io.github.barneywohl/hugging-bay

NPM · HUGGING-BAY-MCP · 2 COMPONENTS · SCANNED AUG 3

Verified open AI artifact search, trust evidence, downloads, and agent workflows from Hugging Bay.

Available components

remote · huggingbay.xyz 24 npm · hugging-bay-mcp 58

−4 this week 58 58 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security100

No malware found by supply-chain analysis.Pass
No known CVEs affecting this package version or its production dependencies.Pass
No install/post-install scripts declared.Pass
No production dependencies, so there is no dependency health to assess. View diagnostics → Pass

Provenance & Transparency19

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 20 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability43

AI-judged instruction clarity (poor).Fail
Tool/resource definitions use about 5178 tokens (~50/item across 102 items; 102 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage68

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
3% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · hugging-bay-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add barneywohl-hugging-bay -- npx -y hugging-bay-mcp

# add to Codex CLI

codex mcp add barneywohl-hugging-bay -- npx -y hugging-bay-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "barneywohl-hugging-bay": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "hugging-bay-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add barneywohl-hugging-bay --command npx --arg -y --arg hugging-bay-mcp

# ~/.hermes/config.yaml

mcp_servers:
  barneywohl-hugging-bay:
    command: "npx"
    args: ["-y", "hugging-bay-mcp"]

// mcp.json

{
  "mcpServers": {
    "barneywohl-hugging-bay": {
      "command": "npx",
      "args": [
        "-y",
        "hugging-bay-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +15
- Malware scan: unverified → pass ▲ security
31 Jul 26 −5
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 +21
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: poor functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 3 functional
- First check of Schema quality: pass functional
26 Jul 26 41

First indexed and scored.
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 0 packages

0 packages in the resolved dependency tree.

MCP tools — 102 exposed · ~5,178 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

apply_publisher_application ~105

Submit a public publisher namespace application for manual review. Does not create accounts or tokens automatically.

Input Output Examples

Name	Type	Req	Description
acceptedTerms	boolean	yes	—
artifactTypes	array	yes	—
contact	string	yes	—
displayName	string	yes	—
expectedUploads	string	—	—
intendedUse	string	yes	—
namespace	string	yes	—
provenancePlan	string	yes	—
sourceUrl	string	yes	—
website	string	—	—

No output schema declared.

No examples provided.

approve_mirror_batch ~54

Revalidate selected paths and approve a durable mirror batch. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—
note	string	—	—
riskOverride	object	—	—

No output schema declared.

No examples provided.

cancel_upload_session ~35

Cancel a pending upload session. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

check_storage ~43

Run an admin storage round-trip diagnostic. Writes, heads, reads, range-reads, and deletes a disposable object. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

compare_artifacts ~33

Compare up to six Hugging Bay artifact ids or owner/name repos side by side.

Input Output Examples

Name	Type	Req	Description
ids	array	yes	—

No output schema declared.

No examples provided.

complete_upload_session ~39

Verify uploaded objects and complete a large-upload session. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

create_mirror_batch ~101

Create a durable reviewed mirror batch from current readiness rows. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
candidateLimit	number	—	—
includeReviewedRiskyWeights	boolean	—	—
includeSupportOnly	boolean	—	—
limit	number	—	—
maxPlannedBytes	number	—	—
note	string	—	—
requestedOnly	boolean	—	—
targetHostedFiles	number	—	—

No output schema declared.

No examples provided.

create_publisher_api_key ~49

Create an additional scoped publisher automation token. Plaintext token is returned once.

Input Output Examples

Name	Type	Req	Description
allowedOwners	array	—	—
displayName	string	—	—
purpose	string	—	—

No output schema declared.

No examples provided.

create_upload_session ~52

Create signed large-upload URLs for a publisher release. Requires HUGGING_BAY_TOKEN with publisher/admin role.

Input Output Examples

Name	Type	Req	Description
files	array	yes	—
name	string	yes	—
owner	string	yes	—

No output schema declared.

No examples provided.

delete_saved_search ~43

Delete one saved catalog watchlist for HUGGING_BAY_TOKEN.

Input Output Examples

Name	Type	Req	Description
id	string	—	Deprecated alias for searchId.
searchId	string	yes	—

No output schema declared.

No examples provided.

expand_hf_detail_metadata ~142

Expand selected Hugging Face metadata rows with file-list details. Requires HUGGING_BAY_TOKEN with admin role. Production web services may disable this unless a monitored maintenance env flag is enabled; use direct workers for bulk expansion.

Input Output Examples

Name	Type	Req	Description
backoffMs	number	—	—
dryRun	boolean	—	—
force	boolean	—	—
limit	number	—	—
maxRuntimeMs	number	—	—
missingSizes	boolean	—	—
preferRuntime	boolean	—	—
q	string	—	—
requestedOnly	boolean	—	—
retries	number	—	—
timeoutMs	number	—	—

No output schema declared.

No examples provided.

extend_hf_import ~67

Plan a metadata-only continuation from a completed Hugging Face import run. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
pageSize	number	—	—
preset	string	—	—
previousRunId	string	yes	—
targetRecords	number	—	—

No output schema declared.

No examples provided.

get_admin_mirror_queue ~50

List admin mirror queue rows with exact useful runtime/support file candidates. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—
requestedOnly	boolean	—	—

No output schema declared.

No examples provided.

get_agent_discovery ~49

Return the single-call agent discovery contract for answer engines, OpenClaw/Hermes-style agents, MCP clients, OpenAPI users, crawlers, citation targets, and bounded API entrypoints.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_agent_tasks ~32

Return intent-specific agent action plans for RAG embeddings, hosted downloads, commercial-safe search, and mirror prioritization.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_ai_bot_allowlist ~31

Return the machine-readable AI crawler/user-agent allowlist, official verification links, and WAF guidance.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_ai_mention_monitor ~29

Return prompt-level answer-engine monitoring targets, expected citations, crawler signals, and claim boundaries.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_ai_mention_results ~61

Return observed answer-engine mention and citation results, including provider, prompt, status, citation rank, wrong-claim flags, and bounded excerpts.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—
promptId	string	—	—
provider	string	—	—

No output schema declared.

No examples provided.

get_ai_search_guidance ~42

Return citation-ready AI-search guidance for ChatGPT, Perplexity, Gemini, Claude, Grok, OpenClaw, Hermes, and local agents.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_answer_pack ~37

Fetch one citation-ready answer pack with short answer, canonical citation targets, extraction APIs, and ranked rows.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	—

No output schema declared.

No examples provided.

get_artifact ~28

Fetch a full artifact record by Hugging Bay artifact id.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_artifact_bundle ~38

Fetch one artifact's metadata, card, trust bundle, hosted files, and mirror readiness in one response.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_artifact_card ~35

Fetch a repo-grade artifact card as JSON or Markdown.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—
markdown	boolean	—	—

No output schema declared.

No examples provided.

get_artifact_distribution ~35

Fetch one artifact's hosted download state, upstream source, and reviewed peer-assisted fallback metadata.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_artifact_insights ~47

Fetch decision-ready artifact insights with best-fit labels, trust gaps, runner commands, benchmark evidence, hardware estimate, hosted files, and mirror readiness.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_artifact_metadata ~32

Fetch agent-oriented artifact metadata with provenance, hosting, and safe next steps.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_artifact_reviews ~40

Fetch public community ratings, reviews, and verified-run attestations for an artifact.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—
limit	number	—	—

No output schema declared.

No examples provided.

get_catalog_coverage ~22

Return public catalog scale, source coverage, and readiness facts.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_citation_pack ~55

Fetch a one-call AI citation pack with safe claims, avoid claims, citation order, proof URLs, and extraction rows.

Input Output Examples

Name	Type	Req	Description
q	string	—	—
query	string	—	—
slug	string	—	—

No output schema declared.

No examples provided.

get_community_signals ~33

Fetch aggregate public community trust signals, recent reviews, and top helpful reviews.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—

No output schema declared.

No examples provided.

get_download_plan ~45

Fetch hosted-only download instructions, signed manifest URL, SHA-256 hashes, and CLI commands for one artifact.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—
tool	string	—	—

No output schema declared.

No examples provided.

get_evidence_rollups ~35

Fetch global public evidence rollups by benchmark, tool, hardware, and artifact type.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—

No output schema declared.

No examples provided.

get_health ~18

Return Hugging Bay public health and persistence state.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_import_run ~37

Fetch one import run with its cursors. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
runId	string	yes	—

No output schema declared.

No examples provided.

get_import_status ~28

Fetch admin import/mirror job status. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_indexing_status ~27

Fetch sitemap, URL batch, and crawl-readiness status for search engines and agents.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_local_kit ~49

Fetch copyable local-use commands, required files, warnings, and next actions for one artifact, optionally filtered by runtime tool.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—
tool	string	—	—

No output schema declared.

No examples provided.

get_manifest_signing_key ~23

Fetch public manifest signing key metadata used to verify signed manifests.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_mirror_batch ~41

Fetch one durable mirror batch with selected files and review/run state. Requires HUGGING_BAY_TOKEN with admin role.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_mirror_pack ~27

Fetch one curated pack with artifact rows by slug.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	—

No output schema declared.

No examples provided.

get_mirror_readiness ~43

Return mirror candidates with readiness scores, blockers, compatible tools, and selected safe files.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—
requestedOnly	boolean	—	—

No output schema declared.

No examples provided.

get_mirror_scale_plan ~81

Return a reviewed-mirror batch plan with selected files, byte totals, storage readiness, commands, and blockers. Does not execute mirroring.

Input Output Examples

Name	Type	Req	Description
candidateLimit	number	—	—
limit	number	—	—
maxPlannedBytes	number	—	—
requestedOnly	boolean	—	—
targetHostedFiles	number	—	—

No output schema declared.

No examples provided.

get_open_source_radar ~31

Return popular, newest, and non-Hugging Face open-source AI records in one bounded response.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_peer_fallbacks ~38

Fetch one artifact's reviewed torrent/magnet fallback bundle, scoped to hosted-file hashes and reviewer evidence.

Input Output Examples

Name	Type	Req	Description
id	string	yes	—

No output schema declared.

No examples provided.

get_publisher_application_status ~41

Fetch sanitized public status for one publisher namespace application.

Input Output Examples

Name	Type	Req	Description
caseId	string	yes	—
id	string	—	Deprecated alias for caseId.

No output schema declared.

No examples provided.

get_publisher_dashboard ~34

Return publisher-owned releases, release blockers, and upload sessions. Requires HUGGING_BAY_TOKEN with publisher/admin role.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_publisher_profile ~43

Fetch one public publisher namespace profile with releases, hosted files, claim state, and trust stats.

Input Output Examples

Name	Type	Req	Description
limit	number	—	—
namespace	string	yes	—

No output schema declared.

No examples provided.

get_publisher_release_template ~49

Return a copyable Hugging Bay release manifest template for labs, including source URLs, hashes, runtime notes, upload-session body, and reviewed fallback fields.

Input Output Examples

Name	Type	Req	Description
kind	string	—	—

No output schema declared.

No examples provided.

get_publisher_workflow ~27

Return publisher application, large-upload, release-check, and publishing workflow for agents.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_ranking ~32

Fetch one Hugging Bay ranking as JSON so agents do not scrape ranking HTML.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	—

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	41
27 Jul	62
28 Jul	62
30 Jul	44
31 Jul	39
1 Aug	39
2 Aug	54
3 Aug	58