Secret Handoff
Ephemeral credential paste: request_secret asks through clarify and injects the reply over CDP, never storing it.
Good to know before installing
The reply is typed into the focused field of the page whose origin matches the requested service, over the endpoint from BROWSER_CDP_URL or SECRET_HANDOFF_CDP_URL; the answer is visible in the CLI scrollback or the chat history of the surface that asked, and the value is never written to disk, the tool result, or the session transcript.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install secret-handoff - Said no? Turn it on later:
hermes plugins enable secret-handoff - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Security & privacy
- Maintained by
- aean0x (Community)
- Needs
- No API keys declared
- Adds tools
request_secret- Version
- 0.3.6
- In the catalog
- 2026-10-02, updated 2026-10-13
Full setup & settings ↗Source code ↗
More in security & privacy
All security & privacy plugins
New Hermes Agent updates every day on X. Follow @HermesWatcher