Scamgate

Offline scam gate. Blocks known-bad links and payments before a tool runs, and asks a human when it cannot see the destination.

Good to know before installing

Blocks agent tool calls that would edit Hermes config/profiles/plugins/hooks or turn approvals off, and with approvals off turns its "ask" into a block (setting when_approvals_off: allow restores asks); keeps its signing key and ask log under ~/.local/state/scamgate and phishing feeds under ~/.cache/scamgate (not per-profile); feeds download only when you run `scamgate update-feeds` (openphish.com, Phishing-Database on GitHub, optional urlhaus); optional SCAMGATE_RDAP=live sends each checked link's domain to its RDAP registry.

From the plugin's catalog listing.

How to install

Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install scamgate
Said no? Turn it on later:
hermes plugins enable scamgate
Restart Hermes so it loads the plugin.

Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).

Category: Security & privacy
Maintained by: odaiameera (Community)
Needs: No API keys declared
Adds tools: scamgate_check_url scamgate_check_payment
Works on: linux, macos, windows
Needs Hermes: 0.19.1 or newer
Version: 0.3.1
In the catalog: 2026-10-16, updated 2026-10-23

Full setup & settings ↗Source code ↗

More in security & privacy

All security & privacy plugins

New Hermes Agent updates every day on X. Follow @HermesWatcher

← All plugins