Provide your own HuggingFace token to unlock models that need auth. Your token lives in browser memory only — never sent anywhere except api.huggingface.co.