Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | DembrandtShortlist candidate | Hugging Face MCPMCP100 Recommended |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | Community implementation Dembrandt · Publisher source ↗ | First-party MCP Hugging Face · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Not documented | Repo: Sep 23, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | Not documented | 296 GitHub stars · checked 2026-09-24T04:14:16.295000Z |
| Shared repository stars | 3,756 Shared repository stars (not MCP-specific) · checked 2026-10-20 | Not documented |
| Shared-package downloads / 30 days | 17,948 shared-package downloads / 30 days (not MCP-specific) · checked 2026-10-20 | Not documented |
| Client coverage | ||
| Client coverage details | Not documented | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | No credential is required for local extraction. `DEMBRANDT_KEY` is optional and enables cloud snapshot upload/comparison. | The hosted server supports the current documented Hugging Face OAuth or bearer-token paths. Tool advertisement or discovery configuration is not a server-side authorization boundary for a caller that already knows a tool name; actual authority remains bounded by the authenticated Hugging Face account and token permissions. |
| Cost | No separate MCP fee is documented for local open-source use; cloud-service pricing is not documented in the reviewed MCP guide. | Hub search and the open-source server have no separately documented MCP fee. Hugging Face Jobs, sandboxes, inference, storage, hardware-backed Spaces, and the AI client can incur normal account charges. |
| Permissions | The local MCP controls a browser against requested websites and can accept cookies/basic-auth/custom headers supplied by the user. | Base tools search and navigate Hugging Face Hub resources and documentation. Optional tools can create and write repositories, manage sandbox files, run or schedule Jobs, and invoke selected or dynamically discovered community Spaces, bounded by the authenticated Hugging Face token and configured tool set. |
| Data handling | Without a Dembrandt key, extraction runs locally. With `DEMBRANDT_KEY`, each extraction is uploaded as a snapshot to Dembrandt's cloud service for comparison/scoring. | Queries and results pass through Hugging Face's hosted MCP service. Community Space calls send their arguments to the selected Space and return its outputs to the client. Jobs and sandboxes can process files and compute inputs on Hugging Face infrastructure. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | The server can send authenticated browser requests to websites and may handle cookies/headers. It can also upload snapshots to Dembrandt cloud when the optional key is configured. | Begin with search-only tools and a least-privilege token. Disable dynamic Spaces, repository writes, Jobs, and sandboxes unless separately approved; review every community Space as third-party code and never send secrets or regulated data. This documentary review does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-10-19 | 2026-07-24 |
| Candidate evidence | 2026-10-20 | 2026-09-24T04:25:05.554391Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →