Hugging Face access token
ID huggingface_access_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
User access token of the Hugging Face Hub, used in place of a password for git, as a bearer token for Inference Providers and in the Hugging Face Python libraries. It starts with hf_ followed by 34 letters and digits. Organization API tokens have the same length and the prefix api_org_.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 70/100 · missing: examples, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Gitleaks, TruffleHog
Regular expression
^(?:hf_|api_org_)[A-Za-z0-9]{34}$Python re syntax.
Examples
| Value | Description |
|---|---|
| hf_ExampleTokenNotReal invalid | Too short |
Sources
- doc: https://huggingface.co/docs/hub/security-tokens
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
- other: https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/huggingface/huggingface.go
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/huggingface_access_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/huggingface_access_token.yamlon GitHub