Yes: Hugging Face runs a public MCP server at huggingface.co that listed 4 tools to a client with no credentials on 4 November 2026. Examples: hf_whoami, hub_repo_search, hub_repo_details. It speaks streamable-http, protocol 2025-11-25. A CLI is on record: huggingface_hub on pypi.
82, grade B; Ora scanned the domain on 27 October 2026 and the cached score was read on 5 November 2026 from its score API (Ora's score page for huggingface.co, a vendor-published score)
Company found through
the vendor's own documentation; the awesome-remote-mcp-servers list; the GitHub MCP Registry; the official MCP Registry; Ora's public leaderboard
Last verified
4 November 2026
MCP server
Endpoint
https://huggingface.co/mcp
How it was found
listed in the vendor's own documentation; the awesome-remote-mcp-servers list; the GitHub MCP Registry; the official MCP Registry; Ora's public leaderboard
2 connections on 4 November 2026, read-only methods only
19:55:56Z https://huggingface.co/mcp sent initialize, notifications/initialized, tools/list, resources/list result verified (HTTP 200) 680 ms
20:01:32Z https://huggingface.co/mcp sent initialize, notifications/initialized, tools/list, resources/list result verified (HTTP 200) 674 ms
Authentication
Auth type
No authentication
Auth as listed by a registry
Open (a claim, not checked by connecting)
The sign-in route, step by step
Send the handshake to https://huggingface.co/mcp over streamable-http. Servers on the 2026-07-28 revision answer server/discover; older servers answer initialize.
Send tools/list, then resources/list and prompts/list if the capabilities name them.
Send no token. The connector sent none and the server answered, so any MCP client can read this list.
Calling a tool is a separate step this directory never takes.