Hermes Model Switcher

Good to know before installing

Its apply route reads and edits the profiles' config.yaml (that is the plugin's function) through public seams only: POST /api/model/set for main and compatible auxiliary slots, and public hermes_cli.config load/save under the target home for other slots; credential presence checks use public profile-scoped secret helpers (agent.secret_scope), and profile discovery uses public hermes_constants. The plugin makes no direct third-party requests and opens no provider caches or pricing registries directly, but its browser tab does call the host's /api/model/* routes through the Dashboard SDK, and the host options route may itself initiate provider or pricing I/O even without an explicit refresh request, so reads are not guaranteed cache-only. It runs no shell commands or background processes and reports nothing. The private undo journal stores a full pre-change snapshot of each config it edits, which can contain sensitive fields including embedded credentials. Saved presets also persist reviewed change values, potentially including inline credentials or credential-bearing base URLs, in presets.json (0600) under get_hermes_home()/state/hermes-model-switcher/ (0700). The host write route

From the plugin's catalog listing.