{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T02:40:06.177Z", "record_id": "VXI-EXT-TOOL-TRUST-HF-01-v1", "record_kind": "external_reference", "title": "Hugging Face MCP: Discovery can extend into jobs and third-party tools", "system": "Hugging Face MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Is Hugging Face MCP limited to searching public models and datasets?", "near_questions": [ "Can Hugging Face MCP write repository files?", "Are jobs available through the same MCP offering?", "Who operates a selected Hugging Face Space?", "Can a search request lead to dynamic Space tool calls?", "Which enabled tools consume compute?", "Does public model search need private repository access?", "Where will a Space tool receive my input?", "Which account scopes apply to this configuration?", "Can sandbox tools manage files?", "Should tool definitions be refreshed after configuration changes?", "When should an agent decline an unfamiliar Space?", "Can I save a Hub tool-permission review?" ], "supported_claims": [ { "claim": "The reviewed offering combines discovery with optional repository contributions, jobs, sandboxes and Space tools. Enabled capabilities depend on configuration. A Space introduces its own execution and data-handling context; authorising Hub search does not establish authority for every optional write or compute operation.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The reviewed offering combines discovery with optional repository contributions, jobs, sandboxes and Space tools. Enabled capabilities depend on configuration. A Space introduces its own execution and data-handling context; authorising Hub search does not establish authority for every optional write or compute operation.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-CHROME-DEVTOOLS-01-v1", "VXI-EXT-TOOL-TRUST-JFROG-01-v1", "VXI-EXT-TOOL-TRUST-SONAR-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Hugging Face MCP tools and account scope", "source_url": "https://huggingface.co/docs/hub/en/agents-mcp", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-HF-01-v1", "candidate_record_sha256": "69a22b2468ce3f81cf8fbc41efb7a93f9a9b4f2c7c5df15c13102dd1a0e3290b", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The reviewed offering combines discovery with optional repository contributions, jobs, sandboxes and Space tools. Enabled capabilities depend on configuration. A Space introduces its own execution and data-handling context; authorising Hub search does not establish authority for every optional write or compute operation.", "required_buyer_context": "Enabled tools, account scopes, selected Space owner, input sensitivity and spending authority.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Hugging Face MCP", "variant": "Hosted Hub MCP with configurable tools and optional Spaces" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Hugging Face publishes the Hub server; selected Spaces may have other operators.", "source_ids": [ "hf" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Discover Hub resources and, when enabled, use selected operational tools.", "source_ids": [ "hf" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Model, dataset, paper, Space and documentation discovery.", "source_ids": [ "hf" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Optional repository contributions, job execution and sandbox file operations are described.", "source_ids": [ "hf" ] }, { "field": "auth", "label": "Authentication", "status": "unknown", "statement": "Configuration is associated with a Hugging Face account; exact buyer credential scopes are unverified.", "source_ids": [ "hf" ] }, { "field": "permissions", "label": "Permission surface", "status": "review_inference", "statement": "The selected tool set and underlying account or Space permissions require inspection.", "source_ids": [ "hf" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Tool inputs may reach the Hub or a selected Space; identify the actual recipient.", "source_ids": [ "hf" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Dynamic tool availability, remote execution and compute charges can change the task boundary.", "source_ids": [ "hf" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Enabled tools, private-resource access, Space operator and costs are unknown.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require separate authority for writes, compute and disclosure to an unfamiliar Space.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "hf", "url": "https://huggingface.co/docs/hub/en/agents-mcp", "final_url": "https://huggingface.co/docs/hub/en/agents-mcp", "title": "Hugging Face MCP tools and account scope", "checked_on": "2026-10-16", "sha256": "e278eade61d58d51b3512101a2da73707726ae67b5883afaba1a323deeac9a41", "bytes": 194666 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve which optional tools and recipients were authorised for the intended workflow.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Enabled tools, Space ownership, credentials and compute terms." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#huggingface-mcp-optional-tools-and-recipients", "machine_readable_record": "/varexis-index/records/huggingface-mcp-optional-tools-and-recipients.json" }