HuggingFace Space MCP
Runs any HuggingFace Space from Claude, including image generation, chat, and vision tasks with file uploads.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
This MCP server proxies arbitrary HuggingFace Spaces through Claude, enabling access to thousands of community-hosted ML models. The maintainer (evalstate) appears to be a solo developer with limited track record. The core risk is that it grants Claude the ability to invoke any public HuggingFace Space, including those with unknown provenance or safety properties. Whilst the server itself is distributed via npm with reasonable packaging, the permission surface is broad: outbound network calls to arbitrary endpoints, file uploads to third-party inference services, and potential exposure of the HF_TOKEN credential. The code is open source with adequate documentation, but the trust boundary extends beyond the MCP itself to whichever Spaces Claude chooses to invoke. No known security incidents, but the design inherently delegates trust to HuggingFace's community ecosystem, which varies widely in quality and safety.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREESpaces are user-uploaded code that returns user-shaped output. Outbound on each call. Pair with any private-data MCP for full exposure.
Green flags
- Distributed via npm with standard packaging and versioning
- Open source with clear repository and documentation
- No known security incidents or malicious behaviour
- Leverages HuggingFace's existing authentication infrastructure
Red flags
- Proxies arbitrary third-party ML models with unknown safety properties
- HF_TOKEN credential exposed to any Space Claude invokes
- Solo maintainer with limited public track record
- No sandboxing of Space outputs or input validation
- File uploads sent to community-hosted inference endpoints
Permissions requested
Install
npx -y @llmindset/mcp-hfspace
HF_TOKENReview
Install this if you regularly prototype with HuggingFace models or need access to community Spaces without writing integration code. Skip it if you stick to mainstream APIs or don't have workflows that benefit from model variety. It's a power tool for people who already live in the HuggingFace ecosystem.
Good at
- Access to thousands of HuggingFace Spaces without writing API wrappers or leaving Claude.
- File uploads work natively, so you can test vision models or audio tools directly in chat.
- Useful for prototyping ML pipelines with niche or experimental models that lack official APIs.
- Automatically inspects Gradio interfaces, so you don't need to read Space documentation.
Watch out
- Reliability depends entirely on the Space; some are slow, some time out, and error messages can be vague.
- No result caching, so repeated calls hit HuggingFace each time and can be slow.
- Limited to Gradio-based Spaces, which excludes some older or custom interfaces.
- Requires familiarity with HuggingFace's ecosystem to know which Spaces are worth using.
Use cases
- prototype ML pipelines
- FLUX image generation
- vision model access
- community model testing
Getting started
Works with
Similar MCPs
- Lara Translate MCPProfessional translation with language detection, context-aware translations, translation memories, and glossaries.
- Make MCPTurns Make automation scenarios into callable tools for AI assistants, bridging 1,000+ apps through Make workflows.
- CCXT MCPCrypto exchange integration using CCXT, covering spot, futures, OHLCV, balances, and orders across 20+ exchanges.
- HubSpotHubSpot's MCP for CRM workflows: contacts, deals, tickets, properties. Distributed via NPM, see the developer docs for install steps.