How is this different from connecting Hugging Face MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Hugging Face MCP API changes?

We track the Hugging Face MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Hugging Face tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Hugging Face?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Hugging Face MCP server myself?

No. TrustGate connects to the Hugging Face MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Hugging Face directly.

Connect Hugging Face MCP to your AI agents, securely.

Q: Is Hugging Face MCP secure?

The server itself exposes 10 tools, and some of them can write to your Hugging Face account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Hugging Face.

One secured endpoint for every Hugging Face call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Hugging Face MCP now

What your agents can ask once Hugging Face MCP is connected.

Select the tools your AI agents can call

10 tools from the Hugging Face MCP schema.

Showing 10 tools

hub_repo_searchreadSearches Hugging Face repositories with a shared query interface, targeting models, datasets, Spaces or all of them.
hf_fsreadBrowses the Hugging Face Hub as a file system: models, datasets, Spaces, collections, papers, trending content, documentation and repository files.
hub_repo_detailsreadGets details for one or more Hugging Face repos, auto-detecting model, dataset or Space, optionally including the README.
create_repowriteCreates a Hugging Face model, dataset, Space or bucket repository.
hf_whoamireadIdentifies the authenticated Hugging Face account, or reports that tools are being used anonymously.
dynamic_spacehigh riskDiscovers and runs Gradio Spaces as tools. Spaces execute third-party code on the Hugging Face infrastructure.
hf_sandboxhigh riskCreates and manages Hugging Face Sandboxes.
hf_sandbox_exechigh riskRuns a shell command inside a Hugging Face Sandbox.
hf_sandbox_fshigh riskReads, writes and manages files inside a Hugging Face Sandbox.
hf_jobshigh riskRuns Python/UV or Docker jobs on Hugging Face remote compute, with submit, logs, inspect, cancel and schedule operations.

What Hugging Face MCP exposes

Hugging Face MCP groups its 10 tools into 4 categories, each with a suggested starting policy.

All 10 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Search	Model, dataset and Space search, plus a shared repo query interface	Read	Allow public hub searches
Repositories	Details for one or more models, datasets or Spaces, including READMEs	Read / Write	Allow repo lookups
Spaces & Account	Running Gradio Spaces as tools and identifying the authenticated account	Read / Write	Approve dynamic Space execution; Spaces run third-party code
Compute	Hugging Face Jobs and Sandboxes: remote job runs, shell commands and sandbox files	Read / Write	Require approval; jobs and sandboxes run arbitrary code and can incur cost

Connect Hugging Face MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Hugging Face
Find Hugging Face in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Hugging Face MCP or block it. You allow the exact tools each agent can call, one by one.

Hugging Face MCP	10 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 10 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Hugging Face MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Hugging Face MCP10 documented tools.
Coding assistants	Connection & credentialsper user	Compute4 tools
Internal copilots	Tool access policiesdeny by default	Search2 tools
Workflow automations	Request & response inspectioninline	Spaces & Account2 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools2 tools