Schema | hf-mcp-server

hf-mcp-server

Overview Schema Related Servers Score Discussions

Server Configuration

Describes the environment variables required to run the server.

Name	Required	Description	Default
`HF_TOKEN`	No	Hugging Face token used when running with stdio transport if DEFAULT_HF_TOKEN is not set.
`TRANSPORT`	No	The transport type to use (stdio or streamableHttpJson).	streamableHttpJson
`PROXY_TOKEN`	No	Optional token used only for startup authentication while discovering PROXY_TOOLS_CSV schemas.
`DISABLE_TOOLS`	No	Optional comma-separated tool names to hide from tools/list and reject if called, for example hub_repo_search,hf_fs.
`HF_SKILLS_DIR`	No	Local directory containing a prebuilt SEP-2640 skills snapshot: skills.json with resource manifests.	/mnt/hf-skills/distribution/latest
`HF_API_TIMEOUT`	No	Timeout for Hugging Face API requests in milliseconds.	12500
`PROXY_TOOLS_CSV`	No	Optional CSV that defines Streamable HTTP proxy tool sources (HTTPS URL or local file path).
`USER_CONFIG_API`	No	Optional URL for the per-user discovery projection returned by tools/list, including configured Spaces.
`DEFAULT_HF_TOKEN`	No	Default token for local STDIO deployments. HTTP transports do not use this as a fallback for requests without an Authorization: Bearer header.
`LOG_SKILL_EVENTS`	No	Enables historical product-usage logging for SEP-2640 Skills probes when LOGGING_DATASET_ID and a logging token are configured.	true
`MCP_ALLOWED_HOSTS`	No	Additional comma-separated Host allowlist for MCP and API routes. Loopback hosts are always allowed. Use exact hostnames or leading wildcard entries such as *.example.com.
`LOGGING_DATASET_ID`	No	Dataset ID used for historical product-usage logging when LOG_SKILL_EVENTS is enabled.
`MCP_STRICT_COMPLIANCE`	No	Set to True for GET 405 rejects in JSON Mode (default serves a welcome page).
`METRICS_PAGE_PASSWORD`	No	Optional shared password for the Management Web interface at /metrics and its /api/* endpoints.
`GRADIO_SKIP_INITIALIZE`	No	When set to true, Gradio MCP calls skip the initialize handshake and issue tools/call directly.
`ALLOW_INTERNAL_ADDRESS_HOSTS`	No	Optional comma-separated host allowlist to permit internal/reserved DNS resolutions for trusted domains during outbound checks (supports exact hosts and *. wildcards).

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

Name	Description
No tools

Prompts

Interactive templates invoked by user choice

Name	Description
No prompts

Resources

Contextual data attached and managed by the client

Name	Description
No resources

Server Configuration
Instructions
Capabilities
Tools
Prompts
Resources

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/NivredG/hf-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server