# io.github.barneywohl/hugging-bay (npm · hugging-bay-mcp)

Verified open AI artifact search, trust evidence, downloads, and agent workflows from Hugging Bay.

- Trust score: 58/100 (low)
- Change this week: −4
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `huggingbay.xyz`: 24/100, [markdown](https://verifymcp.io/servers/barneywohl-hugging-bay/api-mcp.md), [page](https://verifymcp.io/servers/barneywohl-hugging-bay/api-mcp)
- npm · `hugging-bay-mcp`: 58/100 (this document), [markdown](https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp.md), [page](https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp)

## Channel facts

- Registry: `npm`
- Package: `hugging-bay-mcp`
- Version: `0.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - No production dependencies, so there is no dependency health to assess.
- **Provenance & Transparency**: 19/100
  - Repository check failed: the declared repository URL returned HTTP 404.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 20 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 43/100
  - AI-judged instruction clarity (poor).
  - Tool/resource definitions use about 5178 tokens (~50/item across 102 items; 102 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 68/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 3% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add barneywohl-hugging-bay -- npx -y hugging-bay-mcp
```

### Codex

```bash
codex mcp add barneywohl-hugging-bay -- npx -y hugging-bay-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "barneywohl-hugging-bay": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "hugging-bay-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add barneywohl-hugging-bay --command npx --arg -y --arg hugging-bay-mcp
```

### Hermes

```yaml
mcp_servers:
  barneywohl-hugging-bay:
    command: "npx"
    args: ["-y", "hugging-bay-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "barneywohl-hugging-bay": {
      "command": "npx",
      "args": [
        "-y",
        "hugging-bay-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 58, +4)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 54, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-07-31 (score 39, −5)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 44, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 62, +21)

- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: poor
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 3
- [functional] First check of Schema quality: pass

### 2026-07-26 (score 41)

First indexed and scored.

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

## MCP tools (102)

### `get_health` (~18 tokens)

Return Hugging Bay public health and persistence state.

### `get_catalog_coverage` (~22 tokens)

Return public catalog scale, source coverage, and readiness facts.

### `get_open_source_radar` (~31 tokens)

Return popular, newest, and non-Hugging Face open-source AI records in one bounded response.

### `get_trending` (~43 tokens)

Return public trending artifacts from aggregate pageview, hosted-download, mirror-request, and product-action signals.

Input parameters:

- `limit` (number)
- `window` (string)

### `get_traffic` (~34 tokens)

Return privacy-safe aggregate Hugging Bay usage, hosted-download, mirror-request, product-action, and agent/crawler discovery signals.

### `get_agent_discovery` (~49 tokens)

Return the single-call agent discovery contract for answer engines, OpenClaw/Hermes-style agents, MCP clients, OpenAPI users, crawlers, citation targets, and bounded API entrypoints.

### `get_ai_bot_allowlist` (~31 tokens)

Return the machine-readable AI crawler/user-agent allowlist, official verification links, and WAF guidance.

### `get_ai_search_guidance` (~42 tokens)

Return citation-ready AI-search guidance for ChatGPT, Perplexity, Gemini, Claude, Grok, OpenClaw, Hermes, and local agents.

### `get_ai_mention_monitor` (~29 tokens)

Return prompt-level answer-engine monitoring targets, expected citations, crawler signals, and claim boundaries.

### `get_ai_mention_results` (~61 tokens)

Return observed answer-engine mention and citation results, including provider, prompt, status, citation rank, wrong-claim flags, and bounded excerpts.

Input parameters:

- `limit` (number)
- `promptId` (string)
- `provider` (string)

### `get_source_coverage` (~34 tokens)

Return one provider's source coverage, policy, rollups, and top imported records.

Input parameters:

- `id` (string, required)

### `get_recommendations` (~28 tokens)

Return Hugging Bay catalog expansion facts, mirror candidates, scale totals, and pack summaries.

### `recommend_artifacts` (~76 tokens)

Return ranked artifacts for a concrete use case, with fit reasons, tool commands, hosted download links, and mirror actions.

Input parameters:

- `commercial` (boolean)
- `hosted` (boolean)
- `limit` (number)
- `q` (string)
- `tool` (string)
- `useCase` (string)

### `get_agent_tasks` (~32 tokens)

Return intent-specific agent action plans for RAG embeddings, hosted downloads, commercial-safe search, and mirror prioritization.

### `get_publisher_workflow` (~27 tokens)

Return publisher application, large-upload, release-check, and publishing workflow for agents.

### `get_publisher_release_template` (~49 tokens)

Return a copyable Hugging Bay release manifest template for labs, including source URLs, hashes, runtime notes, upload-session body, and reviewed fallback fields.

Input parameters:

- `kind` (string)

### `list_publishers` (~42 tokens)

List public publisher namespaces with artifact counts, hosted-file counts, claim state, and trust stats.

Input parameters:

- `limit` (number)
- `q` (string)

### `get_publisher_profile` (~43 tokens)

Fetch one public publisher namespace profile with releases, hosted files, claim state, and trust stats.

Input parameters:

- `limit` (number)
- `namespace` (string, required)

### `get_publisher_dashboard` (~34 tokens)

Return publisher-owned releases, release blockers, and upload sessions. Requires HUGGING_BAY_TOKEN with publisher/admin role.

### `list_saved_searches` (~51 tokens)

List saved catalog searches/watchlists for HUGGING_BAY_TOKEN.

Input parameters:

- `alertLimit` (number)
- `alerts` (string): Include bounded alert state.
- `previewLimit` (number)

### `list_saved_search_alerts` (~49 tokens)

List enabled saved-search alerts for HUGGING_BAY_TOKEN, including new matching artifacts since the last seen window.

Input parameters:

- `limit` (number)
- `previewLimit` (number)

### `get_saved_search_digest` (~67 tokens)

Return a bounded live digest for one saved catalog watchlist, including artifact/card/file URLs and mirror-request actions. Requires HUGGING_BAY_TOKEN.

Input parameters:

- `id` (string): Deprecated alias for searchId.
- `limit` (number)
- `searchId` (string, required)

### `save_saved_search` (~125 tokens)

Save a durable catalog watchlist with filters, sort, browser path, and agent-ready API path for HUGGING_BAY_TOKEN.

Input parameters:

- `alert` (object)
- `delivery` (object)
- `filters` (object)
- `id` (string)
- `label` (string)
- `notificationsEnabled` (boolean)
- `resultCount` (number)
- `route` (string)
- `searchId` (string): Stable saved-search id. Alias of id for clients that use searchId consistently.
- `sortKey` (string)

### `delete_saved_search` (~43 tokens)

Delete one saved catalog watchlist for HUGGING_BAY_TOKEN.

Input parameters:

- `id` (string): Deprecated alias for searchId.
- `searchId` (string, required)

### `apply_publisher_application` (~105 tokens)

Submit a public publisher namespace application for manual review. Does not create accounts or tokens automatically.

Input parameters:

- `acceptedTerms` (boolean, required)
- `artifactTypes` (array, required)
- `contact` (string, required)
- `displayName` (string, required)
- `expectedUploads` (string)
- `intendedUse` (string, required)
- `namespace` (string, required)
- `provenancePlan` (string, required)
- `sourceUrl` (string, required)
- `website` (string)

### `get_publisher_application_status` (~41 tokens)

Fetch sanitized public status for one publisher namespace application.

Input parameters:

- `caseId` (string, required)
- `id` (string): Deprecated alias for caseId.

### `request_source_indexing` (~73 tokens)

Queue a missing supported upstream source URL or repo for Hugging Bay indexing and mirror review.

Input parameters:

- `contact` (string)
- `desiredFiles` (array)
- `repo` (string, required)
- `source` (string)
- `targetTool` (string)
- `useCase` (string)

### `get_source_request_status` (~40 tokens)

Fetch sanitized public status for one source indexing request.

Input parameters:

- `caseId` (string, required)
- `id` (string): Deprecated alias for caseId.

### `list_publisher_api_keys` (~32 tokens)

List scoped publisher automation tokens visible to HUGGING_BAY_TOKEN.

Input parameters:

- `limit` (number)

### `create_publisher_api_key` (~49 tokens)

Create an additional scoped publisher automation token. Plaintext token is returned once.

Input parameters:

- `allowedOwners` (array)
- `displayName` (string)
- `purpose` (string)

### `revoke_publisher_api_key` (~47 tokens)

Revoke a scoped publisher automation token visible to HUGGING_BAY_TOKEN.

Input parameters:

- `id` (string): Deprecated alias for keyId.
- `keyId` (string, required)

### `get_mirror_readiness` (~43 tokens)

Return mirror candidates with readiness scores, blockers, compatible tools, and selected safe files.

Input parameters:

- `limit` (number)
- `requestedOnly` (boolean)

### `get_mirror_scale_plan` (~81 tokens)

Return a reviewed-mirror batch plan with selected files, byte totals, storage readiness, commands, and blockers. Does not execute mirroring.

Input parameters:

- `candidateLimit` (number)
- `limit` (number)
- `maxPlannedBytes` (number)
- `requestedOnly` (boolean)
- `targetHostedFiles` (number)

### `list_stacks` (~41 tokens)

List practical Hugging Bay AI stack packs for RAG, local LLMs, agent tools, commercial-safe AI, verified downloads, and research/code discovery.

### `get_stack` (~28 tokens)

Fetch one Hugging Bay stack pack with bounded ranked artifact rows.

Input parameters:

- `slug` (string, required)

### `list_answer_packs` (~32 tokens)

List citation-ready Hugging Bay answer packs for AI search engines, agents, and common open AI artifact questions.

### `get_answer_pack` (~37 tokens)

Fetch one citation-ready answer pack with short answer, canonical citation targets, extraction APIs, and ranked rows.

Input parameters:

- `slug` (string, required)

### `get_citation_pack` (~55 tokens)

Fetch a one-call AI citation pack with safe claims, avoid claims, citation order, proof URLs, and extraction rows.

Input parameters:

- `q` (string)
- `query` (string)
- `slug` (string)

### `get_ranking` (~32 tokens)

Fetch one Hugging Bay ranking as JSON so agents do not scrape ranking HTML.

Input parameters:

- `slug` (string, required)

### `search_artifacts` (~128 tokens)

Search the bounded public catalog summary API with optional semantic reranking.

Input parameters:

- `commercial` (string)
- `cursor` (string)
- `explain` (string)
- `format` (string)
- `framework` (string)
- `hosting` (string)
- `license` (string)
- `limit` (number)
- `q` (string)
- `reviewStatus` (string)
- `semantic` (string)
- `sort` (string)
- `source` (string)
- `task` (string)
- `type` (string)

### `resolve_artifact` (~62 tokens)

Resolve an upstream repo URL, owner/name, or artifact id to a Hugging Bay artifact plus hosted download and mirror actions.

Input parameters:

- `q` (string)
- `repo` (string)
- `source` (string)
- `url` (string)

### `get_artifact` (~28 tokens)

Fetch a full artifact record by Hugging Bay artifact id.

Input parameters:

- `id` (string, required)

### `get_artifact_metadata` (~32 tokens)

Fetch agent-oriented artifact metadata with provenance, hosting, and safe next steps.

Input parameters:

- `id` (string, required)

### `get_artifact_bundle` (~38 tokens)

Fetch one artifact's metadata, card, trust bundle, hosted files, and mirror readiness in one response.

Input parameters:

- `id` (string, required)

### `get_release_bundle` (~51 tokens)

Fetch a launch-ready release bundle for labs and agents: publisher claim, same-as-upstream evidence, trust bundle, hosted files, local-run commands, and reviewed fallback readiness.

Input parameters:

- `id` (string, required)

### `get_release_readiness` (~55 tokens)

Fetch a compact release readiness score/checklist for a lab release: namespace, provenance, license, scans, signed manifests, hosted files, runtime guidance, community proof, and reviewed fallback status.

Input parameters:

- `id` (string, required)

### `get_artifact_distribution` (~35 tokens)

Fetch one artifact's hosted download state, upstream source, and reviewed peer-assisted fallback metadata.

Input parameters:

- `id` (string, required)

### `get_peer_fallbacks` (~38 tokens)

Fetch one artifact's reviewed torrent/magnet fallback bundle, scoped to hosted-file hashes and reviewer evidence.

Input parameters:

- `id` (string, required)

### `list_admin_peer_fallbacks` (~46 tokens)

List pending peer fallback requests for admin review. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `limit` (number)
- `status` (string)

### `get_artifact_insights` (~47 tokens)

Fetch decision-ready artifact insights with best-fit labels, trust gaps, runner commands, benchmark evidence, hardware estimate, hosted files, and mirror readiness.

Input parameters:

- `id` (string, required)

### `get_local_kit` (~49 tokens)

Fetch copyable local-use commands, required files, warnings, and next actions for one artifact, optionally filtered by runtime tool.

Input parameters:

- `id` (string, required)
- `tool` (string)

### `get_download_plan` (~45 tokens)

Fetch hosted-only download instructions, signed manifest URL, SHA-256 hashes, and CLI commands for one artifact.

Input parameters:

- `id` (string, required)
- `tool` (string)

### `get_artifact_card` (~35 tokens)

Fetch a repo-grade artifact card as JSON or Markdown.

Input parameters:

- `id` (string, required)
- `markdown` (boolean)

### `get_artifact_reviews` (~40 tokens)

Fetch public community ratings, reviews, and verified-run attestations for an artifact.

Input parameters:

- `id` (string, required)
- `limit` (number)

### `get_evidence_rollups` (~35 tokens)

Fetch global public evidence rollups by benchmark, tool, hardware, and artifact type.

Input parameters:

- `limit` (number)

### `get_review_queue` (~54 tokens)

Fetch prioritized artifacts that need community reviews, verified-run evidence, or benchmark reports.

Input parameters:

- `hosting` (string)
- `limit` (number)
- `maxReviews` (number)
- `mode` (string)

### `submit_artifact_review` (~97 tokens)

Submit a bounded public review or verified-run attestation after using an artifact.

Input parameters:

- `body` (string, required)
- `evidence` (object)
- `id` (string, required)
- `rating` (number, required)
- `reviewer` (string)
- `title` (string)
- `tool` (string)
- `verifiedFiles` (array)
- `verifiedRun` (boolean)
- `version` (string)

### `mark_review_helpful` (~36 tokens)

Mark a public artifact review as helpful with duplicate protection.

Input parameters:

- `id` (string, required)
- `reviewId` (string, required)

### `report_review` (~52 tokens)

Report a public artifact review for moderation.

Input parameters:

- `evidence` (string)
- `id` (string, required)
- `reason` (string)
- `reviewId` (string, required)
- `summary` (string)

### `get_community_signals` (~33 tokens)

Fetch aggregate public community trust signals, recent reviews, and top helpful reviews.

Input parameters:

- `limit` (number)

### `compare_artifacts` (~33 tokens)

Compare up to six Hugging Bay artifact ids or owner/name repos side by side.

Input parameters:

- `ids` (array, required)

### `preview_file` (~40 tokens)

Preview one Hugging Bay-hosted text-like file with bounded text and optional row samples.

Input parameters:

- `id` (string, required)
- `path` (string, required)

### `list_files` (~52 tokens)

List an artifact's files with bounded pagination.

Input parameters:

- `cursor` (string)
- `id` (string, required)
- `limit` (number)
- `q` (string)
- `tool` (string)

### `list_downloadable_files` (~76 tokens)

List files actually hosted by Hugging Bay. External metadata rows are excluded.

Input parameters:

- `artifactId` (string)
- `limit` (number)
- `pack` (string)
- `path` (string)
- `q` (string)
- `sourceKind` (string)
- `tool` (string)

### `list_mirror_packs` (~33 tokens)

List curated Hugging Bay packs such as Downloadable Now, RAG embeddings, and commercial-use safe artifacts.

### `get_mirror_pack` (~27 tokens)

Fetch one curated pack with artifact rows by slug.

Input parameters:

- `slug` (string, required)

### `list_mirror_demand` (~44 tokens)

List requested and high-download mirror candidates for prioritizing what Hugging Bay should host next.

Input parameters:

- `limit` (number)
- `requestedOnly` (boolean)

### `list_mirrors` (~21 tokens)

List registered Hugging Bay mirror nodes and health state.

### `register_mirror` (~48 tokens)

Register a reviewed public mirror node. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `endpoint` (string, required)
- `name` (string, required)
- `region` (string, required)

### `update_mirror` (~41 tokens)

Update a mirror node health state. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `health` (string)
- `id` (string, required)

### `list_topics` (~24 tokens)

List generated catalog topics by task, type, license, framework, and source.

### `get_topic` (~25 tokens)

Fetch one catalog topic and its ranked artifact rows.

Input parameters:

- `slug` (string, required)

### `request_mirror` (~90 tokens)

Record mirror demand for an external Hugging Face artifact by artifact id.

Input parameters:

- `contact` (string)
- `desiredFiles` (array)
- `id` (string, required)
- `query` (string)
- `ranking` (string)
- `sourceRoute` (string)
- `targetTool` (string)
- `topic` (string)
- `useCase` (string)

### `get_trust_bundle` (~39 tokens)

Fetch artifact trust evidence: license decision, scan status, hosting state, manifest key URL, and file evidence.

Input parameters:

- `id` (string, required)

### `get_manifest_signing_key` (~23 tokens)

Fetch public manifest signing key metadata used to verify signed manifests.

### `get_indexing_status` (~27 tokens)

Fetch sitemap, URL batch, and crawl-readiness status for search engines and agents.

### `list_indexing_urls` (~130 tokens)

Fetch bounded canonical URL batches by kind for indexing/submission workflows.

Input parameters:

- `commercial` (boolean)
- `cursor` (string)
- `format` (string)
- `hosting` (string)
- `kind` (string)
- `license` (string)
- `limit` (number)
- `q` (string)
- `reviewStatus` (string)
- `sort` (string)
- `source` (string)
- `tool` (string)
- `type` (string)
- `verified` (boolean)
- `worksWith` (string)

### `get_import_status` (~28 tokens)

Fetch admin import/mirror job status. Requires HUGGING_BAY_TOKEN with admin role.

### `list_import_runs` (~42 tokens)

List compact import runs for agent operators. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `cursor` (string)
- `limit` (number)

### `get_import_run` (~37 tokens)

Fetch one import run with its cursors. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `runId` (string, required)

### `extend_hf_import` (~67 tokens)

Plan a metadata-only continuation from a completed Hugging Face import run. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `pageSize` (number)
- `preset` (string)
- `previousRunId` (string, required)
- `targetRecords` (number)

### `run_hf_worker_batch` (~57 tokens)

Run a small metadata-only HF worker batch, optionally scoped to a run id. Requires HUGGING_BAY_TOKEN with admin role and enabled worker.

Input parameters:

- `maxPages` (number)
- `runId` (string)

### `run_source_import` (~189 tokens)

Run metadata-only source import from ModelScope, GitHub, arXiv, OpenML, Zenodo, Dataverse, DataCite, Papers with Code, OpenDataLab, and/or OpenCompass. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `arxiv` (number)
- `datacite` (number)
- `dataverse` (number)
- `dryRun` (boolean)
- `github` (number)
- `limit` (number)
- `modelscope` (number)
- `opencompass` (number)
- `opendatalab` (number)
- `openml` (number)
- `pack` (string)
- `paperswithcode` (number)
- `query` (string)
- `source` (string)
- `strict` (boolean)
- `zenodo` (number)

### `plan_source_import` (~154 tokens)

Plan a resumable metadata-only source import using provider cursors. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `arxiv` (number)
- `datacite` (number)
- `dataverse` (number)
- `github` (number)
- `modelscope` (number)
- `opencompass` (number)
- `opendatalab` (number)
- `openml` (number)
- `pack` (string)
- `pageSize` (number)
- `paperswithcode` (number)
- `query` (string)
- `source` (string)
- `targetRecords` (number)
- `zenodo` (number)

### `run_source_worker_batch` (~54 tokens)

Run a scoped metadata-only source worker batch. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `maxErrors` (number)
- `maxPages` (number)
- `runId` (string)

### `get_traffic_summary` (~34 tokens)

Fetch first-party traffic, hosted download, and mirror-demand telemetry. Requires HUGGING_BAY_TOKEN with admin role.

### `expand_hf_detail_metadata` (~142 tokens)

Expand selected Hugging Face metadata rows with file-list details. Requires HUGGING_BAY_TOKEN with admin role. Production web services may disable this unless a monitored maintenance env flag is enabled; use direct workers for bulk expansion.

Input parameters:

- `backoffMs` (number)
- `dryRun` (boolean)
- `force` (boolean)
- `limit` (number)
- `maxRuntimeMs` (number)
- `missingSizes` (boolean)
- `preferRuntime` (boolean)
- `q` (string)
- `requestedOnly` (boolean)
- `retries` (number)
- `timeoutMs` (number)

### `create_upload_session` (~52 tokens)

Create signed large-upload URLs for a publisher release. Requires HUGGING_BAY_TOKEN with publisher/admin role.

Input parameters:

- `files` (array, required)
- `name` (string, required)
- `owner` (string, required)

### `get_upload_session` (~47 tokens)

Fetch upload-session status and optional live object-storage progress. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input parameters:

- `id` (string, required)
- `refresh` (boolean)

### `resume_upload_session` (~39 tokens)

Refresh signed PUT URLs for incomplete upload-session files. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input parameters:

- `id` (string, required)

### `complete_upload_session` (~39 tokens)

Verify uploaded objects and complete a large-upload session. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input parameters:

- `id` (string, required)

### `cancel_upload_session` (~35 tokens)

Cancel a pending upload session. Requires HUGGING_BAY_TOKEN with session owner/admin role.

Input parameters:

- `id` (string, required)

### `get_admin_mirror_queue` (~50 tokens)

List admin mirror queue rows with exact useful runtime/support file candidates. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `limit` (number)
- `requestedOnly` (boolean)

### `get_user_request_automation` (~38 tokens)

List recent user mirror/source requests plus large-mirror direct and reviewed-weight candidates. Requires HUGGING_BAY_TOKEN with admin role.

### `run_mirror_queue_batch` (~69 tokens)

Run a bounded reviewed mirror queue batch using exact selected useful files. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `dryRun` (boolean)
- `limit` (number)
- `maxPlannedBytes` (number)
- `targetHostedFiles` (number)

### `create_mirror_batch` (~101 tokens)

Create a durable reviewed mirror batch from current readiness rows. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `candidateLimit` (number)
- `includeReviewedRiskyWeights` (boolean)
- `includeSupportOnly` (boolean)
- `limit` (number)
- `maxPlannedBytes` (number)
- `note` (string)
- `requestedOnly` (boolean)
- `targetHostedFiles` (number)

### `list_mirror_batches` (~41 tokens)

List durable reviewed mirror batches. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `limit` (number)
- `status` (string)

### `get_mirror_batch` (~41 tokens)

Fetch one durable mirror batch with selected files and review/run state. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `id` (string, required)

### `approve_mirror_batch` (~54 tokens)

Revalidate selected paths and approve a durable mirror batch. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `id` (string, required)
- `note` (string)
- `riskOverride` (object)

### `run_mirror_batch` (~55 tokens)

Dry-run or execute an approved durable mirror batch. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `dryRun` (boolean)
- `id` (string, required)
- `stopOnFailure` (boolean)

### `recover_mirror_batch` (~65 tokens)

Recover failed rows in a durable mirror batch by retrying, reopening for review, or marking reviewed failures as skipped. Requires HUGGING_BAY_TOKEN with admin role.

Input parameters:

- `action` (string)
- `id` (string, required)
- `note` (string)

### `check_storage` (~43 tokens)

Run an admin storage round-trip diagnostic. Writes, heads, reads, range-reads, and deletes a disposable object. Requires HUGGING_BAY_TOKEN with admin role.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp#diagnostics

## Score history

- 2026-08-03: 58
- 2026-08-02: 54
- 2026-08-01: 39
- 2026-07-31: 39
- 2026-07-30: 44
- 2026-07-28: 62
- 2026-07-27: 62
- 2026-07-26: 41

## Links

- npm package: https://www.npmjs.com/package/hugging-bay-mcp
- Socket report: https://socket.dev/npm/package/hugging-bay-mcp
- Website: https://huggingbay.xyz/
- Changelog RSS feed: https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/barneywohl-hugging-bay/hugging-bay-mcp