AI exposure report for huggingface.co

AI exposure grade

Minimal exposure

huggingface.co

5 surfaces present

0 findings

No leaked secrets or high-risk agent capabilities on this domain's public AI-facing surfaces.

Findings

No leaked secrets, injected instructions, or high-risk agent capabilities were found on this domain's public AI-facing surfaces.

Surface map · public well-known files

Discovery

robots.txt
No AI crawler directives found.
llms.txt
Not present.
llms-full.txt
Not present.
ai.txt
Not present.

Agent surfaces

ai-plugin.json
Not present.
MCP server card
Not present.
A2A agent card
Not present.
A2A agent card (v2)
Not present.
NANDA AgentFacts
Not present.

Identity & auth

OAuth authorization serveroauth
OAUTH card · 0 capabilities
OAuth protected resourcemcp
MCP card · 0 capabilities
did:web document
Not present.

Hygiene

security.txt
A disclosure contact. Present is good posture, not a risk.
security.txt (root)
Legacy root location for the disclosure contact.

Scanned Jul 20, 2026, 06:00 AM. A read-only, point-in-time look at huggingface.co's public well-known files (the same requests a search crawler makes). AxioRank is not affiliated with huggingface.co. Own this domain? Verify it.

Stop scanning. Start enforcing.

AxioRank continuously verifies the agents that reach your surfaces and enforces policy on every tool call. Start free, no card.

Start free How inbound verification works