Pidgeon
Email for Hermes through Pidgeon: mail to your agent's own address starts a conversation, one per email thread, and the agent's answer goes back as a reply in that thread. The agent reads Pidgeon Firewall's clean text, mail flagged as prompt injection is held before it reaches the agent, mail whose From fails DMARC never reaches it, and the agent can only reply, never write to a new recipient. Standard library only.
Good to know before installing
While the gateway runs it polls pidgeon.ai (or `PIDGEON_BASE_URL`) every five seconds with `PIDGEON_API_KEY` and sends the agent's answers as email replies through Pidgeon; mail from senders in `PIDGEON_ALLOWED_USERS` that passes DMARC becomes agent turns with the agent's full toolset (Firewall-flagged mail is held by default; setting `PIDGEON_ALLOW_UNAUTHENTICATED=true` also admits mail whose From is not authenticated, so anyone who knows an allowed address could instruct the agent), and a cursor/message-id state file is kept under `<HERMES_HOME>/pidgeon/`.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs (this one needs
PIDGEON_API_KEY), then asks whether to turn it on.hermes plugins install pidgeon - Said no? Turn it on later:
hermes plugins enable pidgeon - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Work & business · Chat apps & voice
- Maintained by
- pidgeon-ai (Community)
- Needs
PIDGEON_API_KEYAPI key- Needs Hermes
- 0.22.2 or newer
- Version
- 0.1.1
- In the catalog
- 2026-10-24
Full setup & settings ↗Source code ↗
More in work & business
New Hermes Agent updates every day on X. Follow @HermesWatcher