{
  "id": "huggingface_access_token",
  "name": "Hugging Face access token",
  "status": "draft",
  "doc": "User access token of the Hugging Face Hub, used in place of a password for git, as a bearer token for Inference Providers and in the Hugging Face Python libraries. It starts with hf_ followed by 34 letters and digits. Organization API tokens have the same length and the prefix api_org_.",
  "parent": {
    "type": "access_token"
  },
  "categories": [
    {
      "id": "secrets",
      "name": "Secrets and credentials (passwords, keys, tokens)"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "classification": "identifier",
  "regexp": "^(?:hf_|api_org_)[A-Za-z0-9]{34}$",
  "examples": [
    {
      "value": "hf_ExampleTokenNotReal",
      "valid": false,
      "description": "Too short"
    }
  ],
  "links": [
    {
      "type": "doc",
      "url": "https://huggingface.co/docs/hub/security-tokens"
    },
    {
      "type": "other",
      "url": "https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml"
    },
    {
      "type": "other",
      "url": "https://github.com/trufflesecurity/trufflehog/blob/main/pkg/detectors/huggingface/huggingface.go"
    }
  ],
  "type": "datatype",
  "translations": {}
}