PulseOnix / open source
hfm
A multi-account Hugging Face manager: one CLI and one MCP server for every HF account, repo and Space, built for humans and AI agents alike. Installable via pipx.
By Alish Karki, part of the PulseOnix engineering collective.
Implementation
- Install via pipx: pipx install hfm
- OAuth device flow: no tokens pasted into dotfiles, auto-refreshed
- MCP server exposes the same operations to AI agents over stdio
- Read-only mode and an audit log as safety rails for agent access
Usage
Install with pipx install hfm, then follow the repository authentication instructions for the OAuth device flow. Use the CLI for account, repository, and Space operations, or connect the stdio MCP server to an agent client.
Limitations and evidence
Operations depend on Hugging Face account permissions and service availability. An MCP client can act with the credentials you configure; use read-only mode for inspection and review the audit log. No performance benchmark is published here.