# Tripwire: Hermes Agent plugin

> Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert.

Canonical: https://hermeswatcher.com/plugins/tripwire  
Tier: Community  
Official page (Nous Research): https://hermes-agent.nousresearch.com/docs/plugins/tripwire  
Last updated in catalog: 2026-10-30

Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert. Observer only: it stores no tool arguments, results or message text, and fails open.

## Good to know before installing

Appends one JSON line per refused action (profile, tool name, block type or approval choice, session id, and the first 120 characters of the block reason or approval rule) to ~/.hermes/tripwire/events.jsonl, shared by all profiles (path overridable with TRIPWIRE_EVENTS); a pre_tool_call hook reads ~/.hermes/tripwire/TEST_BLOCK and, only while that file exists, blocks the single tool it names for the single profile it names (a drill switch to prove the alarm). No network calls, no shell commands, no background processes, no stored credentials, no telemetry.

From the plugin's catalog listing.

## How to install

1. Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.

```bash
hermes plugins install tripwire
```

2. Said no? Turn it on later:

```bash
hermes plugins enable tripwire
```

3. Restart Hermes so it loads the plugin.

Some plugins also need a sign-in or settings: see the official page. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide: https://hermes-agent.nousresearch.com/docs/user-guide/features/plugins

## Facts

- Category: Security & privacy, Automation & multi-agent
- Maintained by: percyhendrux123-prog (Community)
- Needs: No API keys declared
- Requires Hermes: `>=0.22.5`
- Version: 0.1.1
- In the catalog since: 2026-10-30

## Links

- [Full setup and settings (official page)](https://hermes-agent.nousresearch.com/docs/plugins/tripwire)
- [Source code](https://github.com/percyhendrux123-prog/hermes-tripwire/blob/904a4f559808c57152ebb666cd0ab7d863220b49/README.md)
- [All plugins](https://hermeswatcher.com/plugins.md)

---

HermesWatcher is an independent guide. It is not affiliated with or endorsed by Nous Research. The [official Hermes Agent documentation](https://hermes-agent.nousresearch.com/docs) and [repository](https://github.com/NousResearch/hermes-agent) from Nous Research are the authority; each page here lists the official sources it was written from. If this site and the official docs disagree, trust the official docs. Index for agents: https://hermeswatcher.com/llms.txt