Hugging Face Spaces

Push an environment into a Hugging Face Space's secrets.

Connection

What	This provider
Vendor	Hugging Face
Key	`huggingface-space-secret`
Availability	`available`. You can connect it today.
Credential we hold	`huggingface-token`
Values read back	no
Activation	`restart-on-write`

Direction	What it does
`export`	We write names and values from your environment into the store.

Hugging Face returns no value once it holds one, so we can write here and cannot read back.

restart-on-write. When we write a value, the workload restarts.

Direction	Policies you can pick
`export`	`create_only`, `overwrite`, `overwrite_and_prune`

How syncs work says what each one does.

Paste a credential from the vendor. We seal it and never show it again.

Field	Label	Kind	Required	What it is
`token`	Access token	secret; we mask it here and seal it	yes	A user access token with write access to this Space.

You answer these once per environment you map.

Field	Label	Kind	Required	Advanced	What it is
`repoId`	Space	text	yes	no	Owner and Space name, as they appear in its URL.

We probe for these when we verify the connection.

Permission	Directions	Blocking	Without it
`spaces:read`	every direction	yes	Preview cannot list the Space's secrets.
`spaces:write`	`export`	yes	Export cannot write anything.