Privacy Gateway
Local Presidio-based PII pseudonymization for Hermes model requests and tool results with an encrypted profile-scoped alias vault.
Good to know before installing
PII detection runs locally with Presidio and the spaCy en_core_web_lg model, which you install manually; alias mappings are stored encrypted in the Hermes plugin DB under HERMES_PRIVACY_GATEWAY_KEY; requests are blocked when the engine cannot load; tools outside rehydrate_tool_allowlist receive alias tokens, not plaintext.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs (this one needs
HERMES_PRIVACY_GATEWAY_KEY), then asks whether to turn it on.hermes plugins install privacy-gateway - Said no? Turn it on later:
hermes plugins enable privacy-gateway - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Security & privacy
- Maintained by
- saiteja-madha (Community)
- Needs
HERMES_PRIVACY_GATEWAY_KEYAPI key- Works on
- linux
- Needs Hermes
- 0.20.4 or newer
- Version
- 0.1.1
- In the catalog
- 2026-10-04
Full setup & settings ↗Source code ↗
More in security & privacy
All security & privacy plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher