huggingface.co

MCP security report · clear · risk 0/100 · 4 tool(s) · scanned 2026-10-22T06:12:50.883Z

No prompt-injection or tool-poisoning patterns were found in any of the 4 advertised tool(s). No tool-poisoning/injection patterns detected across 4 tool(s). Clean on static checks.

Embed this badge

MCP scan verdict

Re-scans every six hours and links back to this report. Paste into your README:

[![MCP security](https://img.shields.io/endpoint?url=https%3A%2F%2Fx402-data-api.sigrunner.workers.dev%2Fscan%2Fmcp%2Fbadge%3Furl%3Dhttps%253A%252F%252Fhuggingface.co%252Fmcp&style=flat-square)](https://x402-data-api.sigrunner.workers.dev/scan/report?url=https%3A%2F%2Fhuggingface.co%2Fmcp)

Keep it verified on every change

Continuous monitoring re-audits huggingface.co and gates your CI on the verdict — a subscription gives you an API key for 100 scans / month across any Grey Ridge endpoint. Call the scan from your pipeline and fail the build on block. Pay by card — no wallet, no crypto.

100 credits, 1 per call, valid 30 days. Cancel anytime.

Full machine-readable audit (itemized findings + OWASP mapping + remediation): GET https://x402-data-api.sigrunner.workers.dev/scan/mcp?url=… ($0.05 USDC via x402), or zero-egress POST /scan/mcp with your tools/list for private servers.