Hugging Face MCP (official, remote)
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs10/15
- License10/10
Tested Hugging Face's hosted MCP at https://huggingface.co/mcp (server 0.4.34; source huggingface/hf-mcp-server, MIT, 314 GitHub stars when checked). Initialize and tools/list worked with no token (4 tools when anonymous; signing in adds more and lets you pick Spaces tools). hf_whoami (self-check) said the tools are being used anonymously and may be rate limited (no figure given). Real calls: hub_repo_search for 'qwen coder' returned models and datasets, and hub_repo_details returned the openai/gpt-oss-120b model card summary. Not the same as our hugging-face-spaces listing.
Tool-call test (2026-11-11, direct MCP stdio client, no LLM): pass. 2 of 2 function calls passed anonymously (plus 1 self-check). Evidence: live endpoint probe, Nov 11, 2026.
Transport (tested 2026-11-11): Streamable HTTP
Token cost (estimate): approx. 1967 tokens, cl100k estimate (4 tools, measured 2026-11-11). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 4 read, 0 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown
Auth: none. Rate limit: unknown. Pricing unit: unknown.
hf_fs— readhf_whoami— readhub_repo_details— readhub_repo_search— read
remote handshake listed tools without credentials; no recorded key or OAuth
Score 95/100 · Tools 4 · Token cost approx. 1,967 tokens · Compare · Last tested 2026-11-11 · Server version 0.4.34 · Remote endpoint https://huggingface.co/mcp (streamable-http) · Repo huggingface/hf-mcp-server
Summary: Hugging Face MCP (official, remote) completed an MCP handshake without credentials and exposed 4 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 4
- Context cost
- approx. 1967 tokens, cl100k estimate (4 tools, measured 2026-11-11; an estimate) ranking · add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-11
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | Endpoint https://huggingface.co/mcp reachable over streamable-http (HTTP 200) in 0.3s; no install step for remote servers. |
| handshake | pass | 30 | MCP initialize (protocol 2025-06-18, server huggingface.co/mcp 0.4.34) + tools/list over streamable-http succeeded with no credentials; 4 tools listed in 0.3s. Tool calls may still need a key. |
| maintenance | pass | 25 | Repo pushed 0 days before test; 314 GitHub stars. |
| docs | partial | 10 | README over 3,000 chars; install instructions present. Check of the package's own README (vendor repo README (github.com/huggingface/hf-mcp-server)). |
| license | pass | 10 | MIT (OSI-approved). |
Local-model readiness
Token cost (estimate): approx. 1967 tokens, cl100k estimate for 4 tools · about 24% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-11
- Install from the registry (remote endpoint: connection only)
- We connected with no credentials and asked for its tool list: it listed 4 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Not checked (remote-only): hosted endpoint, version unknown.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Baseline recorded from the 2026-11-11 test run; changes appear after the next test.
Snapshot hash (fingerprint of the tool list)
6f395d200a5f: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "huggingface-remote",
"version": null,
"registry": "remote",
"status": "working",
"tested": "2026-11-11",
"tools_count": 4,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"Endpoint https://huggingface.co/mcp reachable over streamable-http (HTTP 200) in 0.3s; no install step for remote servers."
],
"handshake": [
"pass",
30,
"MCP `initialize` (protocol 2025-06-18, server huggingface.co/mcp 0.4.34) + `tools/list` over streamable-http succeeded with no credentials; 4 tools listed in 0.3s. Tool calls may still need a key."
],
"maintenance": [
"pass",
25,
"Repo pushed 0 days before test; 314 GitHub stars."
],
"docs": [
"partial",
10,
"README over 3,000 chars; install instructions present. Check of the package's own README (vendor repo README (github.com/huggingface/hf-mcp-server))."
],
"license": [
"pass",
10,
"MIT (OSI-approved)."
]
}
}Install
https://huggingface.co/mcp
Tools listed
hf_fs, hf_whoami, hub_repo_details, hub_repo_search
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"hugging-face-mcp-remote": {
"type": "http",
"url": "https://huggingface.co/mcp"
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. No install step: it is a remote server at https://huggingface.co/mcp.
- Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (4 in our test).
{
"mcpServers": {
"hugging-face-mcp-remote": {
"type": "http",
"url": "https://huggingface.co/mcp"
}
}
}Test history
- 2026-11-11: New
FAQ
Is Hugging Face MCP deprecated?
No. huggingface-remote was not deprecated or archived when we last tested it on 2026-11-11.
What replaces Hugging Face MCP?
Nothing; Hugging Face MCP (official, remote) is not deprecated as of 2026-11-11.
Does Hugging Face MCP need an API key?
No. It completed an MCP handshake with no credentials and listed 4 tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.