Hugging Face
Agents can search the Hugging Face Hub — finding models, datasets, and papers, and reading their documentation and metadata.
Note: This is discovery, not execution. Finding a model through this connector does not run it, download it into a workspace, deploy it, or give an agent inference against it. Running a model is a separate matter from reading about one.
If you want an agent to use a model, that is a model provider connection — see Anthropic, OpenAI, OpenRouter, or Grok.
Before you connect
- A Hugging Face account.
That is genuinely all for public content. Connect with an account that belongs to your organization if agents should also see private repositories; reach follows the account.
Connect Hugging Face
- Open Connectors and select Hugging Face.
- Read the access line above the main button. It says who the connection signs in as and which agents can use it. To pick a different identity, narrow the agents, or use another sign-in method, select Change.
- Select Sign in with Hugging Face and complete browser sign-in.
Paperclip registers its client automatically, so there is nothing to configure in a developer console.
Choose access
Two tiers of content, and the difference is worth stating:
| Content | Who can see it |
|---|---|
| Public models, datasets, and papers | Anyone. Connecting adds no privileged access to these |
| Private or gated repositories | Only if the authorizing account already has access |
Because most of the value here is public content, this is one of the lower-risk connectors to give an agent once its writes are switched off. The exception is an account with access to private organization repositories — that account's reach becomes the agent's.
Paperclip asks Hugging Face for the read-mcp, read-repos, contribute-repos, and jobs scopes. That covers reading, but also contributing to repositories and running jobs, so this is not a read-only connection by default. Read the action list on the Permissions tab and set anything that is not a read to Ask first or Off until you need it. See Set action permissions.
Note: The connection targets the Hub's own tools, and Paperclip requests the endpoint with Gradio tooling switched off — so the interactive applications hosted on Spaces are not part of this connection's surface.
Try it
Search Hugging Face for recent text embedding models under 500M parameters and summarize the top three, including their licences.
Expect results you can check on the Hub. Licence is a useful thing to ask for, because it is exactly the detail people skip when picking a model.
Note: Illustrative task, not a recorded test result.
Troubleshooting and limitations
| Problem | Likely cause | Fix |
|---|---|---|
| A private repository is not found | The authorizing account does not have access | Grant access on the Hub, or connect with an account that has it |
| A gated model's details are unavailable | Gated repositories require accepting terms on the Hub | Accept the terms with the authorizing account |
| An agent claims it can run a model it found | It cannot — this connector is discovery only | Use a model provider connection |
| Results seem stale | The Hub changes constantly; the agent read what was returned at the time | Re-run the search |
| Needs attention | The grant was revoked | Select Reconnect |
Limitations: discovery and metadata only. No inference, no hosting, no Spaces applications. Private content requires the account to already have access.
Related guides
Anthropic, OpenAI, OpenRouter, Grok — connections that actually run models.