Redaction Pack
Teaches Hermes's built-in secret redactor 71 more vendor credential formats (HashiCorp Vault, Doppler, Amazon Bedrock, Atlassian, Cloudflare, Supabase, Tailscale, Docker Hub, JFrog Artifactory, CircleCI, HubSpot, PostHog, Grafana, Sentry, Shopify and others) through register_redaction_patterns, so those tokens are masked in logs, tool output and model-bound text like the built-in ones.
Good to know before installing
Register() makes one call, ctx.register_redaction_patterns; no tools, hooks, network access, subprocesses, files or environment variables; the patterns can only add masks, and security.redact_secrets: false still turns redaction off.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install redaction-pack - Said no? Turn it on later:
hermes plugins enable redaction-pack - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Security & privacy
- Maintained by
- pierrenode (Community)
- Needs
- No API keys declared
- Needs Hermes
- 0.21 or newer
- Version
- 1.4.0
- In the catalog
- 2026-10-05, updated 2026-10-06
Full setup & settings ↗Source code ↗
More in security & privacy
All security & privacy plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher