Data & AI · wired today
Drive Hugging Face with governed agents
Models and datasets are infrastructure now, and agents need eyes on them. The Hugging Face connector is one of 205 executable connectors and gives agents 4 read-only tools, with the credential held in the vault and every call receipted.
What agents can run against Hugging Face
| Tool | What it does |
|---|---|
whoami | Identify the Hugging Face account behind the token (name, type, organisations and the token's role) |
list_models | Search the Hugging Face Hub for models, newest-matching first |
model_info | Get one namespaced Hugging Face model repo (owner plus model name, e.g. openai + whisper-large-v3). Canonical single-segment ids such as bert-base-uncased are not addressable here: path values are URL-encoded, so the owner and the name must be supplied separately |
list_datasets | Search the Hugging Face Hub for datasets |
Every tool above is read-only. Write surfaces ship only after live testing, and always behind approval gates.
What the Hugging Face connector needs
You provide API token from your Hugging Face account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Where to get it: Hugging Face's own API documentation ↗ covers creating and scoping the credential.
How proven is this?
This connector was blind shape-proven against the real Hugging Face API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.
Hugging Face integration FAQ
What can Quox agents do with Hugging Face?
Agents can run 4 read-only tools against Hugging Face: whoami, list models, model info, list datasets. Every call is receipted in the evidence trail.
What does the Hugging Face integration need?
You provide API token from your Hugging Face account; Quox sends it as a bearer token. The credential is stored encrypted in the vault and resolved just-in-time, so agents use it without ever seeing it.
Do agents see my Hugging Face credentials?
No. Credentials live encrypted in the Quox vault and are resolved server-side at call time. Agents invoke tools; they never receive the underlying secret.
How proven is the Hugging Face connector?
This connector was blind shape-proven against the real Hugging Face API: every endpoint it declares answered measurably differently from a deliberately bogus control request, without any account or credential involved. It is Beta: proven against the live API surface, not yet run with a real credential.