}-combination-${j}`"
+            >
+              {{ formatFields(fields) }}
+            </li>
+          </ul>
+        </div>
+      </li>
+    </ul>
+  </KAlert>
+</template>
+
+<script setup lang="ts">
+import { computed } from 'vue'
+import composables from '../composables'
+import type { FieldRules } from '../types'
+
+const props = defineProps<{
+  rules: FieldRules
+}>()
+
+const { formatPluginFieldLabel } = composables.usePluginHelpers()
+const { i18n: { t } } = composables.useI18n()
+
+const formatFields = (fields: string[]) =>
+  fields.map((field) =>
+    field.replace(/^[cC]onfig\./, '').split('.').map((s) => formatPluginFieldLabel(s)).join('.'),
+  ).join(', ')
+
+const formatAlert = (translateKey: Parameters<typeof t>[0], fields: string[]) =>
+  t(translateKey, { parameters: formatFields(fields) })
+
+const formattedSimpleAlerts = computed<string[]>(() => {
+  const alerts = []
+
+  if (props.rules.atLeastOneOf) {
+    for (const fields of props.rules.atLeastOneOf) {
+      alerts.push(formatAlert('plugins.form.field_rules.at_least_one_of', fields))
+    }
+  }
+
+  if (props.rules.onlyOneOf) {
+    for (const fields of props.rules.onlyOneOf) {
+      alerts.push(formatAlert('plugins.form.field_rules.only_one_of', fields))
+    }
+  }
+
+  if (props.rules.mutuallyRequired) {
+    for (const fields of props.rules.mutuallyRequired) {
+      alerts.push(formatAlert('plugins.form.field_rules.mutually_required', fields))
+    }
+  }
+
+  return alerts
+})
+</script>
+
+<style scoped lang="scss">
+.plugin-field-rule-alerts {
+  ul {
+    margin: 0;
+    padding-inline-start: $kui-space-80;
+  }
+  margin-bottom: $kui-space-60;
+
+  margin-top: $kui-space-40;
+}
+</style>
diff --git a/packages/entities/entities-plugins/src/components/PluginForm.cy.ts b/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
index 18395c2d15..9a8025ac29 100644
--- a/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
+++ b/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
@@ -221,7 +221,7 @@ describe('<PluginForm />', () => {
       cy.get('#config-private_network').should('be.visible')
     })
 
-    it('should show common, required, and advanced fields when groupFields is true', () => {
+    it('should show general, hoisted, and advanced fields when groupFields is true', () => {
       interceptKMSchema({ mockData: schema2 })
 
       cy.mount(PluginForm, {
@@ -257,31 +257,42 @@ describe('<PluginForm />', () => {
       cy.get('#route-id').should('be.visible')
 
       cy.getTestId('k-collapse-title')
-        .contains('Common Fields')
+        .contains('General Configuration')
         .parents('.k-collapse')
         .first()
-        .as('commonFields')
+        .as('generalFields')
 
       cy.getTestId('k-collapse-title')
-        .contains('Required Fields')
+        .contains('Plugin Configuration')
         .parents('.k-collapse')
         .first()
-        .as('requiredFields')
+        .as('pluginFields')
 
-      cy.getTestId('k-collapse-title')
-        .contains('Advanced Fields')
-        .parents('.k-collapse')
-        .first()
+      cy.get('.k-collapse.nested-collapse [data-testid="k-collapse-trigger-label"]')
+        .contains('Advanced Parameters')
+        .parents('.k-collapse.nested-collapse')
         .as('advancedFields')
 
-      // common fields
-      cy.get('@commonFields').find('#enabled').should('exist')
-      cy.get('@commonFields').find('#instance_name').should('exist')
-      cy.get('@commonFields').find('#tags').should('exist')
-      cy.get('@commonFields').find('.plugin-protocols-select').should('be.visible')
-
-      // required fields
-      cy.get('@requiredFields').find('#config-required_non_checkbox_field').should('be.visible')
+      // general fields
+      cy.get('@generalFields').find('#enabled').should('exist')
+      cy.get('@generalFields').find('#instance_name').should('exist')
+      cy.get('@generalFields').find('#tags').should('exist')
+      cy.get('@generalFields').find('.plugin-protocols-select').should('be.visible')
+
+      // field rule alerts
+      cy.get('@pluginFields').find('.plugin-field-rule-alerts').contains('At least one of').should('be.visible')
+
+      // hoisted fields
+      cy.get('@pluginFields').find('#config-required_non_checkbox_field').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification_filename').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-include_base_path').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-random_status_code').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
 
       // advanced fields should be hidden by default
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.hidden')
@@ -291,11 +302,9 @@ describe('<PluginForm />', () => {
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.visible')
 
       // advanced fields
-      cy.get('@advancedFields').find('#config-api_specification').should('be.visible')
-      cy.get('@advancedFields').find('#config-api_specification_filename').should('be.visible')
-      cy.get('@advancedFields').find('#config-include_base_path').should('be.visible')
       cy.get('@advancedFields').find('#config-included_status_codes').should('be.visible')
-      cy.get('@advancedFields').find('#config-random_status_code').should('be.visible')
+      cy.get('@advancedFields').find('#config-max_delay_time').should('be.visible')
+      cy.get('@advancedFields').find('#config-min_delay_time').should('be.visible')
     })
 
     it('should show correct form components for custom plugin with arrays of objects', () => {
@@ -966,7 +975,7 @@ describe('<PluginForm />', () => {
       cy.get('#config-private_network').should('be.visible')
     })
 
-    it('should show common, required, and advanced fields when groupFields is true', () => {
+    it('should show general, hoisted, and advanced fields when groupFields is true', () => {
       interceptKonnectSchema({ mockData: schema2 })
 
       cy.mount(PluginForm, {
@@ -1003,31 +1012,42 @@ describe('<PluginForm />', () => {
       cy.get('#route-id').should('be.visible')
 
       cy.getTestId('k-collapse-title')
-        .contains('Common Fields')
+        .contains('General Configuration')
         .parents('.k-collapse')
         .first()
-        .as('commonFields')
+        .as('generalFields')
 
       cy.getTestId('k-collapse-title')
-        .contains('Required Fields')
+        .contains('Plugin Configuration')
         .parents('.k-collapse')
         .first()
-        .as('requiredFields')
+        .as('pluginFields')
 
-      cy.getTestId('k-collapse-title')
-        .contains('Advanced Fields')
-        .parents('.k-collapse')
-        .first()
+      cy.get('.k-collapse.nested-collapse [data-testid="k-collapse-trigger-label"]')
+        .contains('Advanced Parameters')
+        .parents('.k-collapse.nested-collapse')
         .as('advancedFields')
 
-      // common fields
-      cy.get('@commonFields').find('#enabled').should('exist')
-      cy.get('@commonFields').find('#instance_name').should('exist')
-      cy.get('@commonFields').find('#tags').should('exist')
-      cy.get('@commonFields').find('.plugin-protocols-select').should('be.visible')
-
-      // required fields
-      cy.get('@requiredFields').find('#config-required_non_checkbox_field').should('be.visible')
+      // general fields
+      cy.get('@generalFields').find('#enabled').should('exist')
+      cy.get('@generalFields').find('#instance_name').should('exist')
+      cy.get('@generalFields').find('#tags').should('exist')
+      cy.get('@generalFields').find('.plugin-protocols-select').should('be.visible')
+
+      // field rule alerts
+      cy.get('@pluginFields').find('.plugin-field-rule-alerts').contains('At least one of').should('be.visible')
+
+      // hoisted fields
+      cy.get('@pluginFields').find('#config-required_non_checkbox_field').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification_filename').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-include_base_path').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-random_status_code').should('be.visible')
+        .parents('.k-collapse.nested-collapse').should('not.exist')
 
       // advanced fields should be hidden by default
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.hidden')
@@ -1037,11 +1057,9 @@ describe('<PluginForm />', () => {
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.visible')
 
       // advanced fields
-      cy.get('@advancedFields').find('#config-api_specification').should('be.visible')
-      cy.get('@advancedFields').find('#config-api_specification_filename').should('be.visible')
-      cy.get('@advancedFields').find('#config-include_base_path').should('be.visible')
       cy.get('@advancedFields').find('#config-included_status_codes').should('be.visible')
-      cy.get('@advancedFields').find('#config-random_status_code').should('be.visible')
+      cy.get('@advancedFields').find('#config-max_delay_time').should('be.visible')
+      cy.get('@advancedFields').find('#config-min_delay_time').should('be.visible')
     })
 
     it('should show correct form components for custom plugin with arrays of objects', () => {
diff --git a/packages/entities/entities-plugins/src/components/PluginForm.vue b/packages/entities/entities-plugins/src/components/PluginForm.vue
index e0537f0392..298dc9656b 100644
--- a/packages/entities/entities-plugins/src/components/PluginForm.vue
+++ b/packages/entities/entities-plugins/src/components/PluginForm.vue
@@ -27,6 +27,7 @@
       :fetch-url="fetchUrl"
       :form-fields="getRequestBody"
       :is-readonly="form.isReadonly"
+      no-validate
       @cancel="handleClickCancel"
       @fetch:error="(err: any) => $emit('error', err)"
       @fetch:success="initForm"
@@ -131,37 +132,38 @@
 </template>
 
 <script setup lang="ts">
-import { computed, reactive, ref, watch, onBeforeMount, type PropType } from 'vue'
-import { useRouter } from 'vue-router'
-import type { AxiosError, AxiosResponse } from 'axios'
-import { marked, type MarkedOptions } from 'marked'
 import {
-  useAxios,
-  useErrors,
-  useHelpers,
-  useStringHelpers,
   EntityBaseForm,
   EntityBaseFormType,
   JsonCodeBlock,
   YamlCodeBlock,
+  useAxios,
+  useErrors,
+  useHelpers,
+  useStringHelpers,
 } from '@kong-ui-public/entities-shared'
 import '@kong-ui-public/entities-shared/dist/style.css'
+import type { Tab } from '@kong/kongponents'
+import type { AxiosError, AxiosResponse } from 'axios'
+import { marked, type MarkedOptions } from 'marked'
+import { CREDENTIAL_METADATA, CREDENTIAL_SCHEMAS, PLUGIN_METADATA } from '../definitions/metadata'
+import { computed, onBeforeMount, reactive, ref, watch, type PropType } from 'vue'
+import { useRouter } from 'vue-router'
+import composables from '../composables'
+import { ArrayStringFieldSchema } from '../definitions/schemas/ArrayStringFieldSchema'
+import endpoints from '../plugins-endpoints'
 import {
   EntityTypeIdField,
   PluginScope,
-  type KonnectPluginFormConfig,
-  type KongManagerPluginFormConfig,
-  type PluginFormState,
-  type PluginFormFields,
-  type DefaultPluginsSchemaRecord,
   type DefaultPluginsFormSchema,
+  type DefaultPluginsSchemaRecord,
+  type KongManagerPluginFormConfig,
+  type KonnectPluginFormConfig,
   type PluginEntityInfo,
+  type PluginFormFields,
+  type PluginFormState,
 } from '../types'
-import endpoints from '../plugins-endpoints'
-import composables from '../composables'
-import { ArrayStringFieldSchema } from '../composables/plugin-schemas/ArrayStringFieldSchema'
 import PluginEntityForm from './PluginEntityForm.vue'
-import type { Tab } from '@kong/kongponents'
 
 const emit = defineEmits<{
   (e: 'error:fetch-schema', error: AxiosError): void,
@@ -240,8 +242,8 @@ const props = defineProps({
 
 const router = useRouter()
 const { i18n: { t } } = composables.useI18n()
-const { pluginMetaData, credentialMetaData, credentialSchemas } = composables.usePluginMetaData()
 const { customSchemas, typedefs } = composables.useSchemas(undefined, { app: props.config.app })
+const { formatPluginFieldLabel } = composables.usePluginHelpers()
 const { getMessageFromError } = useErrors()
 const { capitalize } = useStringHelpers()
 const { objectsAreEqual } = useHelpers()
@@ -393,7 +395,7 @@ const defaultFormSchema: DefaultPluginsSchemaRecord = reactive({
     default: props.pluginType,
     type: 'input',
     inputType: 'hidden',
-    styleClasses: 'd-none',
+    styleClasses: 'd-none hidden-field',
   },
   // plugin scoping
   selectionGroup: {
@@ -448,7 +450,7 @@ const defaultFormSchema: DefaultPluginsSchemaRecord = reactive({
 const resourceEndpoint = computed((): string => {
   const entityPath: string = props.developer ? 'developers' : 'consumers'
 
-  const type = credentialMetaData[props.pluginType]?.endpoint || '/plugins'
+  const type = CREDENTIAL_METADATA[props.pluginType]?.endpoint || '/plugins'
 
   return `${entityPath}/${props.config.entityId}${props.developer ? '/credentials' : ''}${type}`
 })
@@ -459,15 +461,10 @@ const getArrayType = (list: unknown[]): string => {
   return uniqueTypes.length > 1 ? 'string' : uniqueTypes[0]
 }
 
-// _ gets converted to space and capitalize each word
-const formatPluginFieldLabel = (label: string) => {
-  return capitalize(label.replace(/_/g, ' '))
-}
-
 const buildFormSchema = (parentKey: string, response: Record<string, any>, initialFormSchema: Record<string, any>) => {
   let schema = (response && response.fields) || []
   const pluginSchema = customSchemas[props.pluginType as keyof typeof customSchemas]
-  const credentialSchema = credentialMetaData[props.pluginType]?.schema?.fields
+  const credentialSchema = CREDENTIAL_METADATA[props.pluginType]?.schema?.fields
 
   // schema can either be an object or an array of objects. If it's an array, convert it to an object
   if (Array.isArray(schema)) {
@@ -491,7 +488,7 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
     }, {})
   }
 
-  // alphabetically sort the schema keys and handle specifial configuration for each field type
+  // alphabetically sort the schema keys and handle specific configuration for each field type
   Object.keys(schema).sort().forEach(key => {
     const scheme = schema[key]
     const field = parentKey ? `${parentKey}-${key}` : `${key}`
@@ -511,6 +508,7 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
 
     initialFormSchema[field] = { id: field } // each field's key will be set as the id
     initialFormSchema[field].type = scheme.type === 'boolean' ? 'checkbox' : 'input'
+    initialFormSchema[field].required = scheme.required
 
     if (field.startsWith('config-')) {
       initialFormSchema[field].label = formatPluginFieldLabel(field)
@@ -762,12 +760,12 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
 }
 
 const initScopeFields = (): void => {
-  const supportServiceScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.SERVICE) ?? true
-  const supportRouteScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.ROUTE) ?? true
-  const supportConsumerScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.CONSUMER) ?? true
+  const supportServiceScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.SERVICE) ?? true
+  const supportRouteScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.ROUTE) ?? true
+  const supportConsumerScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.CONSUMER) ?? true
   const supportConsumerGroupScope = props.config.disableConsumerGroupScope
     ? false
-    : (pluginMetaData[props.pluginType]?.scope.includes(PluginScope.CONSUMER_GROUP) ?? true)
+    : (PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.CONSUMER_GROUP) ?? true)
 
   const scopeEntityArray = []
 
@@ -1002,7 +1000,7 @@ const submitUrl = computed((): string => {
 })
 
 const isCustomPlugin = computed((): boolean => {
-  return !Object.keys(pluginMetaData).includes(props.pluginType)
+  return !Object.keys(PLUGIN_METADATA).includes(props.pluginType)
 })
 
 const getRequestBody = computed((): Record<string, any> => {
@@ -1066,7 +1064,7 @@ const saveFormData = async (): Promise<void> => {
 
 // for fetching the plugin form schema
 const schemaUrl = computed((): string => {
-  const pluginType = !treatAsCredential.value ? props.pluginType : credentialMetaData[props.pluginType]?.schemaEndpoint
+  const pluginType = !treatAsCredential.value ? props.pluginType : CREDENTIAL_METADATA[props.pluginType]?.schemaEndpoint
   const schemaEndpoint = !treatAsCredential.value ? endpoints.form[props.config.app].pluginSchema : endpoints.form[props.config.app].credentialSchema
 
   let url = `${props.config.apiBaseUrl}${schemaEndpoint}`
@@ -1092,8 +1090,8 @@ onBeforeMount(async () => {
     // handling for plugin credentials (Konnect)
     if (treatAsCredential.value && props.config.app === 'konnect') {
       // credential schema endpoints don't exist for Konnect, so we use hard-coded schemas
-      const pluginType = credentialMetaData[props.pluginType]?.schemaEndpoint
-      const data = credentialSchemas[pluginType]
+      const pluginType = CREDENTIAL_METADATA[props.pluginType]?.schemaEndpoint
+      const data = CREDENTIAL_SCHEMAS[pluginType]
 
       schema.value = buildFormSchema('', data, {})
       schemaLoading.value = false
diff --git a/packages/entities/entities-plugins/src/components/PluginIcon.vue b/packages/entities/entities-plugins/src/components/PluginIcon.vue
index 435e79f684..479d251274 100644
--- a/packages/entities/entities-plugins/src/components/PluginIcon.vue
+++ b/packages/entities/entities-plugins/src/components/PluginIcon.vue
@@ -10,7 +10,7 @@
 
 <script setup lang="ts">
 import { computed, ref } from 'vue'
-import composables from '../composables'
+import { getPluginIconURL } from '../definitions/metadata'
 
 const defaultIcon = new URL('../assets/images/plugin-icons/missing.png', import.meta.url).href
 
@@ -32,7 +32,7 @@ const props = defineProps({
 })
 
 const img = ref<HTMLImageElement>()
-const iconSrc = computed((): string => props.name ? composables.getPluginIconURL(props.name) : '')
+const iconSrc = computed((): string => props.name ? getPluginIconURL(props.name) : '')
 
 const onError = () => {
   if (img.value) {
diff --git a/packages/entities/entities-plugins/src/components/PluginList.vue b/packages/entities/entities-plugins/src/components/PluginList.vue
index a59b871109..4d6b6a44c3 100644
--- a/packages/entities/entities-plugins/src/components/PluginList.vue
+++ b/packages/entities/entities-plugins/src/components/PluginList.vue
@@ -55,7 +55,7 @@
         <div class="name-cell-wrapper">
           <PluginIcon
             class="plugin-icon"
-            :name="pluginMetaData.getImageName(row.name)"
+            :name="row.name"
             :width="24"
           />
           <div class="info-wrapper">
diff --git a/packages/entities/entities-plugins/src/composables/index.ts b/packages/entities/entities-plugins/src/composables/index.ts
index ce006510e9..79e12f0980 100644
--- a/packages/entities/entities-plugins/src/composables/index.ts
+++ b/packages/entities/entities-plugins/src/composables/index.ts
@@ -1,12 +1,11 @@
 import useI18n from './useI18n'
 import usePluginHelpers from './usePluginHelpers'
-import { getPluginIconURL, usePluginMetaData } from './usePluginMeta'
+import { usePluginMetaData } from './usePluginMeta'
 import { useSchemas } from './useSchemas'
 
 // All composables must be exported as part of the default object for Cypress test stubs
 export default {
   useI18n,
-  getPluginIconURL,
   usePluginMetaData,
   usePluginHelpers,
   useSchemas,
diff --git a/packages/entities/entities-plugins/src/composables/useI18n.ts b/packages/entities/entities-plugins/src/composables/useI18n.ts
index 337ff02756..d8cbd45dd7 100644
--- a/packages/entities/entities-plugins/src/composables/useI18n.ts
+++ b/packages/entities/entities-plugins/src/composables/useI18n.ts
@@ -1,11 +1,13 @@
 import { createI18n, i18nTComponent } from '@kong-ui-public/i18n'
 import english from '../locales/en.json'
 
+export type MessageSource = typeof english
+
 export default function useI18n() {
-  const i18n = createI18n<typeof english>('en-us', english)
+  const i18n = createI18n<MessageSource>('en-us', english)
 
   return {
     i18n,
-    i18nT: i18nTComponent<typeof english>(i18n), // Translation component <i18n-t>
+    i18nT: i18nTComponent<MessageSource>(i18n), // Translation component <i18n-t>
   }
 }
diff --git a/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts b/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
index 3c7059d672..4571dd2df5 100644
--- a/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
+++ b/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
@@ -1,8 +1,10 @@
 import type { ConfigurationSchema } from '@kong-ui-public/entities-shared'
-import { ConfigurationSchemaType } from '@kong-ui-public/entities-shared'
+import { ConfigurationSchemaType, useStringHelpers } from '@kong-ui-public/entities-shared'
 import type { PluginType } from '../types'
 
 export default function useHelpers() {
+  const { capitalize } = useStringHelpers()
+
   const METHOD_KEYS = ['methods', 'logout_methods']
 
   /**
@@ -154,6 +156,11 @@ export default function useHelpers() {
     }
   }
 
+  // _ gets converted to space and capitalize each word
+  const formatPluginFieldLabel = (label: string) => {
+    return capitalize(label.replace(/_/g, ' '))
+  }
+
   return {
     setFieldType,
     getPluginCards,
@@ -161,5 +168,6 @@ export default function useHelpers() {
     unFlattenObject,
     isObjectEmpty,
     unsetNullForeignKey,
+    formatPluginFieldLabel,
   }
 }
diff --git a/packages/entities/entities-plugins/src/composables/usePluginMeta.ts b/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
index d734a47056..28a30183d0 100644
--- a/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
+++ b/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
@@ -1,735 +1,31 @@
+import { CREDENTIAL_METADATA, PLUGIN_METADATA } from '../definitions/metadata'
 import type { PluginMetaData } from '../types'
-import { PluginGroup, PluginScope } from '../types'
 import useI18n from './useI18n'
-import { getColumnFields } from './plugin-schemas/typedefs'
-import { aclSchema } from './plugin-schemas/ACL'
-import aclsCredentialsSchema from './plugin-schemas/credentials/mockedAclSchema.json'
-import { basicAuthSchema } from './plugin-schemas/BasicAuth'
-import basicAuthCredentialsSchema from './plugin-schemas/credentials/mockedBasicAuthSchema.json'
-import { keyAuthSchema } from './plugin-schemas/KeyAuth'
-import keyAuthCredentialsSchema from './plugin-schemas/credentials/mockedKeyAuthSchema.json'
-import { hmacAuthSchema } from './plugin-schemas/HMAC'
-import hmacAuthCredentialsSchema from './plugin-schemas/credentials/mockedHmacAuthSchema.json'
-import { jwtSecretSchema } from './plugin-schemas/JWT'
-import jwtCredentialsSchema from './plugin-schemas/credentials/mockedJwtSchema.json'
-import OAuth2Schema from './plugin-schemas/OAuth2'
-import oauthCredentialSchema from './plugin-schemas/credentials/mockedOAuthSchema.json'
-import KeyAuthEncSchema from './plugin-schemas/KeyAuthEnc'
-import keyEncCredentialSchema from './plugin-schemas/credentials/mockedKeyEncAuthSchema.json'
-
-/**
- * Gets the URL for a plugin icon
- *
- * Note: some plugins may have icons which named differently from their names
- * (e.g. `pre-function` -> `kong-function`)
- *
- * Hint: you can use the helper `getImageName` returned by `usePluginMetaData`
- *
- * @param imageName the name of the plugin icon's image
- * @returns the URL for the plugin icon
- */
-export const getPluginIconURL = (imageName: string) => {
-  return new URL(`../assets/images/plugin-icons/${imageName}.png`, import.meta.url).href
-}
 
 export const usePluginMetaData = () => {
   const { i18n: { t } } = useI18n()
 
-  const pluginMetaData: Record<string, PluginMetaData> = {
-    'basic-auth': {
-      description: t('plugins.meta.basic-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.basic-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'hmac-auth': {
-      description: t('plugins.meta.hmac-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.hmac-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'jwt-signer': {
-      description: t('plugins.meta.jwt-signer.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.jwt-signer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    jwt: {
-      description: t('plugins.meta.jwt.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.jwt.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'key-auth': {
-      description: t('plugins.meta.key-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.key-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'key-auth-enc': {
-      description: t('plugins.meta.key-auth-enc.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.key-auth-enc.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ldap-auth-advanced': {
-      description: t('plugins.meta.ldap-auth-advanced.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.ldap-auth-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ldap-auth': {
-      description: t('plugins.meta.ldap-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.ldap-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'oauth2-introspection': {
-      description: t('plugins.meta.oauth2-introspection.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.oauth2-introspection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    oauth2: {
-      description: t('plugins.meta.oauth2.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.oauth2.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'openid-connect': {
-      description: t('plugins.meta.openid-connect.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.openid-connect.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'mtls-auth': {
-      description: t('plugins.meta.mtls-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.mtls-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'vault-auth': {
-      description: t('plugins.meta.vault-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.vault-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'bot-detection': {
-      description: t('plugins.meta.bot-detection.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.bot-detection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    cors: {
-      description: t('plugins.meta.cors.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.cors.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ip-restriction': {
-      description: t('plugins.meta.ip-restriction.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.ip-restriction.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    opa: {
-      description: t('plugins.meta.opa.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.opa.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'kubernetes-sidecar-injector': {
-      description: t('plugins.meta.kubernetes-sidecar-injector.description'),
-      group: PluginGroup.DEPLOYMENT,
-      isEnterprise: false,
-      name: t('plugins.meta.kubernetes-sidecar-injector.name'),
-      scope: [PluginScope.GLOBAL],
-    },
-    'request-validator': {
-      description: t('plugins.meta.request-validator.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.request-validator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    acl: {
-      description: t('plugins.meta.acl.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.acl.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    canary: {
-      description: t('plugins.meta.canary.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.canary.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'forward-proxy': {
-      description: t('plugins.meta.forward-proxy.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.forward-proxy.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'proxy-cache': {
-      description: t('plugins.meta.proxy-cache.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.proxy-cache.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'proxy-cache-advanced': {
-      description: t('plugins.meta.proxy-cache-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.proxy-cache-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-      imageName: 'proxy-cache',
-    },
-    'graphql-proxy-cache-advanced': {
-      description: t('plugins.meta.graphql-proxy-cache-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.graphql-proxy-cache-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'graphql',
-    },
-    'rate-limiting-advanced': {
-      description: t('plugins.meta.rate-limiting-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.rate-limiting-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'rate-limiting': {
-      description: t('plugins.meta.rate-limiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.rate-limiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'graphql-rate-limiting-advanced': {
-      description: t('plugins.meta.graphql-rate-limiting-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.graphql-rate-limiting-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    mocking: {
-      description: t('plugins.meta.mocking.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.mocking.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-size-limiting': {
-      description: t('plugins.meta.request-size-limiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.request-size-limiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-termination': {
-      description: t('plugins.meta.request-termination.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.request-termination.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'response-ratelimiting': {
-      description: t('plugins.meta.response-ratelimiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.response-ratelimiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'route-by-header': {
-      description: t('plugins.meta.route-by-header.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.route-by-header.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-proxy': {
-      description: t('plugins.meta.ai-proxy.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-proxy.name'),
-      scope: [PluginScope.ROUTE],
-    },
-    'ai-prompt-decorator': {
-      description: t('plugins.meta.ai-prompt-decorator.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-decorator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-prompt-template': {
-      description: t('plugins.meta.ai-prompt-template.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-template.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ai-prompt-guard': {
-      description: t('plugins.meta.ai-prompt-guard.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-guard.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-request-transformer': {
-      description: t('plugins.meta.ai-request-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-request-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ai-response-transformer': {
-      description: t('plugins.meta.ai-response-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-response-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'aws-lambda': {
-      description: t('plugins.meta.aws-lambda.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: false,
-      name: t('plugins.meta.aws-lambda.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'azure-functions': {
-      description: t('plugins.meta.azure-functions.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.azure-functions.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    openwhisk: {
-      description: t('plugins.meta.openwhisk.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: false,
-      name: t('plugins.meta.openwhisk.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'pre-function': {
-      description: t('plugins.meta.pre-function.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.pre-function.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-      imageName: 'kong-function',
-    },
-    'post-function': {
-      description: t('plugins.meta.post-function.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.post-function.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-      imageName: 'kong-function',
-    },
-    datadog: {
-      description: t('plugins.meta.datadog.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.datadog.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    prometheus: {
-      description: t('plugins.meta.prometheus.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.prometheus.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    zipkin: {
-      description: t('plugins.meta.zipkin.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.zipkin.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    collector: {
-      description: t('plugins.meta.collector.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.collector.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'response-transformer-advanced': {
-      description: t('plugins.meta.response-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.response-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'correlation-id': {
-      description: t('plugins.meta.correlation-id.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.correlation-id.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-transformer-advanced': {
-      description: t('plugins.meta.request-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.request-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'request-transformer': {
-      description: t('plugins.meta.request-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.request-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'response-transformer': {
-      description: t('plugins.meta.response-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.response-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'route-transformer-advanced': {
-      description: t('plugins.meta.route-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.route-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'kafka-upstream': {
-      description: t('plugins.meta.kafka-upstream.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.kafka-upstream.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    degraphql: {
-      description: t('plugins.meta.degraphql.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.degraphql.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'exit-transformer': {
-      description: t('plugins.meta.exit-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.exit-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'exit-transformer',
-    },
-    jq: {
-      description: t('plugins.meta.jq.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.jq.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'jq',
-    },
-    'file-log': {
-      description: t('plugins.meta.file-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.file-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'http-log': {
-      description: t('plugins.meta.http-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.http-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    loggly: {
-      description: t('plugins.meta.loggly.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.loggly.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'statsd-advanced': {
-      description: t('plugins.meta.statsd-advanced.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.statsd-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    statsd: {
-      description: t('plugins.meta.statsd.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.statsd.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    syslog: {
-      description: t('plugins.meta.syslog.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.syslog.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'tcp-log': {
-      description: t('plugins.meta.tcp-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.tcp-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'udp-log': {
-      description: t('plugins.meta.udp-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.udp-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'kafka-log': {
-      description: t('plugins.meta.kafka-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: true,
-      name: t('plugins.meta.kafka-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    session: {
-      description: t('plugins.meta.session.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.session.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'upstream-tls': {
-      description: t('plugins.meta.upstream-tls.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.upstream-tls.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'application-registration': {
-      description: t('plugins.meta.application-registration.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.application-registration.name'),
-      scope: [PluginScope.SERVICE],
-    },
-    'konnect-application-auth': {
-      description: t('plugins.meta.konnect-application-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.konnect-application-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE],
-      imageName: 'application-registration',
-    },
-    acme: {
-      description: t('plugins.meta.acme.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.acme.name'),
-      scope: [PluginScope.GLOBAL],
-    },
-    'grpc-gateway': {
-      description: t('plugins.meta.grpc-gateway.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.grpc-gateway.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'grpc-web': {
-      description: t('plugins.meta.grpc-web.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.grpc-web.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'upstream-timeout': {
-      description: t('plugins.meta.upstream-timeout.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.upstream-timeout.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    // New in Kong 3.0
-    opentelemetry: {
-      description: t('plugins.meta.opentelemetry.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.opentelemetry.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'websocket-validator': {
-      description: t('plugins.meta.websocket-validator.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.websocket-validator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'websocket-size-limit': {
-      description: t('plugins.meta.websocket-size-limit.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.websocket-size-limit.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'tls-metadata-headers': {
-      description: t('plugins.meta.tls-metadata-headers.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.tls-metadata-headers.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'tls-handshake-modifier': {
-      description: t('plugins.meta.tls-handshake-modifier.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.tls-handshake-modifier.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'oas-validation': {
-      description: t('plugins.meta.oas-validation.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.oas-validation.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'jwe-decrypt': {
-      description: t('plugins.meta.jwe-decrypt.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.jwe-decrypt.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'xml-threat-protection': {
-      description: t('plugins.meta.xml-threat-protection.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.xml-threat-protection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    saml: {
-      description: t('plugins.meta.saml.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.saml.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'app-dynamics': {
-      description: t('plugins.meta.app-dynamics.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.app-dynamics.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-  }
+  const pluginMetaData: Record<string, PluginMetaData> = {}
+  const credentialMetaData: Record<string, any> = {}
 
-  const credentialMetaData: Record<string, any> = {
-    acl: {
-      title: t('plugins.meta.acl.name'),
-      plugin: 'acl',
-      schema: aclSchema,
-      name: t('plugins.meta.acl.credential_name'),
-      endpoint: '/acls',
-      schemaEndpoint: 'acls',
-      fields: getColumnFields(aclSchema),
-      applyCredentialButtonText: 'Add group to consumer',
-    },
-    'basic-auth': {
-      title: t('plugins.meta.basic-auth.name'),
-      plugin: 'basic-auth',
-      schema: basicAuthSchema,
-      name: t('plugins.meta.basic-auth.credential_name'),
-      endpoint: '/basic-auth',
-      schemaEndpoint: 'basicauth_credentials',
-      fields: getColumnFields(basicAuthSchema),
-    },
-    'key-auth': {
-      title: t('plugins.meta.key-auth.name'),
-      plugin: 'key-auth',
-      schema: keyAuthSchema,
-      name: t('plugins.meta.key-auth.credential_name'),
-      endpoint: '/key-auth',
-      schemaEndpoint: 'keyauth_credentials',
-      fields: getColumnFields(keyAuthSchema),
-    },
-    'key-auth-enc': {
-      title: t('plugins.meta.key-auth-enc.name'),
-      plugin: 'key-auth-enc',
-      schema: KeyAuthEncSchema,
-      name: t('plugins.meta.key-auth-enc.credential_name'),
-      endpoint: '/key-auth-enc',
-      schemaEndpoint: 'keyauth_enc_credentials',
-      fields: getColumnFields(KeyAuthEncSchema),
-    },
-    oauth2: {
-      title: t('plugins.meta.oauth2.name'),
-      plugin: 'oauth2',
-      schema: OAuth2Schema,
-      name: t('plugins.meta.oauth2.credential_name'),
-      endpoint: '/oauth2',
-      schemaEndpoint: 'oauth2_credentials',
-      fields: getColumnFields(OAuth2Schema),
-    },
-    'hmac-auth': {
-      title: t('plugins.meta.hmac-auth.name'),
-      plugin: 'hmac-auth',
-      schema: hmacAuthSchema,
-      name: t('plugins.meta.hmac-auth.credential_name'),
-      endpoint: '/hmac-auth',
-      schemaEndpoint: 'hmacauth_credentials',
-      fields: getColumnFields(hmacAuthSchema),
-    },
-    jwt: {
-      title: t('plugins.meta.jwt.name'),
-      plugin: 'jwt',
-      schema: jwtSecretSchema,
-      name: t('plugins.meta.jwt.credential_name'),
-      endpoint: '/jwt',
-      schemaEndpoint: 'jwt_secrets',
-      fields: {
-        id: {},
-        key: {},
-        algorithm: {},
-      },
-    },
+  for (const [key, value] of Object.entries(PLUGIN_METADATA)) {
+    pluginMetaData[key] = {
+      ...value,
+      name: t(value.nameKey),
+      description: t(value.descriptionKey),
+    }
   }
 
-  // Used by Konnect, since there is currently no API endpoints to fetch credential schemas from
-  const credentialSchemas: Record<string, any> = {
-    acls: aclsCredentialsSchema,
-    basicauth_credentials: basicAuthCredentialsSchema,
-    keyauth_credentials: keyAuthCredentialsSchema,
-    keyauth_enc_credentials: keyEncCredentialSchema,
-    oauth2_credentials: oauthCredentialSchema,
-    hmacauth_credentials: hmacAuthCredentialsSchema,
-    jwt_secrets: jwtCredentialsSchema,
+  for (const [key, value] of Object.entries(CREDENTIAL_METADATA)) {
+    credentialMetaData[key] = {
+      ...value,
+      title: t(value.titleKey),
+    }
   }
 
   const getDisplayName = (name: string) => {
     return pluginMetaData[name]?.name || name
   }
 
-  const getImageName = (name: string) => {
-    return pluginMetaData[name]?.imageName || name
-  }
-
-  return { pluginMetaData, credentialMetaData, credentialSchemas, getDisplayName, getImageName }
+  return { pluginMetaData, credentialMetaData, credentialSchemas: CREDENTIAL_METADATA, getDisplayName }
 }
diff --git a/packages/entities/entities-plugins/src/composables/useSchemas.ts b/packages/entities/entities-plugins/src/composables/useSchemas.ts
index 26f917f8a5..bcb7efbec7 100644
--- a/packages/entities/entities-plugins/src/composables/useSchemas.ts
+++ b/packages/entities/entities-plugins/src/composables/useSchemas.ts
@@ -1,26 +1,28 @@
 import { useStringHelpers } from '@kong-ui-public/entities-shared'
+import type { FGCollapsibleOptions, FGSlots } from '@kong-ui-public/forms'
 import { customFields, getSharedFormName } from '@kong-ui-public/forms'
-import type { CustomSchemas } from '../types'
-import { aiPromptDecoratorSchema } from './plugin-schemas/AIPromptDecorator'
-import { aiPromptTemplateSchema } from './plugin-schemas/AIPromptTemplate'
-import { applicationRegistrationSchema } from './plugin-schemas/ApplicationRegistration'
-import { ArrayStringFieldSchema } from './plugin-schemas/ArrayStringFieldSchema'
-import { dataDogSchema } from './plugin-schemas/Datadog'
-import { graphqlRateLimitingAdvancedSchema } from './plugin-schemas/GraphQLRateLimitingAdvanced'
-import { jwtSchema } from './plugin-schemas/JWT'
-import { kafkaSchema } from './plugin-schemas/Kafka'
-import { mockingSchema } from './plugin-schemas/Mocking'
-import { preFunctionSchema } from './plugin-schemas/PreFunction'
-import { rateLimitingSchema } from './plugin-schemas/RateLimiting'
-import { requestTransformerAdvancedSchema } from './plugin-schemas/RequestTransformerAdvanced'
-import RequestValidatorSchema from './plugin-schemas/RequestValidator'
-import { routeByHeaderSchema } from './plugin-schemas/RouteByHeader'
-import { samlSchema } from './plugin-schemas/SAML'
-import { statsDSchema } from './plugin-schemas/StatsD'
-import { statsDAdvancedSchema } from './plugin-schemas/StatsDAdvanced'
-import { vaultAuthSchema } from './plugin-schemas/VaultAuth'
-import ZipkinSchema from './plugin-schemas/Zipkin'
-import typedefs from './plugin-schemas/typedefs'
+import { PLUGIN_METADATA } from '../definitions/metadata'
+import { aiPromptDecoratorSchema } from '../definitions/schemas/AIPromptDecorator'
+import { aiPromptTemplateSchema } from '../definitions/schemas/AIPromptTemplate'
+import { applicationRegistrationSchema } from '../definitions/schemas/ApplicationRegistration'
+import { ArrayStringFieldSchema } from '../definitions/schemas/ArrayStringFieldSchema'
+import { dataDogSchema } from '../definitions/schemas/Datadog'
+import { graphqlRateLimitingAdvancedSchema } from '../definitions/schemas/GraphQLRateLimitingAdvanced'
+import { jwtSchema } from '../definitions/schemas/JWT'
+import { kafkaSchema } from '../definitions/schemas/Kafka'
+import { mockingSchema } from '../definitions/schemas/Mocking'
+import { preFunctionSchema } from '../definitions/schemas/PreFunction'
+import { rateLimitingSchema } from '../definitions/schemas/RateLimiting'
+import { requestTransformerAdvancedSchema } from '../definitions/schemas/RequestTransformerAdvanced'
+import RequestValidatorSchema from '../definitions/schemas/RequestValidator'
+import { routeByHeaderSchema } from '../definitions/schemas/RouteByHeader'
+import { samlSchema } from '../definitions/schemas/SAML'
+import { statsDSchema } from '../definitions/schemas/StatsD'
+import { statsDAdvancedSchema } from '../definitions/schemas/StatsDAdvanced'
+import { vaultAuthSchema } from '../definitions/schemas/VaultAuth'
+import ZipkinSchema from '../definitions/schemas/Zipkin'
+import typedefs from '../definitions/schemas/typedefs'
+import { type CustomSchemas } from '../types'
 import useI18n from './useI18n'
 import usePluginHelpers from './usePluginHelpers'
 
@@ -33,12 +35,8 @@ export interface Field extends Record<string, any>{
 export interface Group {
   legend?: string
   fields?: Field[]
-  collapsible?: boolean
-  /**
-   * Whether the group is collapsed by default
-   * @default false
-   */
-  collapsedByDefault?: boolean
+  collapsible?: FGCollapsibleOptions
+  slots?: FGSlots
 }
 
 export interface Schema {
@@ -215,53 +213,102 @@ export const useSchemas = (entityId?: string, options?: UseSchemasOptions) => {
       buildFormSchema(inputSchema[fieldName], fieldName, inputSchema, formModel, formSchema, frontendSchema)
     })
 
+    const pluginName = formModel.name
+
+    // KM-18 KM-21 related branch
     // Do not group fields for plugins with custom layouts
-    if (!getSharedFormName(formModel.name) && options?.groupFields) {
-      const commonFields = []
-      const requiredFields = []
+    if (!getSharedFormName(pluginName) && options?.groupFields) {
+      const metadata = PLUGIN_METADATA[pluginName]
+
+      const generalFields = []
+      const hoistedFields = []
       const advancedFields = []
 
+      // Transform the any of field sets into a flatten set for fast lookup
+      // The boolean values help us to know if we have unknown fields in the plugin metadata
+      const ruledFields: Record<string, boolean> = {}
+
+      if (metadata?.fieldRules) {
+        const flattenRules = [
+          ...metadata.fieldRules.atLeastOneOf ?? [],
+          ...metadata.fieldRules.onlyOneOf ?? [],
+          ...metadata.fieldRules.mutuallyRequired ?? [],
+        ]
+
+        if (metadata.fieldRules.onlyOneOfMutuallyRequired) {
+          for (const ruleSet of metadata.fieldRules.onlyOneOfMutuallyRequired) {
+            flattenRules.push(...ruleSet)
+          }
+        }
+
+        for (const fields of flattenRules) {
+          for (const field of fields) {
+            // We flatten the schema with hyphen notation
+            ruledFields[field.replace(/-/g, '_').replace(/\./g, '-')] = false // Not visited yet
+          }
+        }
+      }
+
       for (const field of formSchema.fields!) {
         // Fields that don't start with 'config-' are considered common fields
         if (!field.model.startsWith('config-')) {
-          commonFields.push(field)
+          generalFields.push(field)
           continue
         }
 
-        if (field.required) {
-          requiredFields.push(field)
+        // A field is hoisted if any of the following is true:
+        // - It has a `required` property and it's set to true
+        // - Is a field with one or more field rules
+        if (field.required || ruledFields[field.model] !== undefined) {
+          if (ruledFields[field.model] === false) {
+            ruledFields[field.model] = true // Mark this as visited
+          }
+          hoistedFields.push(field)
           continue
         }
 
+        // Otherwise, consider it an advanced field
         advancedFields.push(field)
       }
 
-      const fieldGroups: Group[] = []
-
-      if (commonFields.length > 0) {
-        fieldGroups.push({
-          legend: t('plugins.form.grouping.common_fields'),
-          fields: commonFields.sort(sortFieldByOrder),
-          collapsible: true,
-          collapsedByDefault: false,
-        })
+      // For better dev: warn about unknown checked fields
+      const unknownRuleFields = Object.entries(ruledFields)
+        .filter(([, visited]) => !visited)
+        .map(([field]) => field.replace(/-/g, '.').replace(/_/g, '-'))
+      if (unknownRuleFields.length > 0) {
+        console.warn(`Unknown checked fields for plugin ${pluginName}: ${unknownRuleFields.join(', ')}`)
       }
 
-      if (requiredFields.length > 0) {
+      const fieldGroups: Group[] = []
+
+      if (generalFields.length > 0) {
         fieldGroups.push({
-          legend: t('plugins.form.grouping.required_fields'),
-          fields: requiredFields.sort(sortFieldByOrderAndModel),
-          collapsible: true,
-          collapsedByDefault: false,
+          fields: generalFields.sort(sortFieldByOrder),
+          collapsible: {
+            title: t('plugins.form.grouping.general_information.title'),
+            description: t('plugins.form.grouping.general_information.description'),
+          },
         })
       }
 
-      if (advancedFields.length > 0) {
+      if (hoistedFields.length > 0 || advancedFields.length > 0) {
         fieldGroups.push({
-          legend: t('plugins.form.grouping.advanced_fields'),
-          fields: advancedFields.sort(sortFieldByOrderAndModel),
-          collapsible: true,
-          collapsedByDefault: true,
+          fields: hoistedFields.sort(sortFieldByOrderAndModel),
+          collapsible: {
+            title: t('plugins.form.grouping.plugin_configuration.title'),
+            description: t('plugins.form.grouping.plugin_configuration.description'),
+            nestedCollapsible: {
+              fields: advancedFields.sort(sortFieldByOrderAndModel),
+              triggerLabel: {
+                expand: t('plugins.form.grouping.advanced_parameters.view'),
+                collapse: t('plugins.form.grouping.advanced_parameters.hide'),
+              },
+            },
+          },
+          slots: {
+            beforeContent: 'plugin-config-before-content',
+            emptyState: 'plugin-config-empty-state',
+          },
         })
       }
 
@@ -297,7 +344,7 @@ export const useSchemas = (entityId?: string, options?: UseSchemasOptions) => {
 
   /**
    * This is a helper function for mergeSchema. It takes in a field and depending on the field type,
-   * sets the appropiate properties for it to be consumed by VFG (vue form generator)
+   * sets the appropriate properties for it to be consumed by VFG (vue form generator)
    * @param {Object} field the field coming from either the backend schema OR a recursive call to be merged with the frontend schema
    * @param {string} key the current backend schema key we are looping over
    * @param {Object} inputSchema this is the inputSchema we are building to be consumed later by parseSchema
diff --git a/packages/entities/entities-plugins/src/definitions/metadata.ts b/packages/entities/entities-plugins/src/definitions/metadata.ts
new file mode 100644
index 0000000000..e279d65c59
--- /dev/null
+++ b/packages/entities/entities-plugins/src/definitions/metadata.ts
@@ -0,0 +1,766 @@
+import { PluginGroup, PluginScope, type PluginMetaData } from '../types'
+import { type MessageSource as I18nMessageSource } from '../composables/useI18n'
+import { getColumnFields } from './schemas/typedefs'
+import { aclSchema } from './schemas/ACL'
+import aclsCredentialsSchema from './schemas/credentials/mockedAclSchema.json'
+import { basicAuthSchema } from './schemas/BasicAuth'
+import basicAuthCredentialsSchema from './schemas/credentials/mockedBasicAuthSchema.json'
+import { keyAuthSchema } from './schemas/KeyAuth'
+import keyAuthCredentialsSchema from './schemas/credentials/mockedKeyAuthSchema.json'
+import { hmacAuthSchema } from './schemas/HMAC'
+import hmacAuthCredentialsSchema from './schemas/credentials/mockedHmacAuthSchema.json'
+import { jwtSecretSchema } from './schemas/JWT'
+import jwtCredentialsSchema from './schemas/credentials/mockedJwtSchema.json'
+import OAuth2Schema from './schemas/OAuth2'
+import oauthCredentialSchema from './schemas/credentials/mockedOAuthSchema.json'
+import KeyAuthEncSchema from './schemas/KeyAuthEnc'
+import keyEncCredentialSchema from './schemas/credentials/mockedKeyEncAuthSchema.json'
+
+/**
+ * The *static* metadata of all plugins for faster access with less memory footprint.
+ *
+ * Please be noted that the `name` and `description` fields are not populated here, as they depends
+ * on i18n resources. You may use the `usePluginMetaData` composable instead to get the localized metadata.
+ */
+export const PLUGIN_METADATA: Record<string, Omit<PluginMetaData<I18nMessageSource>, 'name' | 'description'>> = {
+  'basic-auth': {
+    descriptionKey: 'plugins.meta.basic-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.basic-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'hmac-auth': {
+    descriptionKey: 'plugins.meta.hmac-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.hmac-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'jwt-signer': {
+    descriptionKey: 'plugins.meta.jwt-signer.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jwt-signer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  jwt: {
+    descriptionKey: 'plugins.meta.jwt.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.jwt.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'key-auth': {
+    descriptionKey: 'plugins.meta.key-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.key-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'key-auth-enc': {
+    descriptionKey: 'plugins.meta.key-auth-enc.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.key-auth-enc.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ldap-auth-advanced': {
+    descriptionKey: 'plugins.meta.ldap-auth-advanced.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ldap-auth-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ldap-auth': {
+    descriptionKey: 'plugins.meta.ldap-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.ldap-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'oauth2-introspection': {
+    descriptionKey: 'plugins.meta.oauth2-introspection.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.oauth2-introspection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  oauth2: {
+    descriptionKey: 'plugins.meta.oauth2.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.oauth2.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'openid-connect': {
+    descriptionKey: 'plugins.meta.openid-connect.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.openid-connect.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'mtls-auth': {
+    descriptionKey: 'plugins.meta.mtls-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.mtls-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'vault-auth': {
+    descriptionKey: 'plugins.meta.vault-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.vault-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'bot-detection': {
+    descriptionKey: 'plugins.meta.bot-detection.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.bot-detection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  cors: {
+    descriptionKey: 'plugins.meta.cors.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.cors.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ip-restriction': {
+    descriptionKey: 'plugins.meta.ip-restriction.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.ip-restriction.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    fieldRules: {
+      atLeastOneOf: [['config.allow', 'config.deny']],
+    },
+  },
+  opa: {
+    descriptionKey: 'plugins.meta.opa.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.opa.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'kubernetes-sidecar-injector': {
+    descriptionKey: 'plugins.meta.kubernetes-sidecar-injector.description',
+    group: PluginGroup.DEPLOYMENT,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.kubernetes-sidecar-injector.name',
+    scope: [PluginScope.GLOBAL],
+  },
+  'request-validator': {
+    descriptionKey: 'plugins.meta.request-validator.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.request-validator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.body_schema', 'config.parameter_schema']],
+    },
+  },
+  acl: {
+    descriptionKey: 'plugins.meta.acl.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.acl.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    fieldRules: {
+      onlyOneOf: [['config.allow', 'config.deny']],
+    },
+  },
+  canary: {
+    descriptionKey: 'plugins.meta.canary.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.canary.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    fieldRules: {
+      atLeastOneOf: [['config.upstream_uri', 'config.upstream_host', 'config.upstream_port']],
+    },
+  },
+  'forward-proxy': {
+    descriptionKey: 'plugins.meta.forward-proxy.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.forward-proxy.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      onlyOneOfMutuallyRequired: [
+        [
+          ['config.http_proxy_host', 'config.http_proxy_port'],
+          ['config.https_proxy_host', 'config.https_proxy_port'],
+        ],
+      ],
+    },
+  },
+  'proxy-cache': {
+    descriptionKey: 'plugins.meta.proxy-cache.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.proxy-cache.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'proxy-cache-advanced': {
+    descriptionKey: 'plugins.meta.proxy-cache-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.proxy-cache-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    imageName: 'proxy-cache',
+  },
+  'graphql-proxy-cache-advanced': {
+    descriptionKey: 'plugins.meta.graphql-proxy-cache-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.graphql-proxy-cache-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'graphql',
+  },
+  'rate-limiting-advanced': {
+    descriptionKey: 'plugins.meta.rate-limiting-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.rate-limiting-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'rate-limiting': {
+    descriptionKey: 'plugins.meta.rate-limiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.rate-limiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    fieldRules: {
+      atLeastOneOf: [['config.second', 'config.minute', 'config.hour', 'config.day', 'config.month', 'config.year']],
+    },
+  },
+  'graphql-rate-limiting-advanced': {
+    descriptionKey: 'plugins.meta.graphql-rate-limiting-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.graphql-rate-limiting-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  mocking: {
+    descriptionKey: 'plugins.meta.mocking.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.mocking.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.api_specification_filename', 'config.api_specification']],
+    },
+  },
+  'request-size-limiting': {
+    descriptionKey: 'plugins.meta.request-size-limiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-size-limiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'request-termination': {
+    descriptionKey: 'plugins.meta.request-termination.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-termination.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'response-ratelimiting': {
+    descriptionKey: 'plugins.meta.response-ratelimiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-ratelimiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'route-by-header': {
+    descriptionKey: 'plugins.meta.route-by-header.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.route-by-header.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'ai-proxy': {
+    descriptionKey: 'plugins.meta.ai-proxy.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-proxy.name',
+    scope: [PluginScope.ROUTE],
+  },
+  'ai-prompt-decorator': {
+    descriptionKey: 'plugins.meta.ai-prompt-decorator.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-decorator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'ai-prompt-template': {
+    descriptionKey: 'plugins.meta.ai-prompt-template.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-template.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ai-prompt-guard': {
+    descriptionKey: 'plugins.meta.ai-prompt-guard.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-guard.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'ai-request-transformer': {
+    descriptionKey: 'plugins.meta.ai-request-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-request-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ai-response-transformer': {
+    descriptionKey: 'plugins.meta.ai-response-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-response-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'aws-lambda': {
+    descriptionKey: 'plugins.meta.aws-lambda.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.aws-lambda.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'azure-functions': {
+    descriptionKey: 'plugins.meta.azure-functions.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.azure-functions.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  openwhisk: {
+    descriptionKey: 'plugins.meta.openwhisk.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.openwhisk.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'pre-function': {
+    descriptionKey: 'plugins.meta.pre-function.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.pre-function.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    imageName: 'kong-function',
+  },
+  'post-function': {
+    descriptionKey: 'plugins.meta.post-function.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.post-function.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    imageName: 'kong-function',
+  },
+  datadog: {
+    descriptionKey: 'plugins.meta.datadog.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.datadog.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  prometheus: {
+    descriptionKey: 'plugins.meta.prometheus.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.prometheus.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  zipkin: {
+    descriptionKey: 'plugins.meta.zipkin.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.zipkin.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  collector: {
+    descriptionKey: 'plugins.meta.collector.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.collector.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'response-transformer-advanced': {
+    descriptionKey: 'plugins.meta.response-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'correlation-id': {
+    descriptionKey: 'plugins.meta.correlation-id.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.correlation-id.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'request-transformer-advanced': {
+    descriptionKey: 'plugins.meta.request-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.request-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'request-transformer': {
+    descriptionKey: 'plugins.meta.request-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'response-transformer': {
+    descriptionKey: 'plugins.meta.response-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'route-transformer-advanced': {
+    descriptionKey: 'plugins.meta.route-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.route-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.path', 'config.port', 'config.host']],
+    },
+  },
+  'kafka-upstream': {
+    descriptionKey: 'plugins.meta.kafka-upstream.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.kafka-upstream.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  degraphql: {
+    descriptionKey: 'plugins.meta.degraphql.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.degraphql.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'exit-transformer': {
+    descriptionKey: 'plugins.meta.exit-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.exit-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'exit-transformer',
+  },
+  jq: {
+    descriptionKey: 'plugins.meta.jq.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jq.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'jq',
+    fieldRules: {
+      atLeastOneOf: [['config.request_jq_program', 'config.response_jq_program']],
+    },
+  },
+  'file-log': {
+    descriptionKey: 'plugins.meta.file-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.file-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'http-log': {
+    descriptionKey: 'plugins.meta.http-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.http-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  loggly: {
+    descriptionKey: 'plugins.meta.loggly.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.loggly.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'statsd-advanced': {
+    descriptionKey: 'plugins.meta.statsd-advanced.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.statsd-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  statsd: {
+    descriptionKey: 'plugins.meta.statsd.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.statsd.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  syslog: {
+    descriptionKey: 'plugins.meta.syslog.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.syslog.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'tcp-log': {
+    descriptionKey: 'plugins.meta.tcp-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.tcp-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'udp-log': {
+    descriptionKey: 'plugins.meta.udp-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.udp-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'kafka-log': {
+    descriptionKey: 'plugins.meta.kafka-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.kafka-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  session: {
+    descriptionKey: 'plugins.meta.session.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.session.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'upstream-tls': {
+    descriptionKey: 'plugins.meta.upstream-tls.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.upstream-tls.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'application-registration': {
+    descriptionKey: 'plugins.meta.application-registration.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.application-registration.name',
+    scope: [PluginScope.SERVICE],
+  },
+  'konnect-application-auth': {
+    descriptionKey: 'plugins.meta.konnect-application-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.konnect-application-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE],
+    imageName: 'application-registration',
+  },
+  acme: {
+    descriptionKey: 'plugins.meta.acme.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.acme.name',
+    scope: [PluginScope.GLOBAL],
+  },
+  'grpc-gateway': {
+    descriptionKey: 'plugins.meta.grpc-gateway.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.grpc-gateway.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'grpc-web': {
+    descriptionKey: 'plugins.meta.grpc-web.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.grpc-web.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'upstream-timeout': {
+    descriptionKey: 'plugins.meta.upstream-timeout.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.upstream-timeout.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  // New in Kong 3.0
+  opentelemetry: {
+    descriptionKey: 'plugins.meta.opentelemetry.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.opentelemetry.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'websocket-validator': {
+    descriptionKey: 'plugins.meta.websocket-validator.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.websocket-validator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'websocket-size-limit': {
+    descriptionKey: 'plugins.meta.websocket-size-limit.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.websocket-size-limit.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [
+        ['config.client_max_payload', 'config.upstream_max_payload'],
+      ],
+    },
+  },
+  'tls-metadata-headers': {
+    descriptionKey: 'plugins.meta.tls-metadata-headers.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.tls-metadata-headers.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'tls-handshake-modifier': {
+    descriptionKey: 'plugins.meta.tls-handshake-modifier.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.tls-handshake-modifier.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'oas-validation': {
+    descriptionKey: 'plugins.meta.oas-validation.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.oas-validation.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'jwe-decrypt': {
+    descriptionKey: 'plugins.meta.jwe-decrypt.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jwe-decrypt.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'xml-threat-protection': {
+    descriptionKey: 'plugins.meta.xml-threat-protection.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.xml-threat-protection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  saml: {
+    descriptionKey: 'plugins.meta.saml.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.saml.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'app-dynamics': {
+    descriptionKey: 'plugins.meta.app-dynamics.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.app-dynamics.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+}
+
+/**
+ * The *static* metadata of all credential types for faster access with less memory footprint.
+ *
+ * Please be noted that the `title` fields are not populated here, as they depends on i18n resources.
+ * You may use the `usePluginMetaData` composable instead to get the localized metadata.
+ */
+export const CREDENTIAL_METADATA: Record<string, any> = {
+  acl: {
+    titleKey: 'plugins.meta.acl.name',
+    plugin: 'acl',
+    schema: aclSchema,
+    nameKey: 'plugins.meta.acl.credential_name',
+    endpoint: '/acls',
+    schemaEndpoint: 'acls',
+    fields: getColumnFields(aclSchema),
+    applyCredentialButtonText: 'Add group to consumer',
+  },
+  'basic-auth': {
+    titleKey: 'plugins.meta.basic-auth.name',
+    plugin: 'basic-auth',
+    schema: basicAuthSchema,
+    nameKey: 'plugins.meta.basic-auth.credential_name',
+    endpoint: '/basic-auth',
+    schemaEndpoint: 'basicauth_credentials',
+    fields: getColumnFields(basicAuthSchema),
+  },
+  'key-auth': {
+    titleKey: 'plugins.meta.key-auth.name',
+    plugin: 'key-auth',
+    schema: keyAuthSchema,
+    nameKey: 'plugins.meta.key-auth.credential_name',
+    endpoint: '/key-auth',
+    schemaEndpoint: 'keyauth_credentials',
+    fields: getColumnFields(keyAuthSchema),
+  },
+  'key-auth-enc': {
+    titleKey: 'plugins.meta.key-auth-enc.name',
+    plugin: 'key-auth-enc',
+    schema: KeyAuthEncSchema,
+    nameKey: 'plugins.meta.key-auth-enc.credential_name',
+    endpoint: '/key-auth-enc',
+    schemaEndpoint: 'keyauth_enc_credentials',
+    fields: getColumnFields(KeyAuthEncSchema),
+  },
+  oauth2: {
+    titleKey: 'plugins.meta.oauth2.name',
+    plugin: 'oauth2',
+    schema: OAuth2Schema,
+    nameKey: 'plugins.meta.oauth2.credential_name',
+    endpoint: '/oauth2',
+    schemaEndpoint: 'oauth2_credentials',
+    fields: getColumnFields(OAuth2Schema),
+  },
+  'hmac-auth': {
+    titleKey: 'plugins.meta.hmac-auth.name',
+    plugin: 'hmac-auth',
+    schema: hmacAuthSchema,
+    nameKey: 'plugins.meta.hmac-auth.credential_name',
+    endpoint: '/hmac-auth',
+    schemaEndpoint: 'hmacauth_credentials',
+    fields: getColumnFields(hmacAuthSchema),
+  },
+  jwt: {
+    titleKey: 'plugins.meta.jwt.name',
+    plugin: 'jwt',
+    schema: jwtSecretSchema,
+    nameKey: 'plugins.meta.jwt.credential_name',
+    endpoint: '/jwt',
+    schemaEndpoint: 'jwt_secrets',
+    fields: {
+      id: {},
+      key: {},
+      algorithm: {},
+    },
+  },
+}
+
+// Used by Konnect, since there is currently no API endpoints to fetch credential schemas from
+export const CREDENTIAL_SCHEMAS: Record<string, any> = {
+  acls: aclsCredentialsSchema,
+  basicauth_credentials: basicAuthCredentialsSchema,
+  keyauth_credentials: keyAuthCredentialsSchema,
+  keyauth_enc_credentials: keyEncCredentialSchema,
+  oauth2_credentials: oauthCredentialSchema,
+  hmacauth_credentials: hmacAuthCredentialsSchema,
+  jwt_secrets: jwtCredentialsSchema,
+}
+
+/**
+ * Gets the URL for the plugin icon.
+ * Plugins with optional `imageName` property will be handled automatically.
+ *
+ * @param name plugin name
+ * @returns URL for the plugin icon
+ */
+export const getPluginIconURL = (name: string) => {
+  const imageName = PLUGIN_METADATA[name]?.imageName || name
+  return new URL(`../assets/images/plugin-icons/${imageName}.png`, import.meta.url).href
+}
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ACL.ts b/packages/entities/entities-plugins/src/definitions/schemas/ACL.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ACL.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ACL.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptDecorator.ts b/packages/entities/entities-plugins/src/definitions/schemas/AIPromptDecorator.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptDecorator.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/AIPromptDecorator.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptTemplate.ts b/packages/entities/entities-plugins/src/definitions/schemas/AIPromptTemplate.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptTemplate.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/AIPromptTemplate.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ApplicationRegistration.ts b/packages/entities/entities-plugins/src/definitions/schemas/ApplicationRegistration.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ApplicationRegistration.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ApplicationRegistration.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayCardContainerFields.ts b/packages/entities/entities-plugins/src/definitions/schemas/ArrayCardContainerFields.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayCardContainerFields.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ArrayCardContainerFields.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayStringFieldSchema.ts b/packages/entities/entities-plugins/src/definitions/schemas/ArrayStringFieldSchema.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayStringFieldSchema.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ArrayStringFieldSchema.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/BasicAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/BasicAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/BasicAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/BasicAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Datadog.ts b/packages/entities/entities-plugins/src/definitions/schemas/Datadog.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Datadog.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Datadog.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/GraphQLRateLimitingAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/GraphQLRateLimitingAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/GraphQLRateLimitingAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/GraphQLRateLimitingAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/HMAC.ts b/packages/entities/entities-plugins/src/definitions/schemas/HMAC.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/HMAC.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/HMAC.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/JWT.ts b/packages/entities/entities-plugins/src/definitions/schemas/JWT.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/JWT.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/JWT.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Kafka.ts b/packages/entities/entities-plugins/src/definitions/schemas/Kafka.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Kafka.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Kafka.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/KeyAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/KeyAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuthEnc.ts b/packages/entities/entities-plugins/src/definitions/schemas/KeyAuthEnc.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuthEnc.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/KeyAuthEnc.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/MetricFields.ts b/packages/entities/entities-plugins/src/definitions/schemas/MetricFields.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/MetricFields.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/MetricFields.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Mocking.ts b/packages/entities/entities-plugins/src/definitions/schemas/Mocking.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Mocking.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Mocking.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/OAuth2.ts b/packages/entities/entities-plugins/src/definitions/schemas/OAuth2.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/OAuth2.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/OAuth2.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/PreFunction.ts b/packages/entities/entities-plugins/src/definitions/schemas/PreFunction.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/PreFunction.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/PreFunction.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RateLimiting.ts b/packages/entities/entities-plugins/src/definitions/schemas/RateLimiting.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RateLimiting.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RateLimiting.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RequestTransformerAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/RequestTransformerAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RequestTransformerAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RequestTransformerAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RequestValidator.ts b/packages/entities/entities-plugins/src/definitions/schemas/RequestValidator.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RequestValidator.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RequestValidator.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RouteByHeader.ts b/packages/entities/entities-plugins/src/definitions/schemas/RouteByHeader.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RouteByHeader.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RouteByHeader.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/SAML.ts b/packages/entities/entities-plugins/src/definitions/schemas/SAML.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/SAML.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/SAML.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/StatsD.ts b/packages/entities/entities-plugins/src/definitions/schemas/StatsD.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/StatsD.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/StatsD.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/StatsDAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/StatsDAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/StatsDAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/StatsDAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/VaultAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/VaultAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/VaultAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/VaultAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Zipkin.ts b/packages/entities/entities-plugins/src/definitions/schemas/Zipkin.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Zipkin.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Zipkin.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedAclSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedAclSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedAclSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedAclSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedBasicAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedBasicAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedBasicAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedBasicAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedHmacAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedHmacAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedHmacAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedHmacAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedJwtSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedJwtSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedJwtSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedJwtSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyEncAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyEncAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyEncAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyEncAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedOAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedOAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedOAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedOAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/typedefs.ts b/packages/entities/entities-plugins/src/definitions/schemas/typedefs.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/typedefs.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/typedefs.ts
diff --git a/packages/entities/entities-plugins/src/index.ts b/packages/entities/entities-plugins/src/index.ts
index 885a602286..f732c803c2 100644
--- a/packages/entities/entities-plugins/src/index.ts
+++ b/packages/entities/entities-plugins/src/index.ts
@@ -5,12 +5,13 @@ import PluginSelect from './components/PluginSelect.vue'
 import PluginSelectGrid from './components/select/PluginSelectGrid.vue'
 import PluginConfigCard from './components/PluginConfigCard.vue'
 import composables from './composables'
+import { getPluginIconURL } from './definitions/metadata'
 import pluginEndpoints from './plugins-endpoints'
 
 // expose VueFormGenerator so host app doesn't need @kong-ui-public/forms as a dependency
 export { VueFormGenerator } from '@kong-ui-public/forms'
 
-const { getPluginIconURL, usePluginMetaData } = composables
+const { usePluginMetaData } = composables
 
 export {
   PluginForm,
diff --git a/packages/entities/entities-plugins/src/locales/en.json b/packages/entities/entities-plugins/src/locales/en.json
index c1ce03f9f9..a18b988f27 100644
--- a/packages/entities/entities-plugins/src/locales/en.json
+++ b/packages/entities/entities-plugins/src/locales/en.json
@@ -531,9 +531,25 @@
         }
       },
       "grouping": {
-        "common_fields": "Common Fields",
-        "required_fields": "Required Fields",
-        "advanced_fields": "Advanced Fields"
+        "general_information": {
+          "title": "General Configuration",
+          "description": "Name, scope, tags, and essential parameters for this plugin."
+        },
+        "plugin_configuration": {
+          "title": "Plugin Configuration",
+          "description": "Plugin-specific parameters for this plugin. View advanced parameters for extended configuration.",
+          "empty": "This plugin does not have required parameters."
+        },
+        "advanced_parameters": {
+          "view": "View Advanced Parameters",
+          "hide": "Hide Advanced Parameters"
+        }
+      },
+      "field_rules": {
+        "at_least_one_of": "At least one of these parameters is required: {parameters}",
+        "only_one_of": "Exactly one of these parameters is required: {parameters}",
+        "mutually_required": "All of these parameters are required: {parameters}",
+        "only_one_of_mutually_required": "Exactly one of the following parameter combinations is required (all parameters within a chosen combination are required):"
       }
     }
   },
diff --git a/packages/entities/entities-plugins/src/types/plugin.ts b/packages/entities/entities-plugins/src/types/plugin.ts
index 46f663ede9..8c42e1c59b 100644
--- a/packages/entities/entities-plugins/src/types/plugin.ts
+++ b/packages/entities/entities-plugins/src/types/plugin.ts
@@ -1,3 +1,5 @@
+import type { PathToDotNotation } from '@kong-ui-public/i18n/dist/types/types'
+
 export enum PluginGroup {
   AUTHENTICATION = 'Authentication',
   SECURITY = 'Security',
@@ -60,13 +62,78 @@ export interface PluginEntityInfo {
   idField?: EntityTypeIdField
 }
 
-export type PluginMetaData = {
+/**
+ * Rules for fields in a plugin entity.
+ * See `entity_checks` in BE schemas to learn more.
+ */
+export interface FieldRules {
+  /**
+   * An array of rules.
+   *
+   * Must provide at least one of the parameters in a rule.
+   *
+   * NOTE: See `at_least_one_of` in BE schema to learn more.
+   */
+  atLeastOneOf?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide exactly one of the parameters in a rule.
+   *
+   * NOTE: See `only_one_of` in BE schema to learn more.
+   */
+  onlyOneOf?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide all of the parameters in a rule if one of the parameter is provided. Otherwise,
+   * none of them should be provided.
+   *
+   * NOTE: See `mutually_required` in BE schemas to learn more.
+   */
+  mutuallyRequired?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide exactly one combination of parameters in a rule, while all of the parameters in
+   * the provided combination are required.
+   *
+   * For example, the following structure:
+   * ```javascript
+   * [
+   *   [
+   *     ['param1', 'param2'],
+   *     ['param3', 'param4']
+   *   ],
+   *   [
+   *     ['param5', 'param6'],
+   *     ['param7', 'param8']
+   *   ],
+   * ]
+   * ```
+   * … means that:
+   * - There are two independent rules
+   * - In the first rule, either both `param1` and `param2` or both `param3` and `param4` are required.
+   * - In the second rule, either both `param5` and `param6` or both `param7` and `param8` are required.
+   *
+   * NOTE: These rules are manually simplified. They does not have corresponding BE entity checks.
+   */
+  onlyOneOfMutuallyRequired?: string[][][]
+}
+
+export type PluginMetaData<I18nMessageSource = void> = {
+  nameKey: I18nMessageSource extends void ? string : PathToDotNotation<I18nMessageSource, string>
+  name: string // A display name of the Plugin.
+  descriptionKey: I18nMessageSource extends void ? string : PathToDotNotation<I18nMessageSource, string>
   description: string // A string to describe a Plugin.
   group: PluginGroup // Plugin categories meta.
-  imageName?: string // An optional tag to define plugin's icon image.
-  isEnterprise: boolean // The value will be True if the Plugin is enterprise only.
-  name: string // A display name of the Plugin.
   scope: PluginScope[] // The scope supported by the Plugin.
+  isEnterprise: boolean // The value will be True if the Plugin is enterprise only.
+  imageName?: string // An optional tag to define plugin's icon image.
+  fieldRules?: FieldRules
 }
 
 export interface PluginType extends PluginMetaData {
diff --git a/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue b/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
index e32a13fe28..fec0601e07 100644
--- a/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
+++ b/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
@@ -23,6 +23,7 @@
     <form
       v-else
       data-testid="form-content"
+      :novalidate="props.noValidate"
       @reset.prevent="handleClickCancel"
       @submit.prevent="handleClickSave"
     >
@@ -174,6 +175,13 @@ const props = defineProps({
     type: Object as PropType<Record<string, any>>,
     required: true,
   },
+  /**
+   * Set true to disable the form validation upon submission.
+   */
+  noValidate: {
+    type: Boolean,
+    default: false,
+  },
 })
 
 const router = useRouter()