← Back to search

@huggingface/mcp-client

huggingface MIT 2,415 stars Scanned 55d ago

Client for the Model Context Protocol

npm ↗
? Not scanned yet

Versions

1.0.0 latest
May 20, 2026
hub-v2.13.0
May 22, 2026
inference-v4.13.18
May 21, 2026
inference-v4.13.17
May 20, 2026
inference-v4.13.16
May 20, 2026
tasks-v0.21.1
May 19, 2026
tasks-v0.21.0
May 13, 2026
hub-v2.12.0
May 13, 2026
tasks-v0.20.25
May 12, 2026
jinja-v0.5.9
May 8, 2026
hub-v2.11.2
May 8, 2026
xetchunk-wasm-v0.0.6
May 8, 2026
hub-v2.11.1
May 7, 2026
tasks-v0.20.24
May 7, 2026
tasks-v0.20.23
May 5, 2026
tasks-v0.20.22
Apr 27, 2026
jinja-v0.5.8
Apr 24, 2026
tasks-v0.20.21
Apr 24, 2026
tasks-v0.20.20
Apr 23, 2026
tasks-v0.20.19
Apr 23, 2026
tasks-v0.20.18
Apr 22, 2026
tasks-v0.20.17
Apr 21, 2026
ollama-utils-v0.0.18
Apr 16, 2026
tasks-v0.20.16
Apr 16, 2026
jinja-v0.5.7
Apr 16, 2026
tasks-v0.20.15
Apr 15, 2026
tasks-v0.20.14
Apr 13, 2026
tasks-v0.20.13
Apr 9, 2026
gguf-v0.4.2
Apr 8, 2026
tasks-v0.20.12
Apr 3, 2026
tasks-v0.20.11
Mar 31, 2026
tasks-v0.20.10
Mar 27, 2026
tasks-v0.20.9
Mar 26, 2026
tasks-v0.20.8
Mar 26, 2026
tasks-v0.20.7
Mar 24, 2026
tasks-v0.20.6
Mar 20, 2026
tasks-v0.20.5
Mar 20, 2026
tasks-v0.20.4
Mar 19, 2026
gguf-v0.4.1
Mar 18, 2026
tasks-v0.20.3
Mar 18, 2026
tasks-v0.20.2
Mar 18, 2026
tasks-v0.20.1
Mar 13, 2026
tasks-v0.20.0
Mar 11, 2026
gguf-v0.4.0
Mar 11, 2026
hub-v2.11.0
Mar 11, 2026
gguf-v0.3.8
Mar 11, 2026
hub-v2.10.8
Mar 11, 2026
gguf-v0.3.7
Mar 10, 2026
hub-v2.10.7
Mar 10, 2026
hub-v2.10.6
Mar 10, 2026
jinja-v0.5.6
Mar 9, 2026
inference-v4.13.15
Mar 6, 2026
gguf-v0.3.6
Mar 6, 2026
tasks-v0.19.90
Mar 6, 2026
hub-v2.10.5
Mar 3, 2026
tasks-v0.19.89
Mar 2, 2026
inference-v4.13.14
Feb 27, 2026
tasks-v0.19.88
Feb 25, 2026
inference-v2.0.0
Apr 19, 2023

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 130

info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (18) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: semver@7.5.0 (GHSA-c2qf-rxjj-qqgw) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@6.7.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-8jhw-289h-jh2g) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-92r3-m2mg-pj97) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-c24v-8rfc-w8vw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.2 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.4 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.4 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.4 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.1.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.2 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.2 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.2.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.5.9 (GHSA-2crg-3p73-43xp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.5.9 (GHSA-3f6h-2hrp-w5wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.5.9 (GHSA-6q87-84jw-cjhp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.5.9 (GHSA-mh2x-fcqh-fmqv) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.5.9 (GHSA-rjjv-87mx-6x3h) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-8266-84wp-wv5c) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-crpf-4hrx-3jrp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-f7gr-6p89-r883) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-m56q-vw4c-c2cp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-phwv-c562-gvmh) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-pr6f-5x2q-rwfp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@4.2.17 (GHSA-rcqx-6q8c-2c42) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.2.11 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.6.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
High-entropy string (6.57 bits/char) in packages/tasks/src/default-widget-inputs.ts:156 entropy_analyzer · 63%
medium
High-entropy string (5.94 bits/char) in packages/ollama-utils/src/chat-template-automap.ts:570 entropy_analyzer · 54%
medium
High-entropy string (6.03 bits/char) in packages/ollama-utils/src/chat-template-automap.ts:570 entropy_analyzer · 55%
medium
High-entropy string (6.60 bits/char) in packages/ollama-utils/src/chat-template-automap.ts:570 entropy_analyzer · 64%
medium
High-entropy string (6.34 bits/char) in packages/ollama-utils/src/chat-template-automap.ts:570 entropy_analyzer · 60%
medium
High-entropy string (6.24 bits/char) in packages/ollama-utils/src/chat-template-automap.ts:893 entropy_analyzer · 58%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:49 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:52 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:53 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:54 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:55 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:58 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:59 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:60 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:62 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:466 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:471 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:476 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:481 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:485 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:486 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:487 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:492 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:493 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:495 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/xetchunk-wasm/tests/index.test.ts:499 entropy_analyzer · 70%
medium
Buffer.from base64 in packages/inference/src/providers/wavespeed.ts:285 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in packages/hub/scripts/bench.ts:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/scripts/bench.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/scripts/bench.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/scripts/bench.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/scripts/bench.ts:53 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/shardParser.spec.ts:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/sha256.spec.ts:5 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/sha256.spec.ts:7 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/sha256.spec.ts:9 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:78 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:107 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:136 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/utils/XetBlob.spec.ts:159 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:52 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:114 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:118 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:131 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/list-files.spec.ts:135 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/paths-info.spec.ts:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/file-download-info.spec.ts:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in packages/hub/src/lib/file-download-info.spec.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in e2e/svelte/src/test.spec.ts:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in e2e/svelte/src/test.spec.ts:23 entropy_analyzer · 70%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 63 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%