huggingbay-xyz Artifacts API

The Artifacts API from huggingbay-xyz — 63 operation(s) for artifacts.

Operations 70

GET /api/dumps/hosted-files.jsonl Bounded hosted-file dump in NDJSON #
GET /api/dumps/hosted-files.csv Bounded hosted-file dump in CSV #
GET /feeds/hosted-mirrors.xml RSS feed of hosted Hugging Bay mirror/download rows #
GET /api/search Common-path compatibility alias for bounded artifact search #
GET /api/v1/artifacts/{id}/versions Fetch artifact version provenance and freshness metadata #
GET /api/v1/search Stable v1 artifact search alias #
GET /api/search/semantic Hybrid semantic artifact search #
GET /api/v1/artifacts/{id} Stable v1 artifact detail alias #
GET /api/quicksearch Compact mixed-kind adapter over recorded v1 search for the command palette #
GET /api/artifacts/{id}/benchmarks Benchmark results recorded for one artifact (trust-weighted: verified over… #
GET /api/artifacts/{id}/runtimes Compatible runners and exact load commands for one artifact (?platform= filter) #
GET /api/artifacts/{id}/impact Impact/blast-radius graph: what depends on this artifact #
GET /api/artifacts/{id}/changes Change timeline for one artifact #
GET /api/leaderboards/{benchmark} Trust-weighted leaderboard for one benchmark (?metric=, ?limit=) #
GET /api/v1/artifacts/{id}/safety One safety-scan verdict for an artifact (a scan result, not a safety or run… #
GET /api/v1/artifacts/{id}/files Stable v1 artifact file inventory alias #
GET /api/v1/artifacts/{id}/manifest Stable v1 hosted manifest alias #
GET /api/v1/artifacts/{id}/download-plan Stable v1 hosted download-plan alias #
GET /api/v1/artifacts/{id}/everything One bounded artifact identity, report, chat-contract, and runtime-capability… #
GET /api/v1/artifacts/{id}/peer-fallbacks Stable v1 reviewed peer fallback metadata #
GET /api/v1/compare Stable v1 compare alias #
GET /api/artifacts Search and page through public artifacts #
POST /api/artifacts Create a publisher draft with uploaded source files #
GET /api/releases/{id} Fetch a launch-ready Hugging Bay release bundle #
GET /api/releases/{id}/readiness Fetch release readiness scoring for a Hugging Bay release #
GET /api/upload-sessions List upload-session summaries visible to the publisher token #
POST /api/upload-sessions Create a signed large-upload session for publisher releases #
GET /api/upload-sessions/{id} Fetch upload-session state #
DELETE /api/upload-sessions/{id} Cancel a pending upload session #
POST /api/upload-sessions/{id}/resume Refresh signed PUT URLs for incomplete upload-session files #
POST /api/upload-sessions/{id}/complete Verify object uploads and complete a large-upload session #
GET /api/artifacts/{id} Fetch full artifact record #
GET /api/artifacts/{id}/dataset-inspection Inspect one exact public dataset selection without returning rows #
GET /api/artifacts/{id}/metadata.json Fetch machine-readable artifact metadata and safe agent workflow #
GET /api/artifacts/{id}/versions Fetch artifact version provenance and freshness metadata #
GET /api/artifacts/{id}/insights Fetch a decision-ready artifact insight document #
GET /api/artifacts/{id}/agent-bundle Fetch one agent-ready artifact bundle #
GET /api/artifacts/{id}/distribution Fetch hosted, upstream, and reviewed peer-assisted distribution options #
GET /api/artifacts/{id}/peer-fallbacks Fetch reviewed torrent/magnet fallback metadata for hosted files #
POST /api/artifacts/{id}/decentralized-fallbacks Submit magnet metadata for reviewed peer-assisted fallback distribution #
GET /api/artifacts/{id}/card Fetch a rendered-card document for an artifact #
GET /api/artifacts/{id}/card.md Fetch a Markdown artifact card #
GET /api/artifacts/{id}/review-summary Fetch a compact answer-engine review and trust summary for an artifact #
GET /api/artifacts/{id}/reviews List public community reviews and run-report attestations for an artifact #
POST /api/artifacts/{id}/reviews Submit a bounded public review or run-report attestation #
POST /api/artifacts/{id}/reviews/{reviewId}/helpful Mark a public artifact review as helpful #
POST /api/artifacts/{id}/reviews/{reviewId}/report Report a public artifact review for moderation #
GET /api/artifacts/{id}/files Fetch paginated artifact files #
GET /api/artifacts/{id}/download-plan Deprecated alias of GET /api/v1/artifacts/{id}/download-plan: the per-file… #
GET /api/compare Compare up to six artifacts side by side #
GET /api/resolve Resolve an upstream repo URL, owner/name, or artifact id to one Hugging Bay… #
GET /api/v1/artifacts Redirect to recorded catalog search and its pagination #
POST /api/v1/resolve/batch Resolve up to 100 references to compact catalog metadata #
GET /api/v1/resolve Resolve an upstream repo URL, owner/name, or artifact id through the stable v1… #
GET /api/downloadable-files List the hosted-file inventory and its current serve verdicts #
GET /api/license-acceptances/{id} Read the exact conditional-license obligations for one public artifact #
POST /api/license-acceptances/{id} Affirm exact conditional-license obligations and mint a bounded download token #
GET /artifact/{id}/download.torrent Download deterministic BitTorrent v2 metainfo with a hybrid v1 view #
GET /api/downloads/{artifactId} Common-path compatibility alias for an artifact download-plan #
GET /api/downloads/{id}/{path} Download one hosted file. Supports Range requests for large files #
HEAD /api/downloads/{id}/{path} Inspect one hosted file without downloading it #
POST /api/download-completions/{id}/{path} Attest successful local verification of a redirected hosted download #
GET /api/trust-bundles/{id} Fetch artifact trust bundle with license, scan, hosting, and file evidence #
GET /api/keys/manifest-signing Fetch public manifest signing key metadata #
GET /api/artifacts/{id}/mirror-request Read the public mirror-request intake contract for one artifact #
POST /api/artifacts/{id}/mirror-request Record mirror demand for an external Hugging Face artifact #
POST /api/artifacts/{id}/run-checks Run publisher release gates for a draft/private/gated artifact #
POST /api/artifacts/{id}/publish Publish a draft after release gates pass #
GET /api/v1/artifacts/{id}/proof-receipt Read the recorded proof and limits for one exact file #
GET /api/dumps/hosted-files.ndjson Read /api/dumps/hosted-files.jsonl through its compatible… #

Specifications

Schemas & Data

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/huggingbay-xyz:huggingbay-xyz-artifacts-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

huggingbay-xyz-artifacts-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Hugging Bay Public Artifacts API
  version: 0.2.0
  summary: AI artifact discovery, provenance, hosted/external state, and mirror demand APIs.
  x-agent-quickstart: '## Connect your agent

    One live call; public reads need no key:


    ```sh

    curl -fsS ''https://huggingbay.xyz/api/mcp'' -H ''Content-Type: application/json'' -d ''{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"search_artifacts","arguments":{"q":"Qwen2.5 0.5B GGUF","limit":5}}}''

    ```


    Hosted MCP: Streamable HTTP `https://huggingbay.xyz/api/mcp`. No key for reads. Inspect tools/list.

    Claude Code: `claude mcp add --transport http hugging-bay https://huggingbay.xyz/api/mcp`

    Codex CLI: `codex mcp add hugging-bay --url https://huggingbay.xyz/api/mcp`. Public reads need no OAuth login.

    Cursor: add {"mcpServers":{"hugging-bay":{"url":"https://huggingbay.xyz/api/mcp"}}} to .cursor/mcp.json.

    ChatGPT: On ChatGPT web, open Plugins → + → Add custom MCP server. Name it hugging-bay, paste this remote MCP URL, choose no authentication, and review the search and fetch tools for public catalog reads. Availability depends on your account and workspace permissions. This custom connection is separate from the private bundled plugin; public-directory approval remains separate. URL: https://huggingbay.xyz/chatgpt/mcp

    Stdio (Node.js 18+): `npx -y hugging-bay-mcp@0.1.13`; list tools.

    On 2026-10-29 the official MCP Registry listed io.github.barneywohl/hugging-bay 0.1.13 as active and latest.

    The call returns a live catalog row. Read its file and license details before downloading.

    Fit is an estimate. A hash checks bytes; it does not prove a run, safety or license permission.'
  description: 'Agents can request models, features, tools and builds, get an id, check the status of each request, and read a public changelog of what shipped. Missing a model, file, tool or feature? Ask with request_feature (MCP) or POST https://huggingbay.xyz/api/v1/requests. No account. You get an id and can check its status. What shipped: https://huggingbay.xyz/changelog Start at /api/index.json for bounded open-model and dataset discovery, license and provenance metadata, hosted-file evidence, MCP profiles and explicit execution boundaries. Catalog inclusion is not proof of byte availability, runtime readiness or quality. Authenticated operations require the documented scopes; discovery never grants authority to execute them.


    **Data freshness.** `degraded` means a fresh complete read was unavailable; `stale` means earlier snapshot data is being shown. Neither flag grants download or execution permission. See `x-data-freshness`.


    **Private notifications.** The site''s `/v1/notify/*` browser/email routes are listed under `x-private-routes`, including their paused and one-click behavior.'
  x-changelog:
  - version: 0.2.0
    date: '2026-10-16'
    changes:
    - 'Identified the Round 9 path addition: POST /api/events/a2hs (createA2hsEvent), the aggregate home-screen tip counter added on 2026-10-15. Its schema requires event, surface and platform plus the same-origin CSRF header; it stores no visitor identifiers.'
    - Clarified IP and route-group read budgets, uncached RateLimit headers, and the separate live database concurrency admission limits under x-rate-limit.admission. Capacity 503s do not imply a fixed requests-per-second throttle.
    - /api/programs is not served on huggingbay.xyz or run.huggingbay.xyz. Read hosted Bay Run Pins at https://run.huggingbay.xyz/v1/pins; the separate browser model manifest is https://huggingbay.xyz/run/api/programs.
  - version: 0.2.0
    date: '2026-10-12'
    changes:
    - Hosted-file JSONL routes and their latest-data alias return JSON errors instead of zero-byte successful downloads when no rows are available; nonempty dumps retain their row format and continuation links.
    - Unknown agent-request ids return request_not_found, including malformed ids. /changelog/ redirects to /changelog, which shares agent-request shipping entries with /api/v1/changelog; /what-changed remains the separate serve-decision feed.
    - OpenAPI contract version follows this changelog instead of the MCP package version. Data freshness flags and private browser notification routes are documented separately from public SDK operations.
  - version: 0.2.0
    date: '2026-09-21'
    changes:
    - 'Consolidated developer reference: the authentication policy, the rate-limit policy (x-rate-limit), the error taxonomy (x-error-taxonomy), this changelog (x-changelog) and a loud deprecated-alias map (x-deprecated-aliases) are now carried in this one document, so openapi.json is the single source instead of the scattered install/PyPI/blackboard/SKILL surfaces.'
    - Published a pointer to the observed remote MCP tools/list contract (x-mcp) so an agent can discover the model-discovery and download tools, not only the fixed Bay Run demo Pins.
  - version: 0.2.0
    date: '2026-09-20'
    changes:
    - 'General API error envelope: { error, code, status, message, requestId, next:{action,href} }; notification routes have separate documented shapes. nextAction and docsRef remain as deprecated aliases.'
    - recorded-vs-alias markers (x-primary, x-primary-path, x-aliases) and near-synonym disambiguation (x-route-family, x-use-when) on every duplicated route.
    - 'Runnable examples: request parameter examples, a JSON response example and an x-codeSamples curl recipe on the core operations.'
    - 'Edge validation: malformed numeric query parameters are rejected with 400 invalid_query before reaching the database.'
  - version: 0.2.0
    date: '2026-09-19'
    changes:
    - 'Developer on-ramp: /quickstart (get a key, first call, serve a model), the rendered reference at /docs/api (Redoc over this spec), self-serve reader tokens, and an llms.txt mirror of the same steps.'
servers:
- url: https://huggingbay.xyz
tags:


# --- truncated at 32 KB (672 KB total) ---
# Full source: https://artifacts.apis.io/huggingbay-xyz/openapi/huggingbay-xyz-artifacts-api-openapi.yml