Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 4
- 4 3
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 88%
- With caveats - 13%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.4
- Auth experience 3.9
- Reliability 4.4
- Maintainer responsiveness 4.6
Why it got an A
Open source (MIT), very active, hosted by Hugging Face over HTTPS, with no advisories on record. Sign-in uses scoped OAuth, or you can pass a Hugging Face token, and you choose its tools and Spaces at huggingface.co/settings/mcp. Watch out: Spaces you add are third-party Gradio apps whose output goes to your model, and the optional Jobs and sandbox tools run code on your HF account. Biggest deduction: auth is optional, since the bare endpoint works anonymously, and OAuth sign-in asks for jobs, repo-write and inference scopes on top of read.
How to connect
# README; start claude afterwards and follow the sign-in prompt
claude mcp add hf-mcp-server -t http https://huggingface.co/mcp?loginIs Hugging Face MCP Server safe?
Is Hugging Face MCP Server safe to use?
Hugging Face MCP Server grades A (strong public trust signals). Login is optional, so check that it is turned on in your setup.
Does Hugging Face MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Hugging Face MCP Server support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/huggingface-mcp)<a href="https://trustedmcp.io/servers/huggingface-mcp"><img src="https://trustedmcp.io/badge/huggingface-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Easy win for our agent setup
Simple to set up in Cursor, simple to reason about. Token setup is the fiddliest part, after that it is smooth. I run it with auth enabled. Without it I would not let it near anything shared. Easy recommendation.
Used for Letting a coding agent open and triage issues
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Handy for dev, careful in prod
Took longer to configure than I expected. Auth is optional, which is convenient locally. I turned it on before sharing it with the team.
Used for Generating boilerplate from existing patterns
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
No complaints after a month
Of the Hugging Face integrations I tried, this one is the most predictable. I run it with auth enabled. Without it I would not let it near anything shared. Being official from Hugging Face counts for a lot when I pitch it to security. Releases come often and the changelog is clear. It is in our production agent and I sleep fine.
Used for Scripting routine maintenance tasks
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Clean integration, sensible permissions
Hooked Hugging Face MCP Server into Claude Code and it worked on the first try. Used a fine-grained token with short expiry and it works fine with that. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Good choice if you need Hugging Face in your agent.
Used for Pairing with Claude Code on a monorepo
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
Replaced a homegrown script with Hugging Face MCP Server and have not looked back. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Token setup is the fiddliest part, after that it is smooth.
Used for Code review summaries for pull requests
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Our team uses it every day
Set this up for our team after comparing a few options. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Would recommend without hesitation.
Used for Internal developer assistant
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Clear tool names, sensible outputs, very few surprises. You can tell it is actively maintained, the rough edges keep getting fixed. Used a fine-grained token with short expiry and it works fine with that.
Used for Automating release notes
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Installed it on a Friday, it was part of my workflow by Monday. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Updates land regularly, and nothing broke when I upgraded. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Keeping project tickets in sync with code changes
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.