MCP server

huggingface/hf-mcp-server

Hugging Face MCP Server

View source ↗

B86/100

Findings

low
Binds to 0.0.0.0 in 1 file(s). Normal inside a container; exposed on a host it is reachable from the whole network.
med
Dynamic eval/exec on a variable in 1 file(s).

Evidence

Stars272

LanguageTypeScript

LicenseMIT

Last commit2 days ago

Archivedno

Lockfilepresent

Files scanned219

Auth indicatorsfound

HTTP surfaceyes

Graded 10 Aug 2026 from public source only. No live endpoint was probed. Scores are produced by the published method; if you maintain this server and believe a finding is wrong, write to us and we will re-scan.