diff --git a/packages/core/forms/src/generator/FormGenerator.vue b/packages/core/forms/src/generator/FormGenerator.vue
index 3fcc3996ad..24f88dae62 100644
--- a/packages/core/forms/src/generator/FormGenerator.vue
+++ b/packages/core/forms/src/generator/FormGenerator.vue
@@ -30,12 +30,31 @@
       :key="`group-${i}`"
     >
       <KCollapse
-        v-if="group.collapsible"
-        :model-value="group.collapsedByDefault === undefined ? false : group.collapsedByDefault"
-        :title="group.legend"
+        v-if="group.collapsible !== undefined && group.collapsible !== false"
+        class="root-level-collapse"
+        :model-value="false"
+        :title="group.collapsible.title"
       >
+        <template
+          v-if="group.collapsible.description"
+          #visible-content
+        >
+          {{ group.collapsible.description }}
+        </template>
+
+        <slot
+          v-if="group.slots?.beforeContent"
+          :name="group.slots?.beforeContent"
+        />
+
+        <slot
+          v-if="group.fields.length === 0 && group.slots?.emptyState"
+          :name="group.slots?.emptyState"
+        />
+
         <component
           :is="tag"
+          v-else
           :class="getFieldRowClasses(group)"
         >
           <template
@@ -55,6 +74,37 @@
             />
           </template>
         </component>
+
+        <KCollapse
+          v-if="group.collapsible !== true && group.collapsible.nestedCollapsible && group.collapsible.nestedCollapsible.fields.length > 0"
+          class="nested-collapse"
+          :model-value="collapseStates[`group-${i}-nested`] ?? true"
+          trigger-alignment="leading"
+          :trigger-label="(collapseStates[`group-${i}-nested`] ?? true) ? group.collapsible.nestedCollapsible.triggerLabel.expand : group.collapsible.nestedCollapsible.triggerLabel.collapse"
+          @update:model-value="(value) => collapseStates[`group-${i}-nested`] = value"
+        >
+          <component
+            :is="tag"
+            :class="getFieldRowClasses(group)"
+          >
+            <template
+              v-for="field in group.collapsible.nestedCollapsible.fields"
+              :key="field.model"
+            >
+              <form-group
+                v-if="fieldVisible(field)"
+                ref="children"
+                :errors="errors"
+                :field="field"
+                :model="model"
+                :options="options"
+                :vfg="vfg"
+                @model-updated="onModelUpdated"
+                @validated="onFieldValidated"
+              />
+            </template>
+          </component>
+        </KCollapse>
       </KCollapse>
 
       <component
@@ -87,6 +137,17 @@
 </template>
 
 <script>
+/**
+ * @typedef {import('./types').FGCollapsibleOptions} FGCollapsibleOptions
+ * @typedef {import('./types').FGSlots} FGSlots
+ *
+ * @typedef PartialGroup
+ * @prop {FGCollapsibleOptions=} collapsible
+ * @prop {FGSlots=} slots
+ *
+ * @typedef {Record<string, any> & PartialGroup} Group
+ */
+
 import { get as objGet, forEach, isFunction, isNil, isArray } from 'lodash'
 import formMixin from './FormMixin.vue'
 import formGroup from './FormGroup.vue'
@@ -148,6 +209,7 @@ export default {
       vfg: this,
       errors: [], // Validation errors,
       children: ref([]),
+      collapseStates: {},
     }
   },
 
@@ -163,6 +225,7 @@ export default {
       return res
     },
     groups() {
+      /** @type {Group[]} */
       const res = []
       if (this.schema && this.schema.groups) {
         forEach(this.schema.groups.slice(0), group => {
@@ -201,7 +264,7 @@ export default {
   mounted() {
     this.$nextTick(() => {
       if (this.model) {
-        // First load, running validation if neccessary
+        // First load, running validation if necessary
         if (this.options.validateAfterLoad === true && this.isNewModel !== true) {
           this.validate()
         } else {
@@ -304,6 +367,10 @@ export default {
     box-sizing: border-box;
   }
 
+  .hidden-field {
+    display: none;
+  }
+
   .form-group {
     margin-bottom: 24px;
 
@@ -530,6 +597,7 @@ export default {
 .vue-form-generator label {
   font-weight: 500;
 }
+
 .vue-form-generator .form-group input[type=radio] {
   align-items: center;
   appearance: none;
@@ -552,4 +620,20 @@ export default {
     background-color: currentColor;
   }
 }
+
+.vue-form-generator {
+  .root-level-collapse {
+    .k-collapse-heading {
+      margin-bottom: 0 !important;
+    }
+
+    .k-collapse-visible-content {
+      color: $kui-color-text-neutral;
+    }
+  }
+
+  .nested-collapse .k-collapse-heading {
+    margin-bottom: $kui-space-80 !important;
+  }
+}
 </style>
diff --git a/packages/core/forms/src/generator/types.ts b/packages/core/forms/src/generator/types.ts
new file mode 100644
index 0000000000..19ea73da9c
--- /dev/null
+++ b/packages/core/forms/src/generator/types.ts
@@ -0,0 +1,16 @@
+export type FGCollapsibleOptions = boolean | {
+  title?: string
+  description?: string
+  nestedCollapsible?: {
+    fields: any[],
+    triggerLabel: {
+      expand: string
+      collapse: string
+    }
+  }
+}
+
+export interface FGSlots {
+  beforeContent?: string
+  emptyState?: string
+}
diff --git a/packages/core/forms/src/index.ts b/packages/core/forms/src/index.ts
index e27de4bc6f..6a498718cf 100644
--- a/packages/core/forms/src/index.ts
+++ b/packages/core/forms/src/index.ts
@@ -26,4 +26,5 @@ export const getSharedFormName = (modelName: string, enabledAcmeCustomTemplate =
 }
 
 export * from './const'
+export * from './types'
 export * as abstractField from './generator/fields/abstractField'
diff --git a/packages/core/forms/src/types.ts b/packages/core/forms/src/types.ts
new file mode 100644
index 0000000000..810308db61
--- /dev/null
+++ b/packages/core/forms/src/types.ts
@@ -0,0 +1 @@
+export * from './generator/types'
diff --git a/packages/core/forms/tsconfig.json b/packages/core/forms/tsconfig.json
index e34e90e4e4..86ddfebf86 100644
--- a/packages/core/forms/tsconfig.json
+++ b/packages/core/forms/tsconfig.json
@@ -10,7 +10,8 @@
       "cypress",
       "cypress/vue",
       "../../../cypress/support"
-    ]
+    ],
+    "allowJs": true
   },
   "include": [
     "src/**/*",
diff --git a/packages/entities/entities-plugins/fixtures/mockData.ts b/packages/entities/entities-plugins/fixtures/mockData.ts
index 3f056d73f0..2393edcde3 100644
--- a/packages/entities/entities-plugins/fixtures/mockData.ts
+++ b/packages/entities/entities-plugins/fixtures/mockData.ts
@@ -529,264 +529,6 @@ export const konnectAvailablePlugins = {
  * Form page data
  */
 
-// CORS plugin
-export const schema = {
-  fields: [
-    {
-      consumer: {
-        description: 'Custom type for representing a foreign key with a null value allowed.',
-        eq: null,
-        reference: 'consumers',
-        type: 'foreign',
-      },
-    },
-    {
-      consumer_group: {
-        description: 'Custom type for representing a foreign key with a null value allowed.',
-        eq: null,
-        reference: 'consumer_groups',
-        type: 'foreign',
-      },
-    },
-    {
-      protocols: {
-        default: [
-          'grpc',
-          'grpcs',
-          'http',
-          'https',
-        ],
-        description: 'A set of strings representing HTTP protocols.',
-        elements: {
-          one_of: [
-            'grpc',
-            'grpcs',
-            'http',
-            'https',
-          ],
-          type: 'string',
-        },
-        required: true,
-        type: 'set',
-      },
-    },
-    {
-      config: {
-        fields: [
-          {
-            origins: {
-              description: 'List of allowed domains for the `Access-Control-Allow-Origin` header. If you want to allow all origins, add `*` as a single value to this configuration field. The accepted values can either be flat strings or PCRE regexes.',
-              elements: {
-                type: 'string',
-              },
-              type: 'array',
-            },
-          },
-          {
-            headers: {
-              description: 'Value for the `Access-Control-Allow-Headers` header.',
-              elements: {
-                type: 'string',
-              },
-              type: 'array',
-            },
-          },
-          {
-            exposed_headers: {
-              description: 'Value for the `Access-Control-Expose-Headers` header. If not specified, no custom headers are exposed.',
-              elements: {
-                type: 'string',
-              },
-              type: 'array',
-            },
-          },
-          {
-            methods: {
-              default: [
-                'GET',
-                'HEAD',
-                'PUT',
-                'PATCH',
-                'POST',
-                'DELETE',
-                'OPTIONS',
-                'TRACE',
-                'CONNECT',
-              ],
-              description: "'Value for the `Access-Control-Allow-Methods` header. Available options include `GET`, `HEAD`, `PUT`, `PATCH`, `POST`, `DELETE`, `OPTIONS`, `TRACE`, `CONNECT`. By default, all options are allowed.'",
-              elements: {
-                one_of: [
-                  'GET',
-                  'HEAD',
-                  'PUT',
-                  'PATCH',
-                  'POST',
-                  'DELETE',
-                  'OPTIONS',
-                  'TRACE',
-                  'CONNECT',
-                ],
-                type: 'string',
-              },
-              type: 'array',
-            },
-          },
-          {
-            max_age: {
-              description: 'Indicates how long the results of the preflight request can be cached, in `seconds`.',
-              type: 'number',
-            },
-          },
-          {
-            credentials: {
-              default: false,
-              description: 'Flag to determine whether the `Access-Control-Allow-Credentials` header should be sent with `true` as the value.',
-              required: true,
-              type: 'boolean',
-            },
-          },
-          {
-            preflight_continue: {
-              default: false,
-              description: 'A boolean value that instructs the plugin to proxy the `OPTIONS` preflight request to the Upstream service.',
-              required: true,
-              type: 'boolean',
-            },
-          },
-          {
-            private_network: {
-              default: false,
-              description: 'Flag to determine whether the `Access-Control-Allow-Private-Network` header should be sent with `true` as the value.',
-              required: true,
-              type: 'boolean',
-            },
-          },
-        ],
-        required: true,
-        type: 'record',
-      },
-    },
-  ],
-}
-
-// Mocking plugin
-export const schema2 = {
-  fields: [
-    {
-      protocols: {
-        default: [
-          'grpc',
-          'grpcs',
-          'http',
-          'https',
-        ],
-        description: 'A set of strings representing HTTP protocols.',
-        elements: {
-          one_of: [
-            'grpc',
-            'grpcs',
-            'http',
-            'https',
-          ],
-          type: 'string',
-        },
-        required: true,
-        type: 'set',
-      },
-    },
-    {
-      consumer_group: {
-        description: 'Custom type for representing a foreign key with a null value allowed.',
-        eq: null,
-        reference: 'consumer_groups',
-        type: 'foreign',
-      },
-    },
-    {
-      config: {
-        fields: [
-          {
-            api_specification_filename: {
-              description: "The path and name of the specification file loaded into Kong Gateway's database. You cannot use this option for DB-less or hybrid mode.",
-              required: false,
-              type: 'string',
-            },
-          },
-          {
-            api_specification: {
-              description: 'The contents of the specification file. You must use this option for hybrid or DB-less mode. You can include the full specification as part of the configuration. In Kong Manager, you can copy and paste the contents of the spec directly into the `Config.Api Specification` text field.',
-              required: false,
-              type: 'string',
-            },
-          },
-          {
-            random_delay: {
-              default: false,
-              description: 'Enables a random delay in the mocked response. Introduces delays to simulate real-time response times by APIs.',
-              type: 'boolean',
-            },
-          },
-          {
-            max_delay_time: {
-              default: 1,
-              description: 'The maximum value in seconds of delay time. Set this value when `random_delay` is enabled and you want to adjust the default. The value must be greater than the `min_delay_time`.',
-              type: 'number',
-            },
-          },
-          {
-            min_delay_time: {
-              default: 0.001,
-              description: 'The minimum value in seconds of delay time. Set this value when `random_delay` is enabled and you want to adjust the default. The value must be less than the `max_delay_time`.',
-              type: 'number',
-            },
-          },
-          {
-            random_examples: {
-              default: false,
-              description: 'Randomly selects one example and returns it. This parameter requires the spec to have multiple examples configured.',
-              type: 'boolean',
-            },
-          },
-          {
-            included_status_codes: {
-              description: 'A global list of the HTTP status codes that can only be selected and returned.',
-              elements: {
-                type: 'integer',
-              },
-              type: 'array',
-            },
-          },
-          {
-            random_status_code: {
-              default: false,
-              description: 'Determines whether to randomly select an HTTP status code from the responses of the corresponding API method. The default value is `false`, which means the minimum HTTP status code is always selected and returned.',
-              required: true,
-              type: 'boolean',
-            },
-          },
-          {
-            include_base_path: {
-              default: false,
-              description: 'Indicates whether to include the base path when performing path match evaluation.',
-              required: true,
-              type: 'boolean',
-            },
-          },
-          {
-            required_non_checkbox_field: {
-              description: 'A non-checkbox but required field.',
-              required: true,
-              type: 'string',
-            },
-          },
-        ],
-        required: true,
-        type: 'record',
-      },
-    },
-  ],
-}
-
 // ACL plugin credential
 export const credentialSchema = {
   fields: [
diff --git a/packages/entities/entities-plugins/fixtures/schemas/ai-proxy.ts b/packages/entities/entities-plugins/fixtures/schemas/ai-proxy.ts
new file mode 100644
index 0000000000..6221c659c6
--- /dev/null
+++ b/packages/entities/entities-plugins/fixtures/schemas/ai-proxy.ts
@@ -0,0 +1,423 @@
+export default {
+  entity_checks: [],
+  fields: [
+    {
+      protocols: {
+        default: [
+          'grpc',
+          'grpcs',
+          'http',
+          'https',
+        ],
+        required: true,
+        elements: {
+          type: 'string',
+          one_of: [
+            'grpc',
+            'grpcs',
+            'http',
+            'https',
+          ],
+        },
+        description: 'A set of strings representing HTTP protocols.',
+        type: 'set',
+      },
+    },
+    {
+      consumer: {
+        description: 'Custom type for representing a foreign key with a null value allowed.',
+        eq: null,
+        type: 'foreign',
+        reference: 'consumers',
+      },
+    },
+    {
+      service: {
+        description: "A reference to the 'services' table with a null value allowed.",
+        eq: null,
+        type: 'foreign',
+        reference: 'services',
+      },
+    },
+    {
+      config: {
+        fields: [
+          {
+            route_type: {
+              description: "The model's operation implementation, for this provider.",
+              type: 'string',
+              required: true,
+              one_of: [
+                'llm/v1/chat',
+                'llm/v1/completions',
+              ],
+            },
+          },
+          {
+            auth: {
+              fields: [
+                {
+                  header_name: {
+                    description: 'If AI model requires authentication via Authorization or API key header, specify its name here.',
+                    type: 'string',
+                    referenceable: true,
+                    required: false,
+                  },
+                },
+                {
+                  header_value: {
+                    description: "Specify the full auth header value for 'header_name', for example 'Bearer key' or just 'key'.",
+                    required: false,
+                    encrypted: true,
+                    referenceable: true,
+                    type: 'string',
+                  },
+                },
+                {
+                  param_name: {
+                    description: 'If AI model requires authentication via query parameter, specify its name here.',
+                    type: 'string',
+                    referenceable: true,
+                    required: false,
+                  },
+                },
+                {
+                  param_value: {
+                    description: "Specify the full parameter value for 'param_name'.",
+                    required: false,
+                    encrypted: true,
+                    referenceable: true,
+                    type: 'string',
+                  },
+                },
+                {
+                  param_location: {
+                    description: "Specify whether the 'param_name' and 'param_value' options go in a query string, or the POST form/JSON body.",
+                    type: 'string',
+                    required: false,
+                    one_of: [
+                      'query',
+                      'body',
+                    ],
+                  },
+                },
+              ],
+              required: false,
+              type: 'record',
+            },
+          },
+          {
+            model: {
+              fields: [
+                {
+                  provider: {
+                    description: 'AI provider request format - Kong translates requests to and from the specified backend compatible formats.',
+                    type: 'string',
+                    required: true,
+                    one_of: [
+                      'openai',
+                      'azure',
+                      'anthropic',
+                      'cohere',
+                      'mistral',
+                      'llama2',
+                    ],
+                  },
+                },
+                {
+                  name: {
+                    description: 'Model name to execute.',
+                    type: 'string',
+                    required: false,
+                  },
+                },
+                {
+                  options: {
+                    description: 'Key/value settings for the model',
+                    type: 'record',
+                    fields: [
+                      {
+                        max_tokens: {
+                          description: 'Defines the max_tokens, if using chat or completion models.',
+                          type: 'integer',
+                          default: 256,
+                          required: false,
+                        },
+                      },
+                      {
+                        temperature: {
+                          description: 'Defines the matching temperature, if using chat or completion models.',
+                          between: [
+                            0,
+                            5,
+                          ],
+                          required: false,
+                          default: 1,
+                          type: 'number',
+                        },
+                      },
+                      {
+                        top_p: {
+                          description: 'Defines the top-p probability mass, if supported.',
+                          between: [
+                            0,
+                            1,
+                          ],
+                          required: false,
+                          default: 1,
+                          type: 'number',
+                        },
+                      },
+                      {
+                        top_k: {
+                          description: 'Defines the top-k most likely tokens, if supported.',
+                          between: [
+                            0,
+                            500,
+                          ],
+                          required: false,
+                          default: 0,
+                          type: 'integer',
+                        },
+                      },
+                      {
+                        anthropic_version: {
+                          description: 'Defines the schema/API version, if using Anthropic provider.',
+                          type: 'string',
+                          required: false,
+                        },
+                      },
+                      {
+                        azure_instance: {
+                          description: 'Instance name for Azure OpenAI hosted models.',
+                          type: 'string',
+                          required: false,
+                        },
+                      },
+                      {
+                        azure_api_version: {
+                          description: "'api-version' for Azure OpenAI instances.",
+                          type: 'string',
+                          default: '2023-05-15',
+                          required: false,
+                        },
+                      },
+                      {
+                        azure_deployment_id: {
+                          description: 'Deployment ID for Azure OpenAI instances.',
+                          type: 'string',
+                          required: false,
+                        },
+                      },
+                      {
+                        llama2_format: {
+                          description: 'If using llama2 provider, select the upstream message format.',
+                          type: 'string',
+                          required: false,
+                          one_of: [
+                            'raw',
+                            'openai',
+                            'ollama',
+                          ],
+                        },
+                      },
+                      {
+                        mistral_format: {
+                          description: 'If using mistral provider, select the upstream message format.',
+                          type: 'string',
+                          required: false,
+                          one_of: [
+                            'openai',
+                            'ollama',
+                          ],
+                        },
+                      },
+                      {
+                        upstream_url: {
+                          description: 'Manually specify or override the full URL to the AI operation endpoints, when calling (self-)hosted models, or for running via a private endpoint.',
+                          required: false,
+                          type: 'string',
+                        },
+                      },
+                    ],
+                    required: false,
+                  },
+                },
+              ],
+              required: true,
+              type: 'record',
+            },
+          },
+          {
+            logging: {
+              fields: [
+                {
+                  log_statistics: {
+                    description: 'If enabled and supported by the driver, will add model usage and token metrics into the Kong log plugin(s) output.',
+                    type: 'boolean',
+                    default: true,
+                    required: true,
+                  },
+                },
+                {
+                  log_payloads: {
+                    description: 'If enabled, will log the request and response body into the Kong log plugin(s) output.',
+                    type: 'boolean',
+                    default: false,
+                    required: true,
+                  },
+                },
+              ],
+              required: true,
+              type: 'record',
+            },
+          },
+        ],
+        type: 'record',
+        entity_checks: [
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'auth.header_name',
+                'auth.param_name',
+              ],
+              if_match: {
+                one_of: [
+                  'openai',
+                  'azure',
+                  'anthropic',
+                  'cohere',
+                ],
+              },
+              then_err: 'must set one of %s, and its respective options, when provider is not self-hosted',
+            },
+          },
+          {
+            mutually_required: [
+              'auth.header_name',
+              'auth.header_value',
+            ],
+          },
+          {
+            mutually_required: [
+              'auth.param_name',
+              'auth.param_value',
+              'auth.param_location',
+            ],
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.llama2_format',
+              ],
+              if_match: {
+                one_of: [
+                  'llama2',
+                ],
+              },
+              then_err: 'must set %s for llama2 provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.mistral_format',
+              ],
+              if_match: {
+                one_of: [
+                  'mistral',
+                ],
+              },
+              then_err: 'must set %s for mistral provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.name',
+              ],
+              if_match: [],
+              then_err: 'Must set a model name. Refer to https://docs.konghq.com/hub/kong-inc/ai-proxy/ for supported models.',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.anthropic_version',
+              ],
+              if_match: {
+                one_of: [
+                  'anthropic',
+                ],
+              },
+              then_err: 'must set %s for anthropic provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.azure_instance',
+              ],
+              if_match: {
+                one_of: [
+                  'azure',
+                ],
+              },
+              then_err: 'must set %s for azure provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.azure_api_version',
+              ],
+              if_match: {
+                one_of: [
+                  'azure',
+                ],
+              },
+              then_err: 'must set %s for azure provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.azure_deployment_id',
+              ],
+              if_match: {
+                one_of: [
+                  'azure',
+                ],
+              },
+              then_err: 'must set %s for azure provider',
+            },
+          },
+          {
+            conditional_at_least_one_of: {
+              if_field: 'model.provider',
+              then_at_least_one_of: [
+                'model.options.upstream_url',
+              ],
+              if_match: {
+                one_of: [
+                  'mistral',
+                  'llama2',
+                ],
+              },
+              then_err: 'must set %s for self-hosted providers/models',
+            },
+          },
+        ],
+        required: true,
+      },
+    },
+  ],
+}
diff --git a/packages/entities/entities-plugins/fixtures/schemas/cors.ts b/packages/entities/entities-plugins/fixtures/schemas/cors.ts
new file mode 100644
index 0000000000..b02813caed
--- /dev/null
+++ b/packages/entities/entities-plugins/fixtures/schemas/cors.ts
@@ -0,0 +1,138 @@
+export default {
+  fields: [
+    {
+      consumer: {
+        description: 'Custom type for representing a foreign key with a null value allowed.',
+        eq: null,
+        reference: 'consumers',
+        type: 'foreign',
+      },
+    },
+    {
+      consumer_group: {
+        description: 'Custom type for representing a foreign key with a null value allowed.',
+        eq: null,
+        reference: 'consumer_groups',
+        type: 'foreign',
+      },
+    },
+    {
+      protocols: {
+        default: [
+          'grpc',
+          'grpcs',
+          'http',
+          'https',
+        ],
+        description: 'A set of strings representing HTTP protocols.',
+        elements: {
+          one_of: [
+            'grpc',
+            'grpcs',
+            'http',
+            'https',
+          ],
+          type: 'string',
+        },
+        required: true,
+        type: 'set',
+      },
+    },
+    {
+      config: {
+        fields: [
+          {
+            origins: {
+              description: 'List of allowed domains for the `Access-Control-Allow-Origin` header. If you want to allow all origins, add `*` as a single value to this configuration field. The accepted values can either be flat strings or PCRE regexes.',
+              elements: {
+                type: 'string',
+              },
+              type: 'array',
+            },
+          },
+          {
+            headers: {
+              description: 'Value for the `Access-Control-Allow-Headers` header.',
+              elements: {
+                type: 'string',
+              },
+              type: 'array',
+            },
+          },
+          {
+            exposed_headers: {
+              description: 'Value for the `Access-Control-Expose-Headers` header. If not specified, no custom headers are exposed.',
+              elements: {
+                type: 'string',
+              },
+              type: 'array',
+            },
+          },
+          {
+            methods: {
+              default: [
+                'GET',
+                'HEAD',
+                'PUT',
+                'PATCH',
+                'POST',
+                'DELETE',
+                'OPTIONS',
+                'TRACE',
+                'CONNECT',
+              ],
+              description: "'Value for the `Access-Control-Allow-Methods` header. Available options include `GET`, `HEAD`, `PUT`, `PATCH`, `POST`, `DELETE`, `OPTIONS`, `TRACE`, `CONNECT`. By default, all options are allowed.'",
+              elements: {
+                one_of: [
+                  'GET',
+                  'HEAD',
+                  'PUT',
+                  'PATCH',
+                  'POST',
+                  'DELETE',
+                  'OPTIONS',
+                  'TRACE',
+                  'CONNECT',
+                ],
+                type: 'string',
+              },
+              type: 'array',
+            },
+          },
+          {
+            max_age: {
+              description: 'Indicates how long the results of the preflight request can be cached, in `seconds`.',
+              type: 'number',
+            },
+          },
+          {
+            credentials: {
+              default: false,
+              description: 'Flag to determine whether the `Access-Control-Allow-Credentials` header should be sent with `true` as the value.',
+              required: true,
+              type: 'boolean',
+            },
+          },
+          {
+            preflight_continue: {
+              default: false,
+              description: 'A boolean value that instructs the plugin to proxy the `OPTIONS` preflight request to the Upstream service.',
+              required: true,
+              type: 'boolean',
+            },
+          },
+          {
+            private_network: {
+              default: false,
+              description: 'Flag to determine whether the `Access-Control-Allow-Private-Network` header should be sent with `true` as the value.',
+              required: true,
+              type: 'boolean',
+            },
+          },
+        ],
+        required: true,
+        type: 'record',
+      },
+    },
+  ],
+}
diff --git a/packages/entities/entities-plugins/fixtures/schemas/mocking.ts b/packages/entities/entities-plugins/fixtures/schemas/mocking.ts
new file mode 100644
index 0000000000..7bac2c5257
--- /dev/null
+++ b/packages/entities/entities-plugins/fixtures/schemas/mocking.ts
@@ -0,0 +1,116 @@
+export default {
+  fields: [
+    {
+      protocols: {
+        default: [
+          'grpc',
+          'grpcs',
+          'http',
+          'https',
+        ],
+        description: 'A set of strings representing HTTP protocols.',
+        elements: {
+          one_of: [
+            'grpc',
+            'grpcs',
+            'http',
+            'https',
+          ],
+          type: 'string',
+        },
+        required: true,
+        type: 'set',
+      },
+    },
+    {
+      consumer_group: {
+        description: 'Custom type for representing a foreign key with a null value allowed.',
+        eq: null,
+        reference: 'consumer_groups',
+        type: 'foreign',
+      },
+    },
+    {
+      config: {
+        fields: [
+          {
+            api_specification_filename: {
+              description: "The path and name of the specification file loaded into Kong Gateway's database. You cannot use this option for DB-less or hybrid mode.",
+              required: false,
+              type: 'string',
+            },
+          },
+          {
+            api_specification: {
+              description: 'The contents of the specification file. You must use this option for hybrid or DB-less mode. You can include the full specification as part of the configuration. In Kong Manager, you can copy and paste the contents of the spec directly into the `Config.Api Specification` text field.',
+              required: false,
+              type: 'string',
+            },
+          },
+          {
+            random_delay: {
+              default: false,
+              description: 'Enables a random delay in the mocked response. Introduces delays to simulate real-time response times by APIs.',
+              type: 'boolean',
+            },
+          },
+          {
+            max_delay_time: {
+              default: 1,
+              description: 'The maximum value in seconds of delay time. Set this value when `random_delay` is enabled and you want to adjust the default. The value must be greater than the `min_delay_time`.',
+              type: 'number',
+            },
+          },
+          {
+            min_delay_time: {
+              default: 0.001,
+              description: 'The minimum value in seconds of delay time. Set this value when `random_delay` is enabled and you want to adjust the default. The value must be less than the `max_delay_time`.',
+              type: 'number',
+            },
+          },
+          {
+            random_examples: {
+              default: false,
+              description: 'Randomly selects one example and returns it. This parameter requires the spec to have multiple examples configured.',
+              type: 'boolean',
+            },
+          },
+          {
+            included_status_codes: {
+              description: 'A global list of the HTTP status codes that can only be selected and returned.',
+              elements: {
+                type: 'integer',
+              },
+              type: 'array',
+            },
+          },
+          {
+            random_status_code: {
+              default: false,
+              description: 'Determines whether to randomly select an HTTP status code from the responses of the corresponding API method. The default value is `false`, which means the minimum HTTP status code is always selected and returned.',
+              required: true,
+              type: 'boolean',
+            },
+          },
+          {
+            include_base_path: {
+              default: false,
+              description: 'Indicates whether to include the base path when performing path match evaluation.',
+              required: true,
+              type: 'boolean',
+            },
+          },
+          {
+            required_non_checkbox_field: {
+              description: 'A non-checkbox but required field.',
+              required: true,
+              type: 'string',
+            },
+          },
+        ],
+        required: true,
+        type: 'record',
+      },
+    },
+  ],
+}
diff --git a/packages/entities/entities-plugins/src/components/PluginConfigCard.vue b/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
index 874d57357f..396e0c8cf1 100644
--- a/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
+++ b/packages/entities/entities-plugins/src/components/PluginConfigCard.vue
@@ -37,7 +37,7 @@
         <div class="name-cell-wrapper">
           <PluginIcon
             class="plugin-icon"
-            :name="pluginMetaData.getImageName(getPropValue('rowValue', slotProps))"
+            :name="getPropValue('rowValue', slotProps)"
             :width="24"
           />
           <span class="info-name">
diff --git a/packages/entities/entities-plugins/src/components/PluginEntityForm.vue b/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
index 17e0858e7f..aebb6049ab 100644
--- a/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
+++ b/packages/entities/entities-plugins/src/components/PluginEntityForm.vue
@@ -25,7 +25,20 @@
         :options="formOptions"
         :schema="formSchema"
         @model-updated="onModelUpdated"
-      />
+      >
+        <template #plugin-config-empty-state>
+          <div class="plugin-config-empty-state">
+            {{ t('plugins.form.grouping.plugin_configuration.empty') }}
+          </div>
+        </template>
+
+        <template
+          v-if="PLUGIN_METADATA[formModel.name] && PLUGIN_METADATA[formModel.name].fieldRules"
+          #plugin-config-before-content
+        >
+          <PluginFieldRuleAlerts :rules="PLUGIN_METADATA[formModel.name].fieldRules!" />
+        </template>
+      </VueFormGenerator>
     </div>
   </div>
 </template>
@@ -42,12 +55,15 @@ import '@kong-ui-public/forms/dist/style.css'
 import type { AxiosRequestConfig, AxiosResponse } from 'axios'
 import { computed, defineComponent, onBeforeMount, provide, reactive, ref, watch, type PropType } from 'vue'
 import composables from '../composables'
+import useI18n from '../composables/useI18n'
+import { PLUGIN_METADATA } from '../definitions/metadata'
 import endpoints from '../plugins-endpoints'
 import {
   type KongManagerPluginFormConfig,
   type KonnectPluginFormConfig,
   type PluginEntityInfo,
 } from '../types'
+import PluginFieldRuleAlerts from './PluginFieldRuleAlerts.vue'
 
 // Must explicitly specify these as components since they are rendered dynamically
 export default defineComponent({
@@ -124,6 +140,7 @@ const { parseSchema } = composables.useSchemas(props.entityMap.focusedEntity?.id
 const { convertToDotNotation, unFlattenObject, isObjectEmpty, unsetNullForeignKey } = composables.usePluginHelpers()
 
 const { objectsAreEqual } = useHelpers()
+const { i18n: { t } } = useI18n()
 
 // define endpoints for use by KFG
 const buildGetOneUrl = (entityType: string, entityId: string): string => {
@@ -615,10 +632,27 @@ onBeforeMount(() => {
     opacity: 0;
   }
 
+  .entity-form {
+    .plugin-config-empty-state {
+      color: $kui-color-text-neutral;
+      font-size: $kui-font-size-30;
+      font-style: italic;
+      margin-bottom: $kui-space-60;
+    }
+  }
+
   :deep(.vue-form-generator) {
-    .k-collapse:not(:last-child) {
-      border-bottom: $kui-border-width-10 solid $kui-color-border;
-      margin-bottom: $kui-space-80;
+    > fieldset {
+      margin-top: $kui-space-40;
+
+      .form-group:last-child {
+        margin-bottom: $kui-space-60;
+      }
+    }
+
+    .k-collapse.root-level-collapse {
+      border-top: $kui-border-width-10 solid $kui-color-border;
+      padding-top: $kui-space-80;
     }
 
     fieldset {
diff --git a/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue b/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue
new file mode 100644
index 0000000000..ffe56ab30c
--- /dev/null
+++ b/packages/entities/entities-plugins/src/components/PluginFieldRuleAlerts.vue
@@ -0,0 +1,86 @@
+<template>
+  <KAlert class="plugin-field-rule-alerts">
+    <ul>
+      <li
+        v-for="(alert, i) in formattedSimpleAlerts"
+        :key="`simple-alert-${i}`"
+      >
+        {{ alert }}
+      </li>
+
+      <li v-if="props.rules.onlyOneOfMutuallyRequired && props.rules.onlyOneOfMutuallyRequired.length > 0">
+        <div
+          v-for="(combinations, i) in props.rules.onlyOneOfMutuallyRequired"
+          :key="`only-one-mutually-alert-${i}`"
+        >
+          <div>{{ t('plugins.form.field_rules.only_one_of_mutually_required') }}</div>
+          <ul>
+            <li
+              v-for="(fields, j) in combinations"
+              :key="`only-one-mutually-alert-${i}-combination-${j}`"
+            >
+              {{ formatFields(fields) }}
+            </li>
+          </ul>
+        </div>
+      </li>
+    </ul>
+  </KAlert>
+</template>
+
+<script setup lang="ts">
+import { computed } from 'vue'
+import composables from '../composables'
+import type { FieldRules } from '../types'
+
+const props = defineProps<{
+  rules: FieldRules
+}>()
+
+const { formatPluginFieldLabel } = composables.usePluginHelpers()
+const { i18n: { t } } = composables.useI18n()
+
+const formatFields = (fields: string[]) =>
+  fields.map((field) =>
+    field.replace(/^[cC]onfig\./, '').split('.').map((s) => formatPluginFieldLabel(s)).join('.'),
+  ).join(', ')
+
+const formatAlert = (translateKey: Parameters<typeof t>[0], fields: string[]) =>
+  t(translateKey, { parameters: formatFields(fields) })
+
+const formattedSimpleAlerts = computed<string[]>(() => {
+  const alerts = []
+
+  if (props.rules.atLeastOneOf) {
+    for (const fields of props.rules.atLeastOneOf) {
+      alerts.push(formatAlert('plugins.form.field_rules.at_least_one_of', fields))
+    }
+  }
+
+  if (props.rules.onlyOneOf) {
+    for (const fields of props.rules.onlyOneOf) {
+      alerts.push(formatAlert('plugins.form.field_rules.only_one_of', fields))
+    }
+  }
+
+  if (props.rules.mutuallyRequired) {
+    for (const fields of props.rules.mutuallyRequired) {
+      alerts.push(formatAlert('plugins.form.field_rules.mutually_required', fields))
+    }
+  }
+
+  return alerts
+})
+</script>
+
+<style scoped lang="scss">
+.plugin-field-rule-alerts {
+  ul {
+    margin: 0;
+    padding-inline-start: $kui-space-80;
+  }
+  margin-bottom: $kui-space-60;
+
+  margin-top: $kui-space-40;
+}
+</style>
diff --git a/packages/entities/entities-plugins/src/components/PluginForm.cy.ts b/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
index 18395c2d15..c86f5042e9 100644
--- a/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
+++ b/packages/entities/entities-plugins/src/components/PluginForm.cy.ts
@@ -3,15 +3,16 @@ import type { Router } from 'vue-router'
 import { createMemoryHistory, createRouter } from 'vue-router'
 import { type KongManagerPluginFormConfig, type KonnectPluginFormConfig } from '../types'
 import {
-  schema,
   credentialSchema,
   plugin1,
   aclCredential1,
-  schema2,
   scopedService,
   scopedConsumer,
   customPluginSchema,
 } from '../../fixtures/mockData'
+import schemaAiProxy from '../../fixtures/schemas/ai-proxy'
+import schemaCors from '../../fixtures/schemas/cors'
+import schemaMocking from '../../fixtures/schemas/mocking'
 import PluginForm from './PluginForm.vue'
 import { VueFormGenerator } from '../../src'
 
@@ -52,7 +53,7 @@ describe('<PluginForm />', () => {
         },
         {
           statusCode: 200,
-          body: params?.mockData ?? schema,
+          body: params?.mockData ?? schemaCors,
         },
       ).as(params?.alias ?? 'getPluginSchema')
     }
@@ -221,8 +222,8 @@ describe('<PluginForm />', () => {
       cy.get('#config-private_network').should('be.visible')
     })
 
-    it('should show common, required, and advanced fields when groupFields is true', () => {
-      interceptKMSchema({ mockData: schema2 })
+    it('should show general, hoisted, and advanced fields when groupFields is true', () => {
+      interceptKMSchema({ mockData: schemaMocking })
 
       cy.mount(PluginForm, {
         global: { components: { VueFormGenerator } },
@@ -246,8 +247,13 @@ describe('<PluginForm />', () => {
       cy.getTestId('form-back').should('be.enabled')
       cy.getTestId('form-cancel').should('be.visible')
 
-      // scope fields
+      // pinned fields (but they should not be under a KCollapse)
+      cy.get('#enabled').should('exist')
+        .parent('.k-collapse').should('not.exist')
+
+      // scope fields (this is also pinned, but they should not be under a KCollapse)
       cy.get('.field-selectionGroup').should('be.visible')
+        .parent('.k-collapse').should('not.exist')
       cy.get('.Global-check').should('be.visible')
       cy.get('.Scoped-check').should('be.visible')
       cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('not.be.visible')
@@ -257,45 +263,92 @@ describe('<PluginForm />', () => {
       cy.get('#route-id').should('be.visible')
 
       cy.getTestId('k-collapse-title')
-        .contains('Common Fields')
-        .parents('.k-collapse')
-        .first()
-        .as('commonFields')
-
-      cy.getTestId('k-collapse-title')
-        .contains('Required Fields')
+        .contains('Plugin Configuration')
         .parents('.k-collapse')
         .first()
-        .as('requiredFields')
+        .as('pluginFields')
 
-      cy.getTestId('k-collapse-title')
-        .contains('Advanced Fields')
-        .parents('.k-collapse')
+      cy.get('.k-collapse.nested-collapse [data-testid="k-collapse-trigger-label"]')
+        .contains('Advanced Parameters')
+        .parents('.k-collapse.nested-collapse')
         .first()
         .as('advancedFields')
 
-      // common fields
-      cy.get('@commonFields').find('#enabled').should('exist')
-      cy.get('@commonFields').find('#instance_name').should('exist')
-      cy.get('@commonFields').find('#tags').should('exist')
-      cy.get('@commonFields').find('.plugin-protocols-select').should('be.visible')
-
-      // required fields
-      cy.get('@requiredFields').find('#config-required_non_checkbox_field').should('be.visible')
-
+      // non-advanced plugin fields (but they should not be under the nested KCollapse)
+      // field rule alerts
+      cy.get('@pluginFields').find('.plugin-field-rule-alerts').contains('At least one of').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      // protocol selector
+      cy.get('@pluginFields').find('.plugin-protocols-select').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      // other required fields
+      cy.get('@pluginFields').find('#config-required_non_checkbox_field').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification_filename').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-include_base_path').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-random_status_code').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+
+      // advanced plugin fields (they should be under the nested KCollapse)
+      // instance name and tags
+      cy.get('@advancedFields').find('#instance_name').should('exist').parent('.k-collapse').should('not.exist')
+      cy.get('@advancedFields').find('#tags').should('exist').parent('.k-collapse').should('not.exist')
       // advanced fields should be hidden by default
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.hidden')
-
       // reveal them
       cy.get('@advancedFields').findTestId('k-collapse-trigger-content').click()
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.visible')
-
       // advanced fields
-      cy.get('@advancedFields').find('#config-api_specification').should('be.visible')
-      cy.get('@advancedFields').find('#config-api_specification_filename').should('be.visible')
-      cy.get('@advancedFields').find('#config-include_base_path').should('be.visible')
       cy.get('@advancedFields').find('#config-included_status_codes').should('be.visible')
-      cy.get('@advancedFields').find('#config-random_status_code').should('be.visible')
+      cy.get('@advancedFields').find('#config-max_delay_time').should('be.visible')
+      cy.get('@advancedFields').find('#config-min_delay_time').should('be.visible')
+    })
+
+    it('should use legacy form when groupFields is true but useLegacyForm in the plugin metadata is true', () => {
+      interceptKMSchema({ mockData: schemaAiProxy })
+
+      cy.mount(PluginForm, {
+        global: { components: { VueFormGenerator } },
+        props: {
+          config: {
+            ...baseConfigKM,
+            groupFields: true,
+          },
+          pluginType: 'ai-proxy',
+        },
+        router,
+      })
+
+      cy.wait('@getPluginSchema')
+      cy.get('.kong-ui-entities-plugin-form-container').should('be.visible')
+
+      // button state
+      cy.getTestId('form-submit').should('be.visible')
+      cy.getTestId('form-submit').should('be.enabled')
+      cy.getTestId('form-back').should('be.visible')
+      cy.getTestId('form-back').should('be.enabled')
+      cy.getTestId('form-cancel').should('be.visible')
+
+      // scope fields
+      cy.get('.field-selectionGroup').should('be.visible')
+      cy.get('.Global-check').should('be.visible')
+      cy.get('.Scoped-check').should('be.visible')
+      cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('not.be.visible')
+      cy.get('.Scoped-check input').click()
+      cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('be.visible')
+      cy.get('#service-id').should('not.exist') // ai-proxy only supports route scoping
+      cy.get('#route-id').should('be.visible')
+
+      // legacy form should not contain any KCollapse elements
+      cy.get('.k-collapse').should('not.exist')
+
+      // some of the fields
+      cy.get('#config-model-name').should('be.visible')
+      cy.get('#config-model-provider').should('be.visible')
     })
 
     it('should show correct form components for custom plugin with arrays of objects', () => {
@@ -703,7 +756,7 @@ describe('<PluginForm />', () => {
     })
 
     it('should handle error state - validation error', () => {
-      interceptKMSchema({ mockData: schema2 })
+      interceptKMSchema({ mockData: schemaMocking })
       cy.intercept(
         {
           method: 'POST',
@@ -796,7 +849,7 @@ describe('<PluginForm />', () => {
         },
         {
           statusCode: 200,
-          body: params?.mockData ?? schema,
+          body: params?.mockData ?? schemaCors,
         },
       ).as(params?.alias ?? 'getPluginSchema')
     }
@@ -966,8 +1019,8 @@ describe('<PluginForm />', () => {
       cy.get('#config-private_network').should('be.visible')
     })
 
-    it('should show common, required, and advanced fields when groupFields is true', () => {
-      interceptKonnectSchema({ mockData: schema2 })
+    it('should show general, hoisted, and advanced fields when groupFields is true', () => {
+      interceptKonnectSchema({ mockData: schemaMocking })
 
       cy.mount(PluginForm, {
         global: { components: { VueFormGenerator } },
@@ -992,8 +1045,13 @@ describe('<PluginForm />', () => {
       cy.getTestId('form-back').should('be.enabled')
       cy.getTestId('form-cancel').should('be.visible')
 
-      // scope fields
+      // pinned fields (but they should not be under a KCollapse)
+      cy.get('#enabled').should('exist')
+        .parent('.k-collapse').should('not.exist')
+
+      // scope fields (this is also pinned, but they should not be under a KCollapse)
       cy.get('.field-selectionGroup').should('be.visible')
+        .parent('.k-collapse').should('not.exist')
       cy.get('.Global-check').should('be.visible')
       cy.get('.Scoped-check').should('be.visible')
       cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('not.be.visible')
@@ -1003,45 +1061,93 @@ describe('<PluginForm />', () => {
       cy.get('#route-id').should('be.visible')
 
       cy.getTestId('k-collapse-title')
-        .contains('Common Fields')
-        .parents('.k-collapse')
-        .first()
-        .as('commonFields')
-
-      cy.getTestId('k-collapse-title')
-        .contains('Required Fields')
+        .contains('Plugin Configuration')
         .parents('.k-collapse')
         .first()
-        .as('requiredFields')
+        .as('pluginFields')
 
-      cy.getTestId('k-collapse-title')
-        .contains('Advanced Fields')
-        .parents('.k-collapse')
+      cy.get('.k-collapse.nested-collapse [data-testid="k-collapse-trigger-label"]')
+        .contains('Advanced Parameters')
+        .parents('.k-collapse.nested-collapse')
         .first()
         .as('advancedFields')
 
-      // common fields
-      cy.get('@commonFields').find('#enabled').should('exist')
-      cy.get('@commonFields').find('#instance_name').should('exist')
-      cy.get('@commonFields').find('#tags').should('exist')
-      cy.get('@commonFields').find('.plugin-protocols-select').should('be.visible')
-
-      // required fields
-      cy.get('@requiredFields').find('#config-required_non_checkbox_field').should('be.visible')
-
+      // non-advanced plugin fields (but they should not be under the nested KCollapse)
+      // field rule alerts
+      cy.get('@pluginFields').find('.plugin-field-rule-alerts').contains('At least one of').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      // protocol selector
+      cy.get('@pluginFields').find('.plugin-protocols-select').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      // other required fields
+      cy.get('@pluginFields').find('#config-required_non_checkbox_field').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-api_specification_filename').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-include_base_path').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+      cy.get('@pluginFields').find('#config-random_status_code').should('be.visible')
+        .parent('.k-collapse.nested-collapse').should('not.exist')
+
+      // advanced plugin fields (they should be under the nested KCollapse)
+      // instance name and tags
+      cy.get('@advancedFields').find('#instance_name').should('exist').parent('.k-collapse').should('not.exist')
+      cy.get('@advancedFields').find('#tags').should('exist').parent('.k-collapse').should('not.exist')
       // advanced fields should be hidden by default
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.hidden')
-
       // reveal them
       cy.get('@advancedFields').findTestId('k-collapse-trigger-content').click()
       cy.get('@advancedFields').findTestId('k-collapse-hidden-content').should('be.visible')
-
       // advanced fields
-      cy.get('@advancedFields').find('#config-api_specification').should('be.visible')
-      cy.get('@advancedFields').find('#config-api_specification_filename').should('be.visible')
-      cy.get('@advancedFields').find('#config-include_base_path').should('be.visible')
       cy.get('@advancedFields').find('#config-included_status_codes').should('be.visible')
-      cy.get('@advancedFields').find('#config-random_status_code').should('be.visible')
+      cy.get('@advancedFields').find('#config-max_delay_time').should('be.visible')
+      cy.get('@advancedFields').find('#config-min_delay_time').should('be.visible')
+    })
+
+    it('should use legacy form when groupFields is true but useLegacyForm in the plugin metadata is true', () => {
+      interceptKonnectSchema({ mockData: schemaAiProxy })
+
+      cy.mount(PluginForm, {
+        global: { components: { VueFormGenerator } },
+        props: {
+          config: {
+            ...baseConfigKonnect,
+            groupFields: true,
+          },
+          pluginType: 'ai-proxy',
+          useCustomNamesForPlugin: true,
+        },
+        router,
+      })
+
+      cy.wait('@getPluginSchema')
+      cy.get('.kong-ui-entities-plugin-form-container').should('be.visible')
+
+      // button state
+      cy.getTestId('form-submit').should('be.visible')
+      cy.getTestId('form-submit').should('be.enabled')
+      cy.getTestId('form-back').should('be.visible')
+      cy.getTestId('form-back').should('be.enabled')
+      cy.getTestId('form-cancel').should('be.visible')
+
+      // scope fields
+      cy.get('.field-selectionGroup').should('be.visible')
+      cy.get('.Global-check').should('be.visible')
+      cy.get('.Scoped-check').should('be.visible')
+      cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('not.be.visible')
+      cy.get('.Scoped-check input').click()
+      cy.get('.field-selectionGroup').find('.field-AutoSuggest').should('be.visible')
+      cy.get('#service-id').should('not.exist') // ai-proxy only supports route scoping
+      cy.get('#route-id').should('be.visible')
+
+      // legacy form should not contain any KCollapse elements
+      cy.get('.k-collapse').should('not.exist')
+
+      // some of the fields
+      cy.get('#config-model-name').should('be.visible')
+      cy.get('#config-model-provider').should('be.visible')
     })
 
     it('should show correct form components for custom plugin with arrays of objects', () => {
@@ -1473,7 +1579,7 @@ describe('<PluginForm />', () => {
     })
 
     it('should handle error state - validation error', () => {
-      interceptKonnectSchema({ mockData: schema2 })
+      interceptKonnectSchema({ mockData: schemaMocking })
       cy.intercept(
         {
           method: 'POST',
diff --git a/packages/entities/entities-plugins/src/components/PluginForm.vue b/packages/entities/entities-plugins/src/components/PluginForm.vue
index f665fd5bca..857492d42d 100644
--- a/packages/entities/entities-plugins/src/components/PluginForm.vue
+++ b/packages/entities/entities-plugins/src/components/PluginForm.vue
@@ -27,6 +27,7 @@
       :fetch-url="fetchUrl"
       :form-fields="getRequestBody"
       :is-readonly="form.isReadonly"
+      no-validate
       @cancel="handleClickCancel"
       @fetch:error="(err: any) => $emit('error', err)"
       @fetch:success="initForm"
@@ -131,37 +132,38 @@
 </template>
 
 <script setup lang="ts">
-import { computed, reactive, ref, watch, onBeforeMount, type PropType } from 'vue'
-import { useRouter } from 'vue-router'
-import type { AxiosError, AxiosResponse } from 'axios'
-import { marked, type MarkedOptions } from 'marked'
 import {
-  useAxios,
-  useErrors,
-  useHelpers,
-  useStringHelpers,
   EntityBaseForm,
   EntityBaseFormType,
   JsonCodeBlock,
   YamlCodeBlock,
+  useAxios,
+  useErrors,
+  useHelpers,
+  useStringHelpers,
 } from '@kong-ui-public/entities-shared'
 import '@kong-ui-public/entities-shared/dist/style.css'
+import type { Tab } from '@kong/kongponents'
+import type { AxiosError, AxiosResponse } from 'axios'
+import { marked, type MarkedOptions } from 'marked'
+import { CREDENTIAL_METADATA, CREDENTIAL_SCHEMAS, PLUGIN_METADATA } from '../definitions/metadata'
+import { computed, onBeforeMount, reactive, ref, watch, type PropType } from 'vue'
+import { useRouter } from 'vue-router'
+import composables from '../composables'
+import { ArrayStringFieldSchema } from '../definitions/schemas/ArrayStringFieldSchema'
+import endpoints from '../plugins-endpoints'
 import {
   EntityTypeIdField,
   PluginScope,
-  type KonnectPluginFormConfig,
-  type KongManagerPluginFormConfig,
-  type PluginFormState,
-  type PluginFormFields,
-  type DefaultPluginsSchemaRecord,
   type DefaultPluginsFormSchema,
+  type DefaultPluginsSchemaRecord,
+  type KongManagerPluginFormConfig,
+  type KonnectPluginFormConfig,
   type PluginEntityInfo,
+  type PluginFormFields,
+  type PluginFormState,
 } from '../types'
-import endpoints from '../plugins-endpoints'
-import composables from '../composables'
-import { ArrayStringFieldSchema } from '../composables/plugin-schemas/ArrayStringFieldSchema'
 import PluginEntityForm from './PluginEntityForm.vue'
-import type { Tab } from '@kong/kongponents'
 
 const emit = defineEmits<{
   (e: 'error:fetch-schema', error: AxiosError): void,
@@ -240,8 +242,8 @@ const props = defineProps({
 
 const router = useRouter()
 const { i18n: { t } } = composables.useI18n()
-const { pluginMetaData, credentialMetaData, credentialSchemas } = composables.usePluginMetaData()
 const { customSchemas, typedefs } = composables.useSchemas(undefined, { app: props.config.app })
+const { formatPluginFieldLabel } = composables.usePluginHelpers()
 const { getMessageFromError } = useErrors()
 const { capitalize } = useStringHelpers()
 const { objectsAreEqual } = useHelpers()
@@ -376,47 +378,38 @@ const entityMap = computed((): Record<string, PluginEntityInfo> => {
 
 // Configuration for globally shared fields
 const defaultFormSchema: DefaultPluginsSchemaRecord = reactive({
+  // this is a required field that the user cannot set, it's always the name of the plugin
+  // ex. 'acl'
+  name: {
+    default: props.pluginType,
+    type: 'input',
+    inputType: 'hidden',
+    styleClasses: 'd-none hidden-field',
+    pinned: true, // does not matter because it's hidden
+  },
   enabled: {
     type: 'switch',
     model: 'enabled',
     label: t('plugins.form.fields.enabled.label'),
     textOn: t('plugins.form.fields.enabled.on_text'),
     textOff: t('plugins.form.fields.enabled.off_text'),
-    styleClasses: 'field-switch bottom-border hide-label',
+    styleClasses: 'field-switch hide-label',
     default: true,
-  },
-  // this is a required field that the user cannot set, it's always the name of the plugin
-  // ex. 'acl'
-  name: {
-    default: props.pluginType,
-    type: 'input',
-    inputType: 'hidden',
-    styleClasses: 'd-none',
+    pinned: true,
   },
   // plugin scoping
   selectionGroup: {
     type: !props.hideScopeSelection ? 'selectionGroup' : props.hideScopeSelection || (formType.value === EntityBaseFormType.Create && props.config.entityId) ? 'foreign' : 'selectionGroup',
     inputType: 'hidden',
-    styleClasses: 'bottom-border hide-label',
+    styleClasses: 'hide-label',
     fields: [
       {
         label: t('plugins.form.scoping.global.label'),
         description: t('plugins.form.scoping.global.help'),
       },
     ],
+    pinned: true,
   },
-  // Support is feature flagged in Konnect
-  ...((props.config.app === 'kongManager' || props.useCustomNamesForPlugin) && {
-    instance_name: {
-      default: '',
-      type: 'input',
-      label: t('plugins.form.fields.instance_name.label'),
-      inputType: 'text',
-      help: t('plugins.form.fields.instance_name.help'),
-    },
-  }),
-
-  tags: typedefs.tags as DefaultPluginsFormSchema,
   protocols: {
     id: 'protocols',
     default: [],
@@ -439,6 +432,17 @@ const defaultFormSchema: DefaultPluginsSchemaRecord = reactive({
       { label: 'wss', value: 'wss' },
     ],
   },
+  // Support is feature flagged in Konnect
+  ...((props.config.app === 'kongManager' || props.useCustomNamesForPlugin) && {
+    instance_name: {
+      default: '',
+      type: 'input',
+      label: t('plugins.form.fields.instance_name.label'),
+      inputType: 'text',
+      help: t('plugins.form.fields.instance_name.help'),
+    },
+  }),
+  tags: typedefs.tags as DefaultPluginsFormSchema,
 })
 
 // This is specifically used for credential plugins and portal developer plugins
@@ -446,7 +450,7 @@ const defaultFormSchema: DefaultPluginsSchemaRecord = reactive({
 const resourceEndpoint = computed((): string => {
   const entityPath: string = props.developer ? 'developers' : 'consumers'
 
-  const type = credentialMetaData[props.pluginType]?.endpoint || '/plugins'
+  const type = CREDENTIAL_METADATA[props.pluginType]?.endpoint || '/plugins'
 
   return `${entityPath}/${props.config.entityId}${props.developer ? '/credentials' : ''}${type}`
 })
@@ -457,15 +461,10 @@ const getArrayType = (list: unknown[]): string => {
   return uniqueTypes.length > 1 ? 'string' : uniqueTypes[0]
 }
 
-// _ gets converted to space and capitalize each word
-const formatPluginFieldLabel = (label: string) => {
-  return capitalize(label.replace(/_/g, ' '))
-}
-
 const buildFormSchema = (parentKey: string, response: Record<string, any>, initialFormSchema: Record<string, any>) => {
   let schema = (response && response.fields) || []
   const pluginSchema = customSchemas[props.pluginType as keyof typeof customSchemas]
-  const credentialSchema = credentialMetaData[props.pluginType]?.schema?.fields
+  const credentialSchema = CREDENTIAL_METADATA[props.pluginType]?.schema?.fields
 
   // schema can either be an object or an array of objects. If it's an array, convert it to an object
   if (Array.isArray(schema)) {
@@ -489,7 +488,7 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
     }, {})
   }
 
-  // alphabetically sort the schema keys and handle specifial configuration for each field type
+  // alphabetically sort the schema keys and handle specific configuration for each field type
   Object.keys(schema).sort().forEach(key => {
     const scheme = schema[key]
     const field = parentKey ? `${parentKey}-${key}` : `${key}`
@@ -509,6 +508,7 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
 
     initialFormSchema[field] = { id: field } // each field's key will be set as the id
     initialFormSchema[field].type = scheme.type === 'boolean' ? 'checkbox' : 'input'
+    initialFormSchema[field].required = scheme.required
 
     if (field.startsWith('config-')) {
       initialFormSchema[field].label = formatPluginFieldLabel(field)
@@ -760,12 +760,12 @@ const buildFormSchema = (parentKey: string, response: Record<string, any>, initi
 }
 
 const initScopeFields = (): void => {
-  const supportServiceScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.SERVICE) ?? true
-  const supportRouteScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.ROUTE) ?? true
-  const supportConsumerScope = pluginMetaData[props.pluginType]?.scope.includes(PluginScope.CONSUMER) ?? true
+  const supportServiceScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.SERVICE) ?? true
+  const supportRouteScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.ROUTE) ?? true
+  const supportConsumerScope = PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.CONSUMER) ?? true
   const supportConsumerGroupScope = props.config.disableConsumerGroupScope
     ? false
-    : (pluginMetaData[props.pluginType]?.scope.includes(PluginScope.CONSUMER_GROUP) ?? true)
+    : (PLUGIN_METADATA[props.pluginType]?.scope.includes(PluginScope.CONSUMER_GROUP) ?? true)
 
   const scopeEntityArray = []
 
@@ -1000,7 +1000,7 @@ const submitUrl = computed((): string => {
 })
 
 const isCustomPlugin = computed((): boolean => {
-  return !Object.keys(pluginMetaData).includes(props.pluginType)
+  return !Object.keys(PLUGIN_METADATA).includes(props.pluginType)
 })
 
 const getRequestBody = computed((): Record<string, any> => {
@@ -1064,7 +1064,7 @@ const saveFormData = async (): Promise<void> => {
 
 // for fetching the plugin form schema
 const schemaUrl = computed((): string => {
-  const pluginType = !treatAsCredential.value ? props.pluginType : credentialMetaData[props.pluginType]?.schemaEndpoint
+  const pluginType = !treatAsCredential.value ? props.pluginType : CREDENTIAL_METADATA[props.pluginType]?.schemaEndpoint
   const schemaEndpoint = !treatAsCredential.value ? endpoints.form[props.config.app].pluginSchema : endpoints.form[props.config.app].credentialSchema
 
   let url = `${props.config.apiBaseUrl}${schemaEndpoint}`
@@ -1090,8 +1090,8 @@ onBeforeMount(async () => {
     // handling for plugin credentials (Konnect)
     if (treatAsCredential.value && props.config.app === 'konnect') {
       // credential schema endpoints don't exist for Konnect, so we use hard-coded schemas
-      const pluginType = credentialMetaData[props.pluginType]?.schemaEndpoint
-      const data = credentialSchemas[pluginType]
+      const pluginType = CREDENTIAL_METADATA[props.pluginType]?.schemaEndpoint
+      const data = CREDENTIAL_SCHEMAS[pluginType]
 
       schema.value = buildFormSchema('', data, {})
       schemaLoading.value = false
diff --git a/packages/entities/entities-plugins/src/components/PluginIcon.vue b/packages/entities/entities-plugins/src/components/PluginIcon.vue
index 435e79f684..479d251274 100644
--- a/packages/entities/entities-plugins/src/components/PluginIcon.vue
+++ b/packages/entities/entities-plugins/src/components/PluginIcon.vue
@@ -10,7 +10,7 @@
 
 <script setup lang="ts">
 import { computed, ref } from 'vue'
-import composables from '../composables'
+import { getPluginIconURL } from '../definitions/metadata'
 
 const defaultIcon = new URL('../assets/images/plugin-icons/missing.png', import.meta.url).href
 
@@ -32,7 +32,7 @@ const props = defineProps({
 })
 
 const img = ref<HTMLImageElement>()
-const iconSrc = computed((): string => props.name ? composables.getPluginIconURL(props.name) : '')
+const iconSrc = computed((): string => props.name ? getPluginIconURL(props.name) : '')
 
 const onError = () => {
   if (img.value) {
diff --git a/packages/entities/entities-plugins/src/components/PluginList.vue b/packages/entities/entities-plugins/src/components/PluginList.vue
index a77530c40d..986d8e927c 100644
--- a/packages/entities/entities-plugins/src/components/PluginList.vue
+++ b/packages/entities/entities-plugins/src/components/PluginList.vue
@@ -55,7 +55,7 @@
         <div class="name-cell-wrapper">
           <PluginIcon
             class="plugin-icon"
-            :name="pluginMetaData.getImageName(row.name)"
+            :name="row.name"
             :width="24"
           />
           <div class="info-wrapper">
diff --git a/packages/entities/entities-plugins/src/composables/index.ts b/packages/entities/entities-plugins/src/composables/index.ts
index ce006510e9..79e12f0980 100644
--- a/packages/entities/entities-plugins/src/composables/index.ts
+++ b/packages/entities/entities-plugins/src/composables/index.ts
@@ -1,12 +1,11 @@
 import useI18n from './useI18n'
 import usePluginHelpers from './usePluginHelpers'
-import { getPluginIconURL, usePluginMetaData } from './usePluginMeta'
+import { usePluginMetaData } from './usePluginMeta'
 import { useSchemas } from './useSchemas'
 
 // All composables must be exported as part of the default object for Cypress test stubs
 export default {
   useI18n,
-  getPluginIconURL,
   usePluginMetaData,
   usePluginHelpers,
   useSchemas,
diff --git a/packages/entities/entities-plugins/src/composables/useI18n.ts b/packages/entities/entities-plugins/src/composables/useI18n.ts
index 337ff02756..d8cbd45dd7 100644
--- a/packages/entities/entities-plugins/src/composables/useI18n.ts
+++ b/packages/entities/entities-plugins/src/composables/useI18n.ts
@@ -1,11 +1,13 @@
 import { createI18n, i18nTComponent } from '@kong-ui-public/i18n'
 import english from '../locales/en.json'
 
+export type MessageSource = typeof english
+
 export default function useI18n() {
-  const i18n = createI18n<typeof english>('en-us', english)
+  const i18n = createI18n<MessageSource>('en-us', english)
 
   return {
     i18n,
-    i18nT: i18nTComponent<typeof english>(i18n), // Translation component <i18n-t>
+    i18nT: i18nTComponent<MessageSource>(i18n), // Translation component <i18n-t>
   }
 }
diff --git a/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts b/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
index 3c7059d672..4571dd2df5 100644
--- a/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
+++ b/packages/entities/entities-plugins/src/composables/usePluginHelpers.ts
@@ -1,8 +1,10 @@
 import type { ConfigurationSchema } from '@kong-ui-public/entities-shared'
-import { ConfigurationSchemaType } from '@kong-ui-public/entities-shared'
+import { ConfigurationSchemaType, useStringHelpers } from '@kong-ui-public/entities-shared'
 import type { PluginType } from '../types'
 
 export default function useHelpers() {
+  const { capitalize } = useStringHelpers()
+
   const METHOD_KEYS = ['methods', 'logout_methods']
 
   /**
@@ -154,6 +156,11 @@ export default function useHelpers() {
     }
   }
 
+  // _ gets converted to space and capitalize each word
+  const formatPluginFieldLabel = (label: string) => {
+    return capitalize(label.replace(/_/g, ' '))
+  }
+
   return {
     setFieldType,
     getPluginCards,
@@ -161,5 +168,6 @@ export default function useHelpers() {
     unFlattenObject,
     isObjectEmpty,
     unsetNullForeignKey,
+    formatPluginFieldLabel,
   }
 }
diff --git a/packages/entities/entities-plugins/src/composables/usePluginMeta.ts b/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
index d734a47056..28a30183d0 100644
--- a/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
+++ b/packages/entities/entities-plugins/src/composables/usePluginMeta.ts
@@ -1,735 +1,31 @@
+import { CREDENTIAL_METADATA, PLUGIN_METADATA } from '../definitions/metadata'
 import type { PluginMetaData } from '../types'
-import { PluginGroup, PluginScope } from '../types'
 import useI18n from './useI18n'
-import { getColumnFields } from './plugin-schemas/typedefs'
-import { aclSchema } from './plugin-schemas/ACL'
-import aclsCredentialsSchema from './plugin-schemas/credentials/mockedAclSchema.json'
-import { basicAuthSchema } from './plugin-schemas/BasicAuth'
-import basicAuthCredentialsSchema from './plugin-schemas/credentials/mockedBasicAuthSchema.json'
-import { keyAuthSchema } from './plugin-schemas/KeyAuth'
-import keyAuthCredentialsSchema from './plugin-schemas/credentials/mockedKeyAuthSchema.json'
-import { hmacAuthSchema } from './plugin-schemas/HMAC'
-import hmacAuthCredentialsSchema from './plugin-schemas/credentials/mockedHmacAuthSchema.json'
-import { jwtSecretSchema } from './plugin-schemas/JWT'
-import jwtCredentialsSchema from './plugin-schemas/credentials/mockedJwtSchema.json'
-import OAuth2Schema from './plugin-schemas/OAuth2'
-import oauthCredentialSchema from './plugin-schemas/credentials/mockedOAuthSchema.json'
-import KeyAuthEncSchema from './plugin-schemas/KeyAuthEnc'
-import keyEncCredentialSchema from './plugin-schemas/credentials/mockedKeyEncAuthSchema.json'
-
-/**
- * Gets the URL for a plugin icon
- *
- * Note: some plugins may have icons which named differently from their names
- * (e.g. `pre-function` -> `kong-function`)
- *
- * Hint: you can use the helper `getImageName` returned by `usePluginMetaData`
- *
- * @param imageName the name of the plugin icon's image
- * @returns the URL for the plugin icon
- */
-export const getPluginIconURL = (imageName: string) => {
-  return new URL(`../assets/images/plugin-icons/${imageName}.png`, import.meta.url).href
-}
 
 export const usePluginMetaData = () => {
   const { i18n: { t } } = useI18n()
 
-  const pluginMetaData: Record<string, PluginMetaData> = {
-    'basic-auth': {
-      description: t('plugins.meta.basic-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.basic-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'hmac-auth': {
-      description: t('plugins.meta.hmac-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.hmac-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'jwt-signer': {
-      description: t('plugins.meta.jwt-signer.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.jwt-signer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    jwt: {
-      description: t('plugins.meta.jwt.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.jwt.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'key-auth': {
-      description: t('plugins.meta.key-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.key-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'key-auth-enc': {
-      description: t('plugins.meta.key-auth-enc.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.key-auth-enc.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ldap-auth-advanced': {
-      description: t('plugins.meta.ldap-auth-advanced.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.ldap-auth-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ldap-auth': {
-      description: t('plugins.meta.ldap-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.ldap-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'oauth2-introspection': {
-      description: t('plugins.meta.oauth2-introspection.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.oauth2-introspection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    oauth2: {
-      description: t('plugins.meta.oauth2.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.oauth2.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'openid-connect': {
-      description: t('plugins.meta.openid-connect.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.openid-connect.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'mtls-auth': {
-      description: t('plugins.meta.mtls-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.mtls-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'vault-auth': {
-      description: t('plugins.meta.vault-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.vault-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'bot-detection': {
-      description: t('plugins.meta.bot-detection.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.bot-detection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    cors: {
-      description: t('plugins.meta.cors.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.cors.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ip-restriction': {
-      description: t('plugins.meta.ip-restriction.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.ip-restriction.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    opa: {
-      description: t('plugins.meta.opa.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.opa.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'kubernetes-sidecar-injector': {
-      description: t('plugins.meta.kubernetes-sidecar-injector.description'),
-      group: PluginGroup.DEPLOYMENT,
-      isEnterprise: false,
-      name: t('plugins.meta.kubernetes-sidecar-injector.name'),
-      scope: [PluginScope.GLOBAL],
-    },
-    'request-validator': {
-      description: t('plugins.meta.request-validator.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.request-validator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    acl: {
-      description: t('plugins.meta.acl.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.acl.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    canary: {
-      description: t('plugins.meta.canary.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.canary.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'forward-proxy': {
-      description: t('plugins.meta.forward-proxy.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.forward-proxy.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'proxy-cache': {
-      description: t('plugins.meta.proxy-cache.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.proxy-cache.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'proxy-cache-advanced': {
-      description: t('plugins.meta.proxy-cache-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.proxy-cache-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-      imageName: 'proxy-cache',
-    },
-    'graphql-proxy-cache-advanced': {
-      description: t('plugins.meta.graphql-proxy-cache-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.graphql-proxy-cache-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'graphql',
-    },
-    'rate-limiting-advanced': {
-      description: t('plugins.meta.rate-limiting-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.rate-limiting-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'rate-limiting': {
-      description: t('plugins.meta.rate-limiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.rate-limiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'graphql-rate-limiting-advanced': {
-      description: t('plugins.meta.graphql-rate-limiting-advanced.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.graphql-rate-limiting-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    mocking: {
-      description: t('plugins.meta.mocking.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.mocking.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-size-limiting': {
-      description: t('plugins.meta.request-size-limiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.request-size-limiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-termination': {
-      description: t('plugins.meta.request-termination.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.request-termination.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'response-ratelimiting': {
-      description: t('plugins.meta.response-ratelimiting.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: false,
-      name: t('plugins.meta.response-ratelimiting.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'route-by-header': {
-      description: t('plugins.meta.route-by-header.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.route-by-header.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-proxy': {
-      description: t('plugins.meta.ai-proxy.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-proxy.name'),
-      scope: [PluginScope.ROUTE],
-    },
-    'ai-prompt-decorator': {
-      description: t('plugins.meta.ai-prompt-decorator.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-decorator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-prompt-template': {
-      description: t('plugins.meta.ai-prompt-template.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-template.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ai-prompt-guard': {
-      description: t('plugins.meta.ai-prompt-guard.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-prompt-guard.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'ai-request-transformer': {
-      description: t('plugins.meta.ai-request-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-request-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'ai-response-transformer': {
-      description: t('plugins.meta.ai-response-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.ai-response-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'aws-lambda': {
-      description: t('plugins.meta.aws-lambda.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: false,
-      name: t('plugins.meta.aws-lambda.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'azure-functions': {
-      description: t('plugins.meta.azure-functions.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.azure-functions.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    openwhisk: {
-      description: t('plugins.meta.openwhisk.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: false,
-      name: t('plugins.meta.openwhisk.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'pre-function': {
-      description: t('plugins.meta.pre-function.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.pre-function.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-      imageName: 'kong-function',
-    },
-    'post-function': {
-      description: t('plugins.meta.post-function.description'),
-      group: PluginGroup.SERVERLESS,
-      isEnterprise: true,
-      name: t('plugins.meta.post-function.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-      imageName: 'kong-function',
-    },
-    datadog: {
-      description: t('plugins.meta.datadog.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.datadog.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    prometheus: {
-      description: t('plugins.meta.prometheus.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.prometheus.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    zipkin: {
-      description: t('plugins.meta.zipkin.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.zipkin.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    collector: {
-      description: t('plugins.meta.collector.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.collector.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'response-transformer-advanced': {
-      description: t('plugins.meta.response-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.response-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'correlation-id': {
-      description: t('plugins.meta.correlation-id.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.correlation-id.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'request-transformer-advanced': {
-      description: t('plugins.meta.request-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.request-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'request-transformer': {
-      description: t('plugins.meta.request-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.request-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'response-transformer': {
-      description: t('plugins.meta.response-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.response-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
-    },
-    'route-transformer-advanced': {
-      description: t('plugins.meta.route-transformer-advanced.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.route-transformer-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'kafka-upstream': {
-      description: t('plugins.meta.kafka-upstream.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.kafka-upstream.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    degraphql: {
-      description: t('plugins.meta.degraphql.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.degraphql.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'exit-transformer': {
-      description: t('plugins.meta.exit-transformer.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.exit-transformer.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'exit-transformer',
-    },
-    jq: {
-      description: t('plugins.meta.jq.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: true,
-      name: t('plugins.meta.jq.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-      imageName: 'jq',
-    },
-    'file-log': {
-      description: t('plugins.meta.file-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.file-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'http-log': {
-      description: t('plugins.meta.http-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.http-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    loggly: {
-      description: t('plugins.meta.loggly.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.loggly.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'statsd-advanced': {
-      description: t('plugins.meta.statsd-advanced.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.statsd-advanced.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    statsd: {
-      description: t('plugins.meta.statsd.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.statsd.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    syslog: {
-      description: t('plugins.meta.syslog.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.syslog.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'tcp-log': {
-      description: t('plugins.meta.tcp-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.tcp-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'udp-log': {
-      description: t('plugins.meta.udp-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: false,
-      name: t('plugins.meta.udp-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'kafka-log': {
-      description: t('plugins.meta.kafka-log.description'),
-      group: PluginGroup.LOGGING,
-      isEnterprise: true,
-      name: t('plugins.meta.kafka-log.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    session: {
-      description: t('plugins.meta.session.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.session.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'upstream-tls': {
-      description: t('plugins.meta.upstream-tls.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.upstream-tls.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'application-registration': {
-      description: t('plugins.meta.application-registration.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.application-registration.name'),
-      scope: [PluginScope.SERVICE],
-    },
-    'konnect-application-auth': {
-      description: t('plugins.meta.konnect-application-auth.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: false,
-      name: t('plugins.meta.konnect-application-auth.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE],
-      imageName: 'application-registration',
-    },
-    acme: {
-      description: t('plugins.meta.acme.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: false,
-      name: t('plugins.meta.acme.name'),
-      scope: [PluginScope.GLOBAL],
-    },
-    'grpc-gateway': {
-      description: t('plugins.meta.grpc-gateway.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.grpc-gateway.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'grpc-web': {
-      description: t('plugins.meta.grpc-web.description'),
-      group: PluginGroup.TRANSFORMATIONS,
-      isEnterprise: false,
-      name: t('plugins.meta.grpc-web.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'upstream-timeout': {
-      description: t('plugins.meta.upstream-timeout.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.upstream-timeout.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    // New in Kong 3.0
-    opentelemetry: {
-      description: t('plugins.meta.opentelemetry.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: false,
-      name: t('plugins.meta.opentelemetry.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'websocket-validator': {
-      description: t('plugins.meta.websocket-validator.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.websocket-validator.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'websocket-size-limit': {
-      description: t('plugins.meta.websocket-size-limit.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.websocket-size-limit.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'tls-metadata-headers': {
-      description: t('plugins.meta.tls-metadata-headers.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.tls-metadata-headers.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'tls-handshake-modifier': {
-      description: t('plugins.meta.tls-handshake-modifier.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.tls-handshake-modifier.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'oas-validation': {
-      description: t('plugins.meta.oas-validation.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.oas-validation.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    'jwe-decrypt': {
-      description: t('plugins.meta.jwe-decrypt.description'),
-      group: PluginGroup.AUTHENTICATION,
-      isEnterprise: true,
-      name: t('plugins.meta.jwe-decrypt.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'xml-threat-protection': {
-      description: t('plugins.meta.xml-threat-protection.description'),
-      group: PluginGroup.TRAFFIC_CONTROL,
-      isEnterprise: true,
-      name: t('plugins.meta.xml-threat-protection.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-    saml: {
-      description: t('plugins.meta.saml.description'),
-      group: PluginGroup.SECURITY,
-      isEnterprise: true,
-      name: t('plugins.meta.saml.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
-    },
-    'app-dynamics': {
-      description: t('plugins.meta.app-dynamics.description'),
-      group: PluginGroup.ANALYTICS_AND_MONITORING,
-      isEnterprise: true,
-      name: t('plugins.meta.app-dynamics.name'),
-      scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
-    },
-  }
+  const pluginMetaData: Record<string, PluginMetaData> = {}
+  const credentialMetaData: Record<string, any> = {}
 
-  const credentialMetaData: Record<string, any> = {
-    acl: {
-      title: t('plugins.meta.acl.name'),
-      plugin: 'acl',
-      schema: aclSchema,
-      name: t('plugins.meta.acl.credential_name'),
-      endpoint: '/acls',
-      schemaEndpoint: 'acls',
-      fields: getColumnFields(aclSchema),
-      applyCredentialButtonText: 'Add group to consumer',
-    },
-    'basic-auth': {
-      title: t('plugins.meta.basic-auth.name'),
-      plugin: 'basic-auth',
-      schema: basicAuthSchema,
-      name: t('plugins.meta.basic-auth.credential_name'),
-      endpoint: '/basic-auth',
-      schemaEndpoint: 'basicauth_credentials',
-      fields: getColumnFields(basicAuthSchema),
-    },
-    'key-auth': {
-      title: t('plugins.meta.key-auth.name'),
-      plugin: 'key-auth',
-      schema: keyAuthSchema,
-      name: t('plugins.meta.key-auth.credential_name'),
-      endpoint: '/key-auth',
-      schemaEndpoint: 'keyauth_credentials',
-      fields: getColumnFields(keyAuthSchema),
-    },
-    'key-auth-enc': {
-      title: t('plugins.meta.key-auth-enc.name'),
-      plugin: 'key-auth-enc',
-      schema: KeyAuthEncSchema,
-      name: t('plugins.meta.key-auth-enc.credential_name'),
-      endpoint: '/key-auth-enc',
-      schemaEndpoint: 'keyauth_enc_credentials',
-      fields: getColumnFields(KeyAuthEncSchema),
-    },
-    oauth2: {
-      title: t('plugins.meta.oauth2.name'),
-      plugin: 'oauth2',
-      schema: OAuth2Schema,
-      name: t('plugins.meta.oauth2.credential_name'),
-      endpoint: '/oauth2',
-      schemaEndpoint: 'oauth2_credentials',
-      fields: getColumnFields(OAuth2Schema),
-    },
-    'hmac-auth': {
-      title: t('plugins.meta.hmac-auth.name'),
-      plugin: 'hmac-auth',
-      schema: hmacAuthSchema,
-      name: t('plugins.meta.hmac-auth.credential_name'),
-      endpoint: '/hmac-auth',
-      schemaEndpoint: 'hmacauth_credentials',
-      fields: getColumnFields(hmacAuthSchema),
-    },
-    jwt: {
-      title: t('plugins.meta.jwt.name'),
-      plugin: 'jwt',
-      schema: jwtSecretSchema,
-      name: t('plugins.meta.jwt.credential_name'),
-      endpoint: '/jwt',
-      schemaEndpoint: 'jwt_secrets',
-      fields: {
-        id: {},
-        key: {},
-        algorithm: {},
-      },
-    },
+  for (const [key, value] of Object.entries(PLUGIN_METADATA)) {
+    pluginMetaData[key] = {
+      ...value,
+      name: t(value.nameKey),
+      description: t(value.descriptionKey),
+    }
   }
 
-  // Used by Konnect, since there is currently no API endpoints to fetch credential schemas from
-  const credentialSchemas: Record<string, any> = {
-    acls: aclsCredentialsSchema,
-    basicauth_credentials: basicAuthCredentialsSchema,
-    keyauth_credentials: keyAuthCredentialsSchema,
-    keyauth_enc_credentials: keyEncCredentialSchema,
-    oauth2_credentials: oauthCredentialSchema,
-    hmacauth_credentials: hmacAuthCredentialsSchema,
-    jwt_secrets: jwtCredentialsSchema,
+  for (const [key, value] of Object.entries(CREDENTIAL_METADATA)) {
+    credentialMetaData[key] = {
+      ...value,
+      title: t(value.titleKey),
+    }
   }
 
   const getDisplayName = (name: string) => {
     return pluginMetaData[name]?.name || name
   }
 
-  const getImageName = (name: string) => {
-    return pluginMetaData[name]?.imageName || name
-  }
-
-  return { pluginMetaData, credentialMetaData, credentialSchemas, getDisplayName, getImageName }
+  return { pluginMetaData, credentialMetaData, credentialSchemas: CREDENTIAL_METADATA, getDisplayName }
 }
diff --git a/packages/entities/entities-plugins/src/composables/useSchemas.ts b/packages/entities/entities-plugins/src/composables/useSchemas.ts
index 26f917f8a5..7c8bf04e09 100644
--- a/packages/entities/entities-plugins/src/composables/useSchemas.ts
+++ b/packages/entities/entities-plugins/src/composables/useSchemas.ts
@@ -1,26 +1,28 @@
 import { useStringHelpers } from '@kong-ui-public/entities-shared'
+import type { FGCollapsibleOptions, FGSlots } from '@kong-ui-public/forms'
 import { customFields, getSharedFormName } from '@kong-ui-public/forms'
-import type { CustomSchemas } from '../types'
-import { aiPromptDecoratorSchema } from './plugin-schemas/AIPromptDecorator'
-import { aiPromptTemplateSchema } from './plugin-schemas/AIPromptTemplate'
-import { applicationRegistrationSchema } from './plugin-schemas/ApplicationRegistration'
-import { ArrayStringFieldSchema } from './plugin-schemas/ArrayStringFieldSchema'
-import { dataDogSchema } from './plugin-schemas/Datadog'
-import { graphqlRateLimitingAdvancedSchema } from './plugin-schemas/GraphQLRateLimitingAdvanced'
-import { jwtSchema } from './plugin-schemas/JWT'
-import { kafkaSchema } from './plugin-schemas/Kafka'
-import { mockingSchema } from './plugin-schemas/Mocking'
-import { preFunctionSchema } from './plugin-schemas/PreFunction'
-import { rateLimitingSchema } from './plugin-schemas/RateLimiting'
-import { requestTransformerAdvancedSchema } from './plugin-schemas/RequestTransformerAdvanced'
-import RequestValidatorSchema from './plugin-schemas/RequestValidator'
-import { routeByHeaderSchema } from './plugin-schemas/RouteByHeader'
-import { samlSchema } from './plugin-schemas/SAML'
-import { statsDSchema } from './plugin-schemas/StatsD'
-import { statsDAdvancedSchema } from './plugin-schemas/StatsDAdvanced'
-import { vaultAuthSchema } from './plugin-schemas/VaultAuth'
-import ZipkinSchema from './plugin-schemas/Zipkin'
-import typedefs from './plugin-schemas/typedefs'
+import { PLUGIN_METADATA } from '../definitions/metadata'
+import { aiPromptDecoratorSchema } from '../definitions/schemas/AIPromptDecorator'
+import { aiPromptTemplateSchema } from '../definitions/schemas/AIPromptTemplate'
+import { applicationRegistrationSchema } from '../definitions/schemas/ApplicationRegistration'
+import { ArrayStringFieldSchema } from '../definitions/schemas/ArrayStringFieldSchema'
+import { dataDogSchema } from '../definitions/schemas/Datadog'
+import { graphqlRateLimitingAdvancedSchema } from '../definitions/schemas/GraphQLRateLimitingAdvanced'
+import { jwtSchema } from '../definitions/schemas/JWT'
+import { kafkaSchema } from '../definitions/schemas/Kafka'
+import { mockingSchema } from '../definitions/schemas/Mocking'
+import { preFunctionSchema } from '../definitions/schemas/PreFunction'
+import { rateLimitingSchema } from '../definitions/schemas/RateLimiting'
+import { requestTransformerAdvancedSchema } from '../definitions/schemas/RequestTransformerAdvanced'
+import RequestValidatorSchema from '../definitions/schemas/RequestValidator'
+import { routeByHeaderSchema } from '../definitions/schemas/RouteByHeader'
+import { samlSchema } from '../definitions/schemas/SAML'
+import { statsDSchema } from '../definitions/schemas/StatsD'
+import { statsDAdvancedSchema } from '../definitions/schemas/StatsDAdvanced'
+import { vaultAuthSchema } from '../definitions/schemas/VaultAuth'
+import ZipkinSchema from '../definitions/schemas/Zipkin'
+import typedefs from '../definitions/schemas/typedefs'
+import { type CustomSchemas } from '../types'
 import useI18n from './useI18n'
 import usePluginHelpers from './usePluginHelpers'
 
@@ -33,12 +35,8 @@ export interface Field extends Record<string, any>{
 export interface Group {
   legend?: string
   fields?: Field[]
-  collapsible?: boolean
-  /**
-   * Whether the group is collapsed by default
-   * @default false
-   */
-  collapsedByDefault?: boolean
+  collapsible?: FGCollapsibleOptions
+  slots?: FGSlots
 }
 
 export interface Schema {
@@ -51,9 +49,26 @@ export interface UseSchemasOptions {
   groupFields?: boolean
 }
 
+/** Sorts non-config fields and place them at the top */
+const sortFieldByNonConfigTakePrecedence = (a: Field, b: Field) => {
+  const aIsConfig = a.model.startsWith('config-')
+  const bIsConfig = b.model.startsWith('config-')
+
+  if (aIsConfig && !bIsConfig) {
+    return 1
+  }
+
+  if (!aIsConfig && bIsConfig) {
+    return -1
+  }
+
+  return 0
+}
+
 const sortFieldByOrder = (a: Field, b: Field) => (a.order ?? 0) - (b.order ?? 0)
 
-const sortFieldByOrderAndModel = (a: Field, b: Field) => sortFieldByOrder(a, b) || a.model.localeCompare(b.model)
+const sortNonPinnedFields = (a: Field, b: Field) =>
+  sortFieldByNonConfigTakePrecedence(a, b) || sortFieldByOrder(a, b) || a.model.localeCompare(b.model)
 
 /**
  * @param entityId (optional) The id of the entity associated with the plugin
@@ -215,53 +230,99 @@ export const useSchemas = (entityId?: string, options?: UseSchemasOptions) => {
       buildFormSchema(inputSchema[fieldName], fieldName, inputSchema, formModel, formSchema, frontendSchema)
     })
 
-    // Do not group fields for plugins with custom layouts
-    if (!getSharedFormName(formModel.name) && options?.groupFields) {
-      const commonFields = []
-      const requiredFields = []
+    const pluginName = formModel.name
+    const metadata = PLUGIN_METADATA[pluginName]
+
+    // KM-18 KM-21 guarded branch
+    // No field grouping for:
+    // - Plugins with custom layouts
+    // - Plugins explicitly marked to use legacy form
+    if (!getSharedFormName(pluginName) && options?.groupFields && !metadata?.useLegacyForm) {
+      const pinnedFields = []
+      const defaultVisibleFields = []
       const advancedFields = []
 
+      // Transform the any of field sets into a flatten set for fast lookup
+      // The boolean values help us to know if we have unknown fields in the plugin metadata
+      const ruledFields: Record<string, boolean> = {}
+
+      if (metadata?.fieldRules) {
+        const flattenRules = [
+          ...metadata.fieldRules.atLeastOneOf ?? [],
+          ...metadata.fieldRules.onlyOneOf ?? [],
+          ...metadata.fieldRules.mutuallyRequired ?? [],
+        ]
+
+        if (metadata.fieldRules.onlyOneOfMutuallyRequired) {
+          for (const ruleSet of metadata.fieldRules.onlyOneOfMutuallyRequired) {
+            flattenRules.push(...ruleSet)
+          }
+        }
+
+        for (const fields of flattenRules) {
+          for (const field of fields) {
+            // We flatten the schema with hyphen notation
+            ruledFields[field.replace(/-/g, '_').replace(/\./g, '-')] = false // Not visited yet
+          }
+        }
+      }
+
       for (const field of formSchema.fields!) {
         // Fields that don't start with 'config-' are considered common fields
-        if (!field.model.startsWith('config-')) {
-          commonFields.push(field)
+        if (field.pinned) {
+          pinnedFields.push(field)
           continue
         }
 
-        if (field.required) {
-          requiredFields.push(field)
+        // A field is hoisted if any of the following is true:
+        // - It has a `required` property and it's set to true
+        // - Is a field with one or more field rules
+        if (field.required || ruledFields[field.model] !== undefined) {
+          if (ruledFields[field.model] === false) {
+            ruledFields[field.model] = true // Mark this as visited
+          }
+          defaultVisibleFields.push(field)
           continue
         }
 
+        // Otherwise, consider it an advanced field
         advancedFields.push(field)
       }
 
-      const fieldGroups: Group[] = []
-
-      if (commonFields.length > 0) {
-        fieldGroups.push({
-          legend: t('plugins.form.grouping.common_fields'),
-          fields: commonFields.sort(sortFieldByOrder),
-          collapsible: true,
-          collapsedByDefault: false,
-        })
+      // For better dev: warn about unknown checked fields
+      const unknownRuleFields = Object.entries(ruledFields)
+        .filter(([, visited]) => !visited)
+        .map(([field]) => field.replace(/-/g, '.').replace(/_/g, '-'))
+      if (unknownRuleFields.length > 0) {
+        console.warn(`Unknown checked fields for plugin ${pluginName}: ${unknownRuleFields.join(', ')}`)
       }
 
-      if (requiredFields.length > 0) {
+      const fieldGroups: Group[] = []
+
+      if (pinnedFields.length > 0) {
         fieldGroups.push({
-          legend: t('plugins.form.grouping.required_fields'),
-          fields: requiredFields.sort(sortFieldByOrderAndModel),
-          collapsible: true,
-          collapsedByDefault: false,
+          fields: pinnedFields.sort(sortFieldByOrder),
         })
       }
 
-      if (advancedFields.length > 0) {
+      if (defaultVisibleFields.length > 0 || advancedFields.length > 0) {
         fieldGroups.push({
-          legend: t('plugins.form.grouping.advanced_fields'),
-          fields: advancedFields.sort(sortFieldByOrderAndModel),
-          collapsible: true,
-          collapsedByDefault: true,
+          fields: defaultVisibleFields.sort(sortNonPinnedFields),
+          collapsible: {
+            title: t('plugins.form.grouping.plugin_configuration.title'),
+            description: t('plugins.form.grouping.plugin_configuration.description'),
+            nestedCollapsible: {
+              fields: advancedFields.sort(sortNonPinnedFields),
+              triggerLabel: {
+                expand: t('plugins.form.grouping.advanced_parameters.view'),
+                collapse: t('plugins.form.grouping.advanced_parameters.hide'),
+              },
+            },
+          },
+          slots: {
+            beforeContent: 'plugin-config-before-content',
+            emptyState: 'plugin-config-empty-state',
+          },
         })
       }
 
@@ -297,7 +358,7 @@ export const useSchemas = (entityId?: string, options?: UseSchemasOptions) => {
 
   /**
    * This is a helper function for mergeSchema. It takes in a field and depending on the field type,
-   * sets the appropiate properties for it to be consumed by VFG (vue form generator)
+   * sets the appropriate properties for it to be consumed by VFG (vue form generator)
    * @param {Object} field the field coming from either the backend schema OR a recursive call to be merged with the frontend schema
    * @param {string} key the current backend schema key we are looping over
    * @param {Object} inputSchema this is the inputSchema we are building to be consumed later by parseSchema
diff --git a/packages/entities/entities-plugins/src/definitions/metadata.ts b/packages/entities/entities-plugins/src/definitions/metadata.ts
new file mode 100644
index 0000000000..7902d72f17
--- /dev/null
+++ b/packages/entities/entities-plugins/src/definitions/metadata.ts
@@ -0,0 +1,772 @@
+import { PluginGroup, PluginScope, type PluginMetaData } from '../types'
+import { type MessageSource as I18nMessageSource } from '../composables/useI18n'
+import { getColumnFields } from './schemas/typedefs'
+import { aclSchema } from './schemas/ACL'
+import aclsCredentialsSchema from './schemas/credentials/mockedAclSchema.json'
+import { basicAuthSchema } from './schemas/BasicAuth'
+import basicAuthCredentialsSchema from './schemas/credentials/mockedBasicAuthSchema.json'
+import { keyAuthSchema } from './schemas/KeyAuth'
+import keyAuthCredentialsSchema from './schemas/credentials/mockedKeyAuthSchema.json'
+import { hmacAuthSchema } from './schemas/HMAC'
+import hmacAuthCredentialsSchema from './schemas/credentials/mockedHmacAuthSchema.json'
+import { jwtSecretSchema } from './schemas/JWT'
+import jwtCredentialsSchema from './schemas/credentials/mockedJwtSchema.json'
+import OAuth2Schema from './schemas/OAuth2'
+import oauthCredentialSchema from './schemas/credentials/mockedOAuthSchema.json'
+import KeyAuthEncSchema from './schemas/KeyAuthEnc'
+import keyEncCredentialSchema from './schemas/credentials/mockedKeyEncAuthSchema.json'
+
+/**
+ * The *static* metadata of all plugins for faster access with less memory footprint.
+ *
+ * Please be noted that the `name` and `description` fields are not populated here, as they depends
+ * on i18n resources. You may use the `usePluginMetaData` composable instead to get the localized metadata.
+ */
+export const PLUGIN_METADATA: Record<string, Omit<PluginMetaData<I18nMessageSource>, 'name' | 'description'>> = {
+  'basic-auth': {
+    descriptionKey: 'plugins.meta.basic-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.basic-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'hmac-auth': {
+    descriptionKey: 'plugins.meta.hmac-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.hmac-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'jwt-signer': {
+    descriptionKey: 'plugins.meta.jwt-signer.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jwt-signer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  jwt: {
+    descriptionKey: 'plugins.meta.jwt.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.jwt.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'key-auth': {
+    descriptionKey: 'plugins.meta.key-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.key-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'key-auth-enc': {
+    descriptionKey: 'plugins.meta.key-auth-enc.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.key-auth-enc.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ldap-auth-advanced': {
+    descriptionKey: 'plugins.meta.ldap-auth-advanced.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ldap-auth-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ldap-auth': {
+    descriptionKey: 'plugins.meta.ldap-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.ldap-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'oauth2-introspection': {
+    descriptionKey: 'plugins.meta.oauth2-introspection.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.oauth2-introspection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  oauth2: {
+    descriptionKey: 'plugins.meta.oauth2.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.oauth2.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'openid-connect': {
+    descriptionKey: 'plugins.meta.openid-connect.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.openid-connect.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'mtls-auth': {
+    descriptionKey: 'plugins.meta.mtls-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.mtls-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'vault-auth': {
+    descriptionKey: 'plugins.meta.vault-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.vault-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'bot-detection': {
+    descriptionKey: 'plugins.meta.bot-detection.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.bot-detection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  cors: {
+    descriptionKey: 'plugins.meta.cors.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.cors.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'ip-restriction': {
+    descriptionKey: 'plugins.meta.ip-restriction.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.ip-restriction.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    fieldRules: {
+      atLeastOneOf: [['config.allow', 'config.deny']],
+    },
+  },
+  opa: {
+    descriptionKey: 'plugins.meta.opa.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.opa.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'kubernetes-sidecar-injector': {
+    descriptionKey: 'plugins.meta.kubernetes-sidecar-injector.description',
+    group: PluginGroup.DEPLOYMENT,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.kubernetes-sidecar-injector.name',
+    scope: [PluginScope.GLOBAL],
+  },
+  'request-validator': {
+    descriptionKey: 'plugins.meta.request-validator.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.request-validator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.body_schema', 'config.parameter_schema']],
+    },
+  },
+  acl: {
+    descriptionKey: 'plugins.meta.acl.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.acl.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    fieldRules: {
+      onlyOneOf: [['config.allow', 'config.deny']],
+    },
+  },
+  canary: {
+    descriptionKey: 'plugins.meta.canary.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.canary.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    fieldRules: {
+      atLeastOneOf: [['config.upstream_uri', 'config.upstream_host', 'config.upstream_port']],
+    },
+  },
+  'forward-proxy': {
+    descriptionKey: 'plugins.meta.forward-proxy.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.forward-proxy.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      onlyOneOfMutuallyRequired: [
+        [
+          ['config.http_proxy_host', 'config.http_proxy_port'],
+          ['config.https_proxy_host', 'config.https_proxy_port'],
+        ],
+      ],
+    },
+  },
+  'proxy-cache': {
+    descriptionKey: 'plugins.meta.proxy-cache.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.proxy-cache.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'proxy-cache-advanced': {
+    descriptionKey: 'plugins.meta.proxy-cache-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.proxy-cache-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    imageName: 'proxy-cache',
+  },
+  'graphql-proxy-cache-advanced': {
+    descriptionKey: 'plugins.meta.graphql-proxy-cache-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.graphql-proxy-cache-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'graphql',
+  },
+  'rate-limiting-advanced': {
+    descriptionKey: 'plugins.meta.rate-limiting-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.rate-limiting-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'rate-limiting': {
+    descriptionKey: 'plugins.meta.rate-limiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.rate-limiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+    fieldRules: {
+      atLeastOneOf: [['config.second', 'config.minute', 'config.hour', 'config.day', 'config.month', 'config.year']],
+    },
+  },
+  'graphql-rate-limiting-advanced': {
+    descriptionKey: 'plugins.meta.graphql-rate-limiting-advanced.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.graphql-rate-limiting-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  mocking: {
+    descriptionKey: 'plugins.meta.mocking.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.mocking.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.api_specification_filename', 'config.api_specification']],
+    },
+  },
+  'request-size-limiting': {
+    descriptionKey: 'plugins.meta.request-size-limiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-size-limiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'request-termination': {
+    descriptionKey: 'plugins.meta.request-termination.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-termination.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'response-ratelimiting': {
+    descriptionKey: 'plugins.meta.response-ratelimiting.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-ratelimiting.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'route-by-header': {
+    descriptionKey: 'plugins.meta.route-by-header.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.route-by-header.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'ai-proxy': {
+    descriptionKey: 'plugins.meta.ai-proxy.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-proxy.name',
+    scope: [PluginScope.ROUTE],
+    useLegacyForm: true,
+  },
+  'ai-prompt-decorator': {
+    descriptionKey: 'plugins.meta.ai-prompt-decorator.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-decorator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    useLegacyForm: true,
+  },
+  'ai-prompt-template': {
+    descriptionKey: 'plugins.meta.ai-prompt-template.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-template.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    useLegacyForm: true,
+  },
+  'ai-prompt-guard': {
+    descriptionKey: 'plugins.meta.ai-prompt-guard.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-prompt-guard.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    useLegacyForm: true,
+  },
+  'ai-request-transformer': {
+    descriptionKey: 'plugins.meta.ai-request-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-request-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    useLegacyForm: true,
+  },
+  'ai-response-transformer': {
+    descriptionKey: 'plugins.meta.ai-response-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.ai-response-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    useLegacyForm: true,
+  },
+  'aws-lambda': {
+    descriptionKey: 'plugins.meta.aws-lambda.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.aws-lambda.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'azure-functions': {
+    descriptionKey: 'plugins.meta.azure-functions.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.azure-functions.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  openwhisk: {
+    descriptionKey: 'plugins.meta.openwhisk.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.openwhisk.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'pre-function': {
+    descriptionKey: 'plugins.meta.pre-function.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.pre-function.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    imageName: 'kong-function',
+  },
+  'post-function': {
+    descriptionKey: 'plugins.meta.post-function.description',
+    group: PluginGroup.SERVERLESS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.post-function.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+    imageName: 'kong-function',
+  },
+  datadog: {
+    descriptionKey: 'plugins.meta.datadog.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.datadog.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  prometheus: {
+    descriptionKey: 'plugins.meta.prometheus.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.prometheus.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  zipkin: {
+    descriptionKey: 'plugins.meta.zipkin.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.zipkin.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  collector: {
+    descriptionKey: 'plugins.meta.collector.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.collector.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'response-transformer-advanced': {
+    descriptionKey: 'plugins.meta.response-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'correlation-id': {
+    descriptionKey: 'plugins.meta.correlation-id.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.correlation-id.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'request-transformer-advanced': {
+    descriptionKey: 'plugins.meta.request-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.request-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'request-transformer': {
+    descriptionKey: 'plugins.meta.request-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.request-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'response-transformer': {
+    descriptionKey: 'plugins.meta.response-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.response-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER, PluginScope.CONSUMER_GROUP],
+  },
+  'route-transformer-advanced': {
+    descriptionKey: 'plugins.meta.route-transformer-advanced.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.route-transformer-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [['config.path', 'config.port', 'config.host']],
+    },
+  },
+  'kafka-upstream': {
+    descriptionKey: 'plugins.meta.kafka-upstream.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.kafka-upstream.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  degraphql: {
+    descriptionKey: 'plugins.meta.degraphql.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.degraphql.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'exit-transformer': {
+    descriptionKey: 'plugins.meta.exit-transformer.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.exit-transformer.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'exit-transformer',
+  },
+  jq: {
+    descriptionKey: 'plugins.meta.jq.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jq.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    imageName: 'jq',
+    fieldRules: {
+      atLeastOneOf: [['config.request_jq_program', 'config.response_jq_program']],
+    },
+  },
+  'file-log': {
+    descriptionKey: 'plugins.meta.file-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.file-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'http-log': {
+    descriptionKey: 'plugins.meta.http-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.http-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  loggly: {
+    descriptionKey: 'plugins.meta.loggly.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.loggly.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'statsd-advanced': {
+    descriptionKey: 'plugins.meta.statsd-advanced.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.statsd-advanced.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  statsd: {
+    descriptionKey: 'plugins.meta.statsd.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.statsd.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  syslog: {
+    descriptionKey: 'plugins.meta.syslog.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.syslog.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'tcp-log': {
+    descriptionKey: 'plugins.meta.tcp-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.tcp-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'udp-log': {
+    descriptionKey: 'plugins.meta.udp-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.udp-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'kafka-log': {
+    descriptionKey: 'plugins.meta.kafka-log.description',
+    group: PluginGroup.LOGGING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.kafka-log.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  session: {
+    descriptionKey: 'plugins.meta.session.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.session.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'upstream-tls': {
+    descriptionKey: 'plugins.meta.upstream-tls.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.upstream-tls.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'application-registration': {
+    descriptionKey: 'plugins.meta.application-registration.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.application-registration.name',
+    scope: [PluginScope.SERVICE],
+  },
+  'konnect-application-auth': {
+    descriptionKey: 'plugins.meta.konnect-application-auth.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.konnect-application-auth.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE],
+    imageName: 'application-registration',
+  },
+  acme: {
+    descriptionKey: 'plugins.meta.acme.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.acme.name',
+    scope: [PluginScope.GLOBAL],
+  },
+  'grpc-gateway': {
+    descriptionKey: 'plugins.meta.grpc-gateway.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.grpc-gateway.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'grpc-web': {
+    descriptionKey: 'plugins.meta.grpc-web.description',
+    group: PluginGroup.TRANSFORMATIONS,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.grpc-web.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'upstream-timeout': {
+    descriptionKey: 'plugins.meta.upstream-timeout.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.upstream-timeout.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  // New in Kong 3.0
+  opentelemetry: {
+    descriptionKey: 'plugins.meta.opentelemetry.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: false,
+    nameKey: 'plugins.meta.opentelemetry.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'websocket-validator': {
+    descriptionKey: 'plugins.meta.websocket-validator.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.websocket-validator.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'websocket-size-limit': {
+    descriptionKey: 'plugins.meta.websocket-size-limit.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.websocket-size-limit.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+    fieldRules: {
+      atLeastOneOf: [
+        ['config.client_max_payload', 'config.upstream_max_payload'],
+      ],
+    },
+  },
+  'tls-metadata-headers': {
+    descriptionKey: 'plugins.meta.tls-metadata-headers.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.tls-metadata-headers.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'tls-handshake-modifier': {
+    descriptionKey: 'plugins.meta.tls-handshake-modifier.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.tls-handshake-modifier.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'oas-validation': {
+    descriptionKey: 'plugins.meta.oas-validation.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.oas-validation.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  'jwe-decrypt': {
+    descriptionKey: 'plugins.meta.jwe-decrypt.description',
+    group: PluginGroup.AUTHENTICATION,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.jwe-decrypt.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'xml-threat-protection': {
+    descriptionKey: 'plugins.meta.xml-threat-protection.description',
+    group: PluginGroup.TRAFFIC_CONTROL,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.xml-threat-protection.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+  saml: {
+    descriptionKey: 'plugins.meta.saml.description',
+    group: PluginGroup.SECURITY,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.saml.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE],
+  },
+  'app-dynamics': {
+    descriptionKey: 'plugins.meta.app-dynamics.description',
+    group: PluginGroup.ANALYTICS_AND_MONITORING,
+    isEnterprise: true,
+    nameKey: 'plugins.meta.app-dynamics.name',
+    scope: [PluginScope.GLOBAL, PluginScope.SERVICE, PluginScope.ROUTE, PluginScope.CONSUMER],
+  },
+}
+
+/**
+ * The *static* metadata of all credential types for faster access with less memory footprint.
+ *
+ * Please be noted that the `title` fields are not populated here, as they depends on i18n resources.
+ * You may use the `usePluginMetaData` composable instead to get the localized metadata.
+ */
+export const CREDENTIAL_METADATA: Record<string, any> = {
+  acl: {
+    titleKey: 'plugins.meta.acl.name',
+    plugin: 'acl',
+    schema: aclSchema,
+    nameKey: 'plugins.meta.acl.credential_name',
+    endpoint: '/acls',
+    schemaEndpoint: 'acls',
+    fields: getColumnFields(aclSchema),
+    applyCredentialButtonText: 'Add group to consumer',
+  },
+  'basic-auth': {
+    titleKey: 'plugins.meta.basic-auth.name',
+    plugin: 'basic-auth',
+    schema: basicAuthSchema,
+    nameKey: 'plugins.meta.basic-auth.credential_name',
+    endpoint: '/basic-auth',
+    schemaEndpoint: 'basicauth_credentials',
+    fields: getColumnFields(basicAuthSchema),
+  },
+  'key-auth': {
+    titleKey: 'plugins.meta.key-auth.name',
+    plugin: 'key-auth',
+    schema: keyAuthSchema,
+    nameKey: 'plugins.meta.key-auth.credential_name',
+    endpoint: '/key-auth',
+    schemaEndpoint: 'keyauth_credentials',
+    fields: getColumnFields(keyAuthSchema),
+  },
+  'key-auth-enc': {
+    titleKey: 'plugins.meta.key-auth-enc.name',
+    plugin: 'key-auth-enc',
+    schema: KeyAuthEncSchema,
+    nameKey: 'plugins.meta.key-auth-enc.credential_name',
+    endpoint: '/key-auth-enc',
+    schemaEndpoint: 'keyauth_enc_credentials',
+    fields: getColumnFields(KeyAuthEncSchema),
+  },
+  oauth2: {
+    titleKey: 'plugins.meta.oauth2.name',
+    plugin: 'oauth2',
+    schema: OAuth2Schema,
+    nameKey: 'plugins.meta.oauth2.credential_name',
+    endpoint: '/oauth2',
+    schemaEndpoint: 'oauth2_credentials',
+    fields: getColumnFields(OAuth2Schema),
+  },
+  'hmac-auth': {
+    titleKey: 'plugins.meta.hmac-auth.name',
+    plugin: 'hmac-auth',
+    schema: hmacAuthSchema,
+    nameKey: 'plugins.meta.hmac-auth.credential_name',
+    endpoint: '/hmac-auth',
+    schemaEndpoint: 'hmacauth_credentials',
+    fields: getColumnFields(hmacAuthSchema),
+  },
+  jwt: {
+    titleKey: 'plugins.meta.jwt.name',
+    plugin: 'jwt',
+    schema: jwtSecretSchema,
+    nameKey: 'plugins.meta.jwt.credential_name',
+    endpoint: '/jwt',
+    schemaEndpoint: 'jwt_secrets',
+    fields: {
+      id: {},
+      key: {},
+      algorithm: {},
+    },
+  },
+}
+
+// Used by Konnect, since there is currently no API endpoints to fetch credential schemas from
+export const CREDENTIAL_SCHEMAS: Record<string, any> = {
+  acls: aclsCredentialsSchema,
+  basicauth_credentials: basicAuthCredentialsSchema,
+  keyauth_credentials: keyAuthCredentialsSchema,
+  keyauth_enc_credentials: keyEncCredentialSchema,
+  oauth2_credentials: oauthCredentialSchema,
+  hmacauth_credentials: hmacAuthCredentialsSchema,
+  jwt_secrets: jwtCredentialsSchema,
+}
+
+/**
+ * Gets the URL for the plugin icon.
+ * Plugins with optional `imageName` property will be handled automatically.
+ *
+ * @param name plugin name
+ * @returns URL for the plugin icon
+ */
+export const getPluginIconURL = (name: string) => {
+  const imageName = PLUGIN_METADATA[name]?.imageName || name
+  return new URL(`../assets/images/plugin-icons/${imageName}.png`, import.meta.url).href
+}
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ACL.ts b/packages/entities/entities-plugins/src/definitions/schemas/ACL.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ACL.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ACL.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptDecorator.ts b/packages/entities/entities-plugins/src/definitions/schemas/AIPromptDecorator.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptDecorator.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/AIPromptDecorator.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptTemplate.ts b/packages/entities/entities-plugins/src/definitions/schemas/AIPromptTemplate.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/AIPromptTemplate.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/AIPromptTemplate.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ApplicationRegistration.ts b/packages/entities/entities-plugins/src/definitions/schemas/ApplicationRegistration.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ApplicationRegistration.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ApplicationRegistration.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayCardContainerFields.ts b/packages/entities/entities-plugins/src/definitions/schemas/ArrayCardContainerFields.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayCardContainerFields.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ArrayCardContainerFields.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayStringFieldSchema.ts b/packages/entities/entities-plugins/src/definitions/schemas/ArrayStringFieldSchema.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/ArrayStringFieldSchema.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/ArrayStringFieldSchema.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/BasicAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/BasicAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/BasicAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/BasicAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Datadog.ts b/packages/entities/entities-plugins/src/definitions/schemas/Datadog.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Datadog.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Datadog.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/GraphQLRateLimitingAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/GraphQLRateLimitingAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/GraphQLRateLimitingAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/GraphQLRateLimitingAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/HMAC.ts b/packages/entities/entities-plugins/src/definitions/schemas/HMAC.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/HMAC.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/HMAC.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/JWT.ts b/packages/entities/entities-plugins/src/definitions/schemas/JWT.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/JWT.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/JWT.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Kafka.ts b/packages/entities/entities-plugins/src/definitions/schemas/Kafka.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Kafka.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Kafka.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/KeyAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/KeyAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuthEnc.ts b/packages/entities/entities-plugins/src/definitions/schemas/KeyAuthEnc.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/KeyAuthEnc.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/KeyAuthEnc.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/MetricFields.ts b/packages/entities/entities-plugins/src/definitions/schemas/MetricFields.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/MetricFields.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/MetricFields.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Mocking.ts b/packages/entities/entities-plugins/src/definitions/schemas/Mocking.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Mocking.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Mocking.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/OAuth2.ts b/packages/entities/entities-plugins/src/definitions/schemas/OAuth2.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/OAuth2.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/OAuth2.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/PreFunction.ts b/packages/entities/entities-plugins/src/definitions/schemas/PreFunction.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/PreFunction.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/PreFunction.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RateLimiting.ts b/packages/entities/entities-plugins/src/definitions/schemas/RateLimiting.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RateLimiting.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RateLimiting.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RequestTransformerAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/RequestTransformerAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RequestTransformerAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RequestTransformerAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RequestValidator.ts b/packages/entities/entities-plugins/src/definitions/schemas/RequestValidator.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RequestValidator.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RequestValidator.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/RouteByHeader.ts b/packages/entities/entities-plugins/src/definitions/schemas/RouteByHeader.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/RouteByHeader.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/RouteByHeader.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/SAML.ts b/packages/entities/entities-plugins/src/definitions/schemas/SAML.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/SAML.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/SAML.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/StatsD.ts b/packages/entities/entities-plugins/src/definitions/schemas/StatsD.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/StatsD.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/StatsD.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/StatsDAdvanced.ts b/packages/entities/entities-plugins/src/definitions/schemas/StatsDAdvanced.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/StatsDAdvanced.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/StatsDAdvanced.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/VaultAuth.ts b/packages/entities/entities-plugins/src/definitions/schemas/VaultAuth.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/VaultAuth.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/VaultAuth.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/Zipkin.ts b/packages/entities/entities-plugins/src/definitions/schemas/Zipkin.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/Zipkin.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/Zipkin.ts
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedAclSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedAclSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedAclSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedAclSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedBasicAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedBasicAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedBasicAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedBasicAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedHmacAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedHmacAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedHmacAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedHmacAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedJwtSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedJwtSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedJwtSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedJwtSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyEncAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyEncAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedKeyEncAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedKeyEncAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedOAuthSchema.json b/packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedOAuthSchema.json
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/credentials/mockedOAuthSchema.json
rename to packages/entities/entities-plugins/src/definitions/schemas/credentials/mockedOAuthSchema.json
diff --git a/packages/entities/entities-plugins/src/composables/plugin-schemas/typedefs.ts b/packages/entities/entities-plugins/src/definitions/schemas/typedefs.ts
similarity index 100%
rename from packages/entities/entities-plugins/src/composables/plugin-schemas/typedefs.ts
rename to packages/entities/entities-plugins/src/definitions/schemas/typedefs.ts
diff --git a/packages/entities/entities-plugins/src/index.ts b/packages/entities/entities-plugins/src/index.ts
index 885a602286..f732c803c2 100644
--- a/packages/entities/entities-plugins/src/index.ts
+++ b/packages/entities/entities-plugins/src/index.ts
@@ -5,12 +5,13 @@ import PluginSelect from './components/PluginSelect.vue'
 import PluginSelectGrid from './components/select/PluginSelectGrid.vue'
 import PluginConfigCard from './components/PluginConfigCard.vue'
 import composables from './composables'
+import { getPluginIconURL } from './definitions/metadata'
 import pluginEndpoints from './plugins-endpoints'
 
 // expose VueFormGenerator so host app doesn't need @kong-ui-public/forms as a dependency
 export { VueFormGenerator } from '@kong-ui-public/forms'
 
-const { getPluginIconURL, usePluginMetaData } = composables
+const { usePluginMetaData } = composables
 
 export {
   PluginForm,
diff --git a/packages/entities/entities-plugins/src/locales/en.json b/packages/entities/entities-plugins/src/locales/en.json
index c1ce03f9f9..0e157ee11d 100644
--- a/packages/entities/entities-plugins/src/locales/en.json
+++ b/packages/entities/entities-plugins/src/locales/en.json
@@ -531,9 +531,21 @@
         }
       },
       "grouping": {
-        "common_fields": "Common Fields",
-        "required_fields": "Required Fields",
-        "advanced_fields": "Advanced Fields"
+        "plugin_configuration": {
+          "title": "Plugin Configuration",
+          "description": "Configuration parameters for this plugin. View advanced parameters for extended configuration.",
+          "empty": "This plugin does not have required parameters."
+        },
+        "advanced_parameters": {
+          "view": "View Advanced Parameters",
+          "hide": "Hide Advanced Parameters"
+        }
+      },
+      "field_rules": {
+        "at_least_one_of": "At least one of these parameters is required: {parameters}",
+        "only_one_of": "Exactly one of these parameters is required: {parameters}",
+        "mutually_required": "All of these parameters are required: {parameters}",
+        "only_one_of_mutually_required": "Exactly one of the following parameter combinations is required (all parameters within a chosen combination are required):"
       }
     }
   },
diff --git a/packages/entities/entities-plugins/src/types/plugin-form.ts b/packages/entities/entities-plugins/src/types/plugin-form.ts
index 48c6197d28..7f53cc69a8 100644
--- a/packages/entities/entities-plugins/src/types/plugin-form.ts
+++ b/packages/entities/entities-plugins/src/types/plugin-form.ts
@@ -101,7 +101,9 @@ export interface DefaultPluginsFormSchema {
   tags?: PluginTags
   values?: Array<Record<string, string | number | boolean>>
   placeholder?: string
-  required?: boolean,
+  required?: boolean
+  /** Whether the field is pinned before the Plugin Configuration. FE only */
+  pinned?: boolean
   // Will be fixed in KHCP-6469
   getColumnFields?: (schema: unknown) => object
 }
diff --git a/packages/entities/entities-plugins/src/types/plugin.ts b/packages/entities/entities-plugins/src/types/plugin.ts
index 46f663ede9..f25f9b0489 100644
--- a/packages/entities/entities-plugins/src/types/plugin.ts
+++ b/packages/entities/entities-plugins/src/types/plugin.ts
@@ -1,3 +1,5 @@
+import type { PathToDotNotation } from '@kong-ui-public/i18n/dist/types/types'
+
 export enum PluginGroup {
   AUTHENTICATION = 'Authentication',
   SECURITY = 'Security',
@@ -60,13 +62,79 @@ export interface PluginEntityInfo {
   idField?: EntityTypeIdField
 }
 
-export type PluginMetaData = {
+/**
+ * Rules for fields in a plugin entity.
+ * See `entity_checks` in BE schemas to learn more.
+ */
+export interface FieldRules {
+  /**
+   * An array of rules.
+   *
+   * Must provide at least one of the parameters in a rule.
+   *
+   * NOTE: See `at_least_one_of` in BE schema to learn more.
+   */
+  atLeastOneOf?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide exactly one of the parameters in a rule.
+   *
+   * NOTE: See `only_one_of` in BE schema to learn more.
+   */
+  onlyOneOf?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide all of the parameters in a rule if one of the parameter is provided. Otherwise,
+   * none of them should be provided.
+   *
+   * NOTE: See `mutually_required` in BE schemas to learn more.
+   */
+  mutuallyRequired?: string[][]
+
+  /**
+   * An array of rules.
+   *
+   * Must provide exactly one combination of parameters in a rule, while all of the parameters in
+   * the provided combination are required.
+   *
+   * For example, the following structure:
+   * ```javascript
+   * [
+   *   [
+   *     ['param1', 'param2'],
+   *     ['param3', 'param4']
+   *   ],
+   *   [
+   *     ['param5', 'param6'],
+   *     ['param7', 'param8']
+   *   ],
+   * ]
+   * ```
+   * … means that:
+   * - There are two independent rules
+   * - In the first rule, either both `param1` and `param2` or both `param3` and `param4` are required.
+   * - In the second rule, either both `param5` and `param6` or both `param7` and `param8` are required.
+   *
+   * NOTE: These rules are manually simplified. They does not have corresponding BE entity checks.
+   */
+  onlyOneOfMutuallyRequired?: string[][][]
+}
+
+export type PluginMetaData<I18nMessageSource = void> = {
+  nameKey: I18nMessageSource extends void ? string : PathToDotNotation<I18nMessageSource, string>
+  name: string // A display name of the Plugin.
+  descriptionKey: I18nMessageSource extends void ? string : PathToDotNotation<I18nMessageSource, string>
   description: string // A string to describe a Plugin.
   group: PluginGroup // Plugin categories meta.
-  imageName?: string // An optional tag to define plugin's icon image.
-  isEnterprise: boolean // The value will be True if the Plugin is enterprise only.
-  name: string // A display name of the Plugin.
   scope: PluginScope[] // The scope supported by the Plugin.
+  isEnterprise: boolean // The value will be True if the Plugin is enterprise only.
+  imageName?: string // An optional tag to define plugin's icon image.
+  useLegacyForm?: boolean // An optional field to use legacy form for the plugin. Default to false.
+  fieldRules?: FieldRules
 }
 
 export interface PluginType extends PluginMetaData {
diff --git a/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue b/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
index 8f67619d58..fbe201839f 100644
--- a/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
+++ b/packages/entities/entities-shared/src/components/entity-base-form/EntityBaseForm.vue
@@ -23,6 +23,7 @@
     <form
       v-else
       data-testid="form-content"
+      :novalidate="props.noValidate"
       @reset.prevent="handleClickCancel"
       @submit.prevent="handleClickSave"
     >
@@ -174,6 +175,13 @@ const props = defineProps({
     type: Object as PropType<Record<string, any>>,
     required: true,
   },
+  /**
+   * Set true to disable the form validation upon submission.
+   */
+  noValidate: {
+    type: Boolean,
+    default: false,
+  },
 })
 
 const router = useRouter()