Github App
GitHub and GitHub Enterprise tools with bot-first attribution and approval-gated issue/PR writes.
Good to know before installing
Authenticates as a GitHub App from GITHUB_APP_ID, GITHUB_APP_INSTALLATION_ID and a private key in GITHUB_APP_PRIVATE_KEY or GITHUB_APP_PRIVATE_KEY_PATH/_FILE (read from the profile env or HERMES_HOME/.env, held in memory only, never written or logged), falling back to GITHUB_TOKEN/GH_TOKEN or `gh auth token` when no App variables are set, and reports which identity acted in every result. Talks only to https://api.github.com or the operator-configured GITHUB_API_URL / settings.api_url (HTTPS, no redirects; no tool argument can change the host). Issue/comment/review/merge writes stay disabled until settings.allow_write_actions is true and each one additionally goes through Hermes's human-approval prompt via its pre_tool_call hook (an 'always' answer does not persist).
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install github_app - Said no? Turn it on later:
hermes plugins enable github_app - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Memory & notes
- Maintained by
- himanusia (Community)
- Needs
- No API keys declared
- Adds tools
github_identitygithub_create_issuegithub_comment_issuegithub_list_issuesgithub_get_issuegithub_review_prgithub_merge_pr- Version
- 0.1.0
- In the catalog
- 2026-09-26
Full setup & settings ↗Source code ↗
More in memory & notes
New Hermes Agent updates every day on X. Follow @HermesWatcher