Apps / Hugging Face / IT approval sheet
Hugging Face AI connector: IT approval sheet
Generated 2026-10-18 from canmyaiuse live checks. Print it or forward the link.
| App | Hugging Face |
|---|---|
| Official MCP server | Yes: hosted by Hugging Face on its own domain, https://huggingface.co/mcp |
| Official server URL | https://huggingface.co/mcp |
| Works right now | Live (live check 2026-10-18) |
| Sign-in | No sign-in |
| ChatGPT | ✅ Yes. Hugging Face runs an official remote MCP server on its own domain (huggingface.co) that works with ChatGPT as a custom connector with no sign-in needed. Checked live on 2026-10-18. |
| Claude | ✅ Yes. Hugging Face runs an official remote MCP server on its own domain (huggingface.co) that works with Claude as a custom connector with no sign-in needed. Checked live on 2026-10-18. |
| Copilot | ✅ Yes. Add Hugging Face's official server URL in VS Code agent mode (GitHub Copilot) or Copilot Studio. |
| Plans that can use it | ChatGPT: custom MCP apps via developer mode; full read/write on Business, Enterprise and Edu (admin enables), read/fetch on Pro. Claude: custom connectors on Free (1), Pro, Max, Team and Enterprise; Owners add them for Team/Enterprise. Copilot: VS Code agent mode, subject to your org's MCP policy. |
| What data leaves | Hugging Face prompts, files and model outputs returned by tools is sent to the AI vendor as part of the chat. 16 tools: 10 read-only, 6 can change data (1 can delete or overwrite). |
| Model training | OpenAI and Anthropic business/API plans: not used for training by default. Consumer plans: may be used unless the user opts out. |
| Trust grade | — |
| Last change detected | No changes recorded since we started tracking. |
⚠ Lookalikes to block
These use the Hugging Face name but aren't published by Hugging Face:
- Huggingface (io.github.pipeworx-io/huggingface)
- Hugging Face (co.huggingface/hf-mcp-server)
- Huggingface MCP (io.github.mrfentmen/huggingface-mcp)
Reviewer checklist
- Approve only the official server URL above.
- Use a business plan that doesn't train on your data.
- Prefer OAuth with the least-privileged account.
- Decide whether write/delete tools are allowed.
- Re-review when the tools change (get alerts below).
Sign-off: ____________________ Date: __________
Live version: https://canmyaiuse.pages.dev/apps/hugging-face/approval/ · Not legal advice. Verify against the vendor's own docs.