---
title: "Hugging Face Official MCP Server: review, setup & limitations · Undominated.ai"
canonical: https://undominated.ai/mcp-servers/huggingface/
description: "Official Hugging Face MCP server connecting AI assistants to the Hub, repository search, and Gradio AI applications."
---

# Hugging Face Official MCP Server: review, setup & limitations · Undominated.ai

> Official Hugging Face MCP server connecting AI assistants to the Hub, repository search, and Gradio AI applications.

[← Explore all mcp servers](/mcp-servers/)

MODEL HUB AND AI TOOLS / Hugging Face

# Hugging Face Official MCP Server

Official Hugging Face MCP server connecting AI assistants to the Hub, repository search, and Gradio AI applications.

 [See setup guidance ↓](#setup)[Original source ↗](https://github.com/huggingface/hf-mcp-server)

SOURCE REVIEW

 Reviewed 2026-10-14
 Evidence 2 linked sources
 Publisher Hugging Face
 Licence [MIT ↗](https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/LICENSE)
 Revision dce2d5f0f163
 [Read what was—and wasn’t—checked ↓](#review)

“Connect your LLM to the Hugging Face Hub and thousands of Gradio AI Applications.”

 [Hugging Face · upstream description ↗](https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/README.md) Our analysis follows below.

01 / THE REASONING

## Why this made the selection.

 - The pinned README is Hugging Face's hosted MCP endpoint for the Hub, with a local stdio package as well.
- Creating repositories, jobs, dynamic Spaces, and sandboxes requires a Hugging Face token; the public server card does not advertise auth query parameters.

### A good fit for

 - Searching or reading public Hub repositories from https://huggingface.co/mcp
- A local stdio process via npx @llmindset/hf-mcp-server when the hosted endpoint is not wanted

### Weigh up before choosing

 - Dynamic Space and sandbox execution can consume Hugging Face compute credits.
- Gradio image content blocks can overload token context unless `?no_image_content=true` is appended.
- Repository creation and job triggers require an authenticated Hugging Face write token.
- The openai bouquet's write and sandbox tools do nothing useful without authentication.
- A skills-dashboard read does not prove a skill was executed or fully installed.
- The metrics page password is described as a lightweight gate, not protection for sensitive data.
- A pin does not verify transitive dependencies.
- This review did not execute the resource.
- A token stored for the stdio process is not an authenticated remote caller, and wildcard host allowlists widen network trust.

02 / THE REVIEW RECORD

## What we actually inspected.

Source review has boundaries. A clear record is more useful than a “safe” badge.

### Material inspected

 - README.md
- LICENSE
- Round 2 reread of acquired publisher setup and permission evidence; see immutable wave review.

### Our findings

 - Advertises v0.4.28 release with definition digest verification.
- Supports configurable tool bouquets (?bouquet=openai) and local web dashboard at /metrics.
- The README connects an LLM to the Hugging Face Hub and Gradio applications, over stdio or stateless Streamable HTTP at /mcp.
- Repository creation, Jobs, dynamic Spaces, and sandbox tools require a Hugging Face token. The public server card advertises https://huggingface.co/mcp without authentication query parameters.
- Skills activity retrieval does not prove execution or complete installation, and the metrics password is explicitly not treated as protection for sensitive data.
- The local HTTP server does not fall back to DEFAULT_HF_TOKEN for incoming clients, whereas stdio supports its documented environment-token path.

### Not established by this review

 - Live Gradio Space executions and compute jobs were not run.
- The server was not started and its tools were not called.
- A pin does not verify transitive dependencies.

The review applies to the material and revision named here. A newer upstream release can change its behavior.

03 / PUT IT TO WORK

## Connect a server deliberately.

[Upstream setup instructions ↗](https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/README.md)

DOCUMENTED COMMAND

 claude mcp add hf-mcp-server -t http https://huggingface.co/mcp?login Copy command ↗

Copying does not execute this command. It may retrieve a newer version than the reviewed source.

 - Run the claude mcp add command or add the HTTP snippet to your client configuration.
- Authenticate via the prompted browser login or provide an Authorization header with your HF token.

### Before you start

 - Hugging Face account
- HF User Access Token for authenticated tools

### Compatibility

Claude Code · Claude Desktop · VS Code · Cursor · Gemini CLI

### Implementation

TypeScript

### Transports

Streamable HTTP · stdio

### Hugging Face account and Hub API

 - read:hub-models-datasets
- write:spaces-sandboxes

### Cost model

MIT license. Public hub queries are free; private repositories and GPU-backed Space calls incur Hugging Face compute costs.

04 / FOLLOW THE EVIDENCE

## The source trail.

Our notes are separate from the original resource. Check upstream before adopting a new version.

 - [Hugging Face MCP Server repository ↗](https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/README.md) Checked 2026-10-14 https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/README.md Supports: summary, upstreamDescription, whySelected, install, transports, configExample
- [Hugging Face MCP MIT License ↗](https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/LICENSE) Checked 2026-10-14 https://github.com/huggingface/hf-mcp-server/blob/dce2d5f0f16392e22d6f3fdc039681f4698e8cdf/LICENSE Supports: license

KEEP COMPARING

## Other approaches to consider.

Related by category or shared topics. These are alternatives to inspect, not a measured quality order.

 [### Hugging Face MCP ↗ Connects an assistant to Hub discovery, with optional community tools and account-scoped compute or repository actions.](/mcp-servers/hugging-face/)[### Langfuse data MCP ↗ Inspect Langfuse observations, prompts and evaluation data, and manage supported project resources through its native MCP endpoint.](/mcp-servers/langfuse/)[### OpenRouter MCP Server ↗ OpenRouter-hosted MCP server for live model search, per-provider pricing, credits, usage rankings and docs, plus two billable tools (send-message and generate-image). Connecting mints a dedicated OpenRouter key with a 7-day expiry and a $10 default spend limit.](/mcp-servers/openrouter/)

 [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/)

## Continue your investigation

 - [Inspect resource evidence](/tools/)
- [Choose a host](/agents/)
- [Inspect reusable workflows](/skills/)
- [Use Undominated data](/api/)
