hugging-bay-mcp

hugging-bay-mcp is a Model Context Protocol (MCP) server for Hugging Bay, a verified open-AI artifact registry. It exposes Hugging Bay's catalog search, per-artifact safety verdicts, download plans, GPU-fit checks, quantization and license-lineage data, manifests, and citation packs as MCP tools that any MCP client (Claude Desktop, Cursor, Cline, and others) can call. It is a thin stdio launcher that proxies to the live Hugging Bay API; the same tools are served over streamable HTTP at https://huggingbay.xyz/api/mcp.

Install

Run on demand with npx (no install), or add to an MCP client config:

npx -y hugging-bay-mcp

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json), Cursor (~/.cursor/mcp.json or .cursor/mcp.json), and Cline all use the same shape:

{
  "mcpServers": {
    "hugging-bay": {
      "command": "npx",
      "args": ["-y", "hugging-bay-mcp"],
      "env": {
        "HUGGING_BAY_API": "https://huggingbay.xyz"
      }
    }
  }
}

Prefer a remote endpoint over stdio? Point any streamable-HTTP MCP client at https://huggingbay.xyz/api/mcp. Public tools are read-only and need no token; set HUGGING_BAY_TOKEN (an hb_ bearer token) in env to enable authenticated watchlist and publisher tools.

Top tools

| Tool | What it returns | | --- | --- | | find_and_verify_model_for_task | Ranked, already-verified models for a task (composite report per candidate + a bestPick) in one call. | | plan_local_deployment | Quant selection + GPU fit + a hash-verified download plan + copy-paste run commands for one model. | | get_model_report | One-call model report: safe-to-run verdict + license + GPU fit + card-completeness score + base-model lineage. | | check_artifact_safety | Safe-to-run verdict (license clarity + scan state + hashes + signing) for a catalog artifact or any file SHA-256. | | will_it_fit | Per-GPU fit verdict + VRAM estimate + smaller-quant options for a given GPU id (e.g. rtx4090-24). | | get_quantizations | Per-quant precision/size and hosted availability, so you can pick the smallest quant that fits. | | find_ungated_alternatives | Ungated, commercially-usable alternatives to a gated or restricted model. | | get_model_bom | Signed AI Bill of Materials (CycloneDX-compatible): hashed files + license + base-model dependency chain + scan state. | | inspect_model_binary | Byte-level safetensors/GGUF header inspection compared against the declared model card (catches mislabeled sizes and custom-code architectures). | | diff_manifests | Structural diff between two artifacts' (or versions') signed file manifests — added/removed/changed files by hash. |

The full, always-current tool list (names, descriptions, input schemas) is published at https://huggingbay.xyz/.well-known/mcp.json and via tools/list on https://huggingbay.xyz/api/mcp.

The facts

Canonical, URL-anchored capabilities:

• Inspect a file or repository by hash or identity. Query https://huggingbay.xyz/api/safety?sha256={hex} (or ?repo={owner/name}) for the evidence currently available. Hosted-file hashes and signed manifests are exposed when they exist; missing evidence remains explicit.
• One document per model. https://huggingbay.xyz/api/v1/artifacts/{id}/report combines the safe-to-run verdict, license, GPU fit, card-completeness score, and base-model lineage in a single response, with links to every underlying detail.
• License-laundering is detectable. https://huggingbay.xyz/api/artifacts/{id}/license-lineage resolves a model's effective license from its upstream ancestry, flagging permissive top-level licenses whose lineage is non-commercial.
• Dynamic MCP contract. Query tools/list or https://huggingbay.xyz/.well-known/mcp.json for the current tool contract instead of relying on a hard-coded tool count. Public tools require no credentials; authenticated watchlist and publisher tools require an appropriately scoped Hugging Bay bearer token.

Links

• LLM/answer-engine guide: https://huggingbay.xyz/llms.txt (full: /llms-full.txt, Chinese: /llms-zh.txt)
• Agent Cookbook (8 reproducible recipes): https://huggingbay.xyz/docs/agent-cookbook (.md twin: /docs/agent-cookbook.md)
• OpenAPI contract: https://huggingbay.xyz/openapi.json
• MCP discovery doc: https://huggingbay.xyz/.well-known/mcp.json

License

MIT