909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
880 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Teaches Hermes's built-in secret redactor 71 more vendor credential formats (HashiCorp Vault, Doppler, Amazon Bedrock, Atlassian, Cloudflare, Supabase, Tailscale, Docker Hub, JFrog Artifactory, CircleCI, HubSpot, PostHog, Grafana, Sentry, Shopify and others) through register_redaction_patterns, so those tokens are masked in logs, tool output and model-bound text like the built-in ones.
Good to know before installing
Register() makes one call, ctx.register_redaction_patterns; no tools, hooks, network access, subprocesses, files or environment variables; the patterns can only add masks, and security.redact_secrets: false still turns redaction off.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install redaction-pack
Said no? Turn it on later:
hermes plugins enable redaction-pack
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Workflows
Community
Agent-owned workflow graphs for Hermes — a background runner executes a JSON DAG of agent nodes, fan-outs (quorum) and human/machine gates with fingerprint replay-skip resume, cooperative steer, typed failure events…
Agent-owned workflow graphs for Hermes — a background runner executes a JSON DAG of agent nodes, fan-outs (quorum) and human/machine gates with fingerprint replay-skip resume, cooperative steer, typed failure events and compact status payloads; ships a desktop DAG view, an inline transcript card and the authoring skill with measured budget recipes. Stock Hermes; no patched core required.
Good to know before installing
Every workflow run spawns a detached background runner (wf.py run <id>) that survives session end, gateway restart and plugin disable until the graph reaches a boundary or workflow stop; each agent node is a child hermes chat --query-file … --oneshot -Q … inheriting the runner's environment, and a node with profile set runs as that named profile (with its own credentials) only if the target's workflow_team.json lists the launcher; a gate's wait.until_argv runs an agent-authored argv directly from the runner, outside Hermes' tool-approval gate (the engine uses no shell, but the shipped machine-watch and incident-response templates use it to run a shell line read from a fixed-name handoff file under $HERMES_HOME, and release-lifecycle one read from a per-run handoff file in the run dir); the runner makes itself the subreaper of its children and SIGTERM/SIGKILLs any process a node leaves running (its own descendants plus pids registered in the run's .proctree_sidecar.jsonl) when the node finishes, retries or the run stops; run and amend send a one-token ping through Hermes' configured providers to check pinned model routes; at gate.held/run.done/run.failed the runner reads the API ser
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-workflows
Said no? Turn it on later:
hermes plugins enable hermes-workflows
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Profile Switcher
Community
The Alt+Tab gesture for Hermes profiles. Hold Ctrl+Alt and tap Tab to cycle through your profiles, release to land on the highlighted one — the same hold-tap-release rhythm as the OS app switcher.
The Alt+Tab gesture for Hermes profiles. Hold Ctrl+Alt and tap Tab to cycle through your profiles, release to land on the highlighted one — the same hold-tap-release rhythm as the OS app switcher. (Alt+Tab, Win+Tab and Cmd+Tab are owned by the window manager and cannot be bound by any application, so the gesture lives on ctrl+alt+tab, unclaimed by the OS and by Hermes core.) Each row shows the profile's model and most recent conversation; a working profile shows a spinner. Also opens with a single contributed keybind (Cmd+Alt+P / Ctrl+Alt+P, rebindable in the app's own keybind panel), a status-bar chip, and a palette command. The switch goes through the Desktop's own profile path, so the target profile's backend is activated and its chrome is scoped onto it. Desktop-only (desktop/plugin.js inside the plugin SDK surface); no agent tools, hooks, middleware, env vars, network calls, or stored credentials.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install profile-switcher
Said no? Turn it on later:
hermes plugins enable profile-switcher
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Official Hermes Agent integration for Frihet — discoverability, setup, diagnostics, and operating guidance for the Frihet MCP. Zero duplicated tools; the canonical Frihet MCP surface stays in @frihet/mcp-server and the remote endpoint https://mcp.frihet.io/mcp.
Good to know before installing
/frihet setup and /frihet doctor send an unauthenticated MCP initialize to mcp.frihet.io (or FRIHET_MCP_URL); /frihet doctor also makes one read-only list_invoices call through Hermes's MCP client once you grant plugins.entries.frihet.mcp_allowlist; reads ~/.hermes/config.yaml only to check that an mcp_servers.frihet block exists; the pre_tool_call hook prompts before Frihet MCP calls it classifies as irreversible or unknown, but reads and draft-first creates pass without a prompt unless the server sets trust: untrusted.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install frihet
Said no? Turn it on later:
hermes plugins enable frihet
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Interim Ledger
Community
Local ledger of the messages models write in the middle of a turn, before their final answer (the text that comes with a tool call, which on chat platforms can arrive as messages of their own): /interim-log shows how…
Local ledger of the messages models write in the middle of a turn, before their final answer (the text that comes with a tool call, which on chat platforms can arrive as messages of their own): /interim-log shows how many each model wrote, in how many turns, how many per such turn, their median length and how long ago the last one was, per model, provider, surface or day, for the last 24 hours, any number of hours or days, the latest session or everything recorded; /interim-log recent lists the newest messages (ten, or up to 100 with /interim-log recent 50). Counted even where display.interim_assistant_messages hides them.
Good to know before installing
Writes message metadata (model, provider, surface, step of the turn, length in characters, 12-digit hashes of the session and turn ids; never the message text) to plugin-data/interim-ledger/interim.jsonl, trimmed to 5,000 rows past 2 MB; observer only, cannot delay, change or hide a message; no network
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install interim-ledger
Said no? Turn it on later:
hermes plugins enable interim-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Loaded Skills Indicator
Community
Status-bar chip, popover and dockable pane showing which skills are read into the active Hermes Desktop conversation's context: full bodies bold with an accent dot, compression-pruned ones ghosted, never-loaded ones…
Status-bar chip, popover and dockable pane showing which skills are read into the active Hermes Desktop conversation's context: full bodies bold with an accent dot, compression-pruned ones ghosted, never-loaded ones not listed. A second pane view lists the whole skill library grouped by category with descriptions and a loaded marker, and clicking a skill drops /<skill> into the composer for you to send (it never submits). A small local backend reads the profile's state.db read-only to tell a live skill body from a [SKILL_PRUNED] marker, and reads SKILL.md frontmatter for the descriptions. No network calls, no credentials, no telemetry, no writes.
Good to know before installing
The local backend opens state.db read-only for the requested session in this profile, the default root and, as a fallback, every other profile's state.db, and returns only skill names and load state; it reads SKILL.md frontmatter under the Hermes skill directories and makes no network calls or writes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install loaded-skills-indicator
Said no? Turn it on later:
hermes plugins enable loaded-skills-indicator
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Wait Ledger
Community
Local ledger of the times Hermes stopped to wait for you (approval prompts, clarify questions, password prompts): /waits shows how many waits there were, how many were answered or left unanswered, and how long Hermes…
Local ledger of the times Hermes stopped to wait for you (approval prompts, clarify questions, password prompts): /waits shows how many waits there were, how many were answered or left unanswered, and how long Hermes stood still in total, typically and at most, per kind of prompt, per platform or per day, for the last 24 hours, any number of hours or days, the latest session or everything recorded; /waits recent lists the newest waits (ten, or up to 100 with /waits recent 50).
Good to know before installing
Writes wait metadata (session id, platform, kind of prompt, how it ended, wait time; no prompt text, answer or session key) to plugin-data/wait-ledger/waits.jsonl, trimmed to 5,000 rows past 2 MB; observer only, cannot answer, delay or change a prompt; no network
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install wait-ledger
Said no? Turn it on later:
hermes plugins enable wait-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Strip unwanted Chinese (CJK) and Cyrillic characters from LLM output. Korean Hangul and Japanese Kana are preserved.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install cjk_sanitizer
Said no? Turn it on later:
hermes plugins enable cjk_sanitizer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Choose a separate scorer to set the reasoning effort of each Hermes request.
Good to know before installing
Off by default; when a mode is enabled (or on an explicit `/hae probe`), sends the latest user message (or the parent-written subagent goal), truncated to 4000 characters, plus any configured guidance to the scorer you select (TypeSafe Jev at api.typesafe.ai by default, or OpenAI Decisions, OpenRouter, Cloudflare Workers AI, Nace at console.nace.ai, or a custom URL) using that service's key; opt-in settings can also send the target model identity, up to 6 earlier user/assistant text messages (1200 characters each) and a separate continuation question to the same scorer; in Hermes Desktop it also sets the focused chat's session reasoning selector through the gateway `config.set` API after each applied change, and it keeps a prompt-free effort-change history (64 changes × 64 conversations), per-conversation mode overrides (at most 256 conversations) and per-route cache verdicts built from provider token counters (at most 128 routes) in its plugin data directory.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-adaptive-effort
Said no? Turn it on later:
hermes plugins enable hermes-adaptive-effort
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Pin or unpin sessions from their row with supported desktop SDK actions.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install drag-to-pin-session
Said no? Turn it on later:
hermes plugins enable drag-to-pin-session
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
GitHub PRs and issues as a right workspace pane in Hermes Desktop, via the connected gh CLI.
Good to know before installing
Shells out to your logged-in gh CLI; the in-pane update pill only runs `hermes plugins update githermes` (no fetch-and-replace) and currently compares against upstream main rather than the pinned sha.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install githermes
Said no? Turn it on later:
hermes plugins enable githermes
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jwt Ref
Community
@jwt: context references that decode a JSON Web Token for the model: @jwt:<token> (or a quoted "Bearer <token>") attaches the header with the algorithm in words, every claim as JSON, the exp, nbf, iat and auth_time…
@jwt: context references that decode a JSON Web Token for the model: @jwt:<token> (or a quoted "Bearer <token>") attaches the header with the algorithm in words, every claim as JSON, the exp, nbf, iat and auth_time claims in UTC with how long ago or ahead they are, whether the token has expired and its lifetime, and notes on alg none, a missing or empty signature, a header that names its own key (jku, x5u, jwk), crit and duplicate names; encrypted tokens (JWE) show their header only; the TUI and Desktop composer preview a token as you type it. The signature is never verified.
Good to know before installing
Reads only the text of the reference itself and the system clock, using Python's base64, json and datetime; no network (no key sets fetched), no files read or written, no subprocess, no credentials read; the plugin keeps no copy of the token, but the @jwt: reference and the decoded header and claims become part of the message sent to your model provider and saved in the session history, so decode only tokens you are willing to share with it; register() only adds the @jwt: reference provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jwt-ref
Said no? Turn it on later:
hermes plugins enable jwt-ref
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rescues oversized MCP and web tool results before they flood context.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install toolaria
Said no? Turn it on later:
hermes plugins enable toolaria
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Aichipmunk
Community
Pairs this machine's Hermes bots with the AI Chipmunk mobile app from inside Hermes Desktop — pick a bot, get the reachable host, profile and API key as a scannable code.
Pairs this machine's Hermes bots with the AI Chipmunk mobile app from inside Hermes Desktop — pick a bot, get the reachable host, profile and API key as a scannable code. Registers a `hermes aichipmunk` CLI command, a desktop page and a dashboard API; no tools or hooks.
Good to know before installing
On an explicit confirmed "Switch to Tailscale" it adds a persistent tailscale serve handler putting the API server's own port (plain HTTP inside the tailnet, API_SERVER_KEY auth) onto the tailnet; on a machine with no Tailscale CLI it instead runs hermes config set platforms.api_server.host <tailnet IP> on the owning profile and restarts that gateway; reads API_SERVER_KEY from every profile's .env on this machine on each status poll (masked in lists, the full key only in the pairing link and QR returned to an authenticated dashboard caller, which may be the phone over a published dashboard); shells out to the tailscale and hermes CLIs and probes only this machine's own /health; no third-party network calls.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install aichipmunk
Said no? Turn it on later:
hermes plugins enable aichipmunk
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Session Lens
Community
Read-only observability for Hermes Desktop: what each session cost and why, its full trace, recurring tool failures, every profile at a glance, provider quotas and service balances, model comparison with cheaper-route…
Read-only observability for Hermes Desktop: what each session cost and why, its full trace, recurring tool failures, every profile at a glance, provider quotas and service balances, model comparison with cheaper-route evidence, and instruction-rule grading.
Good to know before installing
Reads every profile's state.db read-only plus agent logs, cron/gateway state, config.yaml and .env (key names, and the values of keys an adapter uses); with the credentials Hermes' own resolvers return, calls only each configured vendor's usage or balance endpoint (hosts listed in the README), sending Grok CLI client headers to cli-chat-proxy.grok.com and a Claude Code user-agent to api.anthropic.com; Hermes' resolvers may renew Hermes' Codex, Nous and xAI logins and, when Hermes holds no other Anthropic credential, Claude Code's login; runs the local monid CLI when installed; an Anthropic one-token Claude Haiku probe is off by default; writes no Hermes state itself and sends no session content anywhere.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install session-lens
Said no? Turn it on later:
hermes plugins enable session-lens
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Ja Writing Guard
Community
Rule-based proofreading for Japanese business text: finds and fixes AI-style phrasing (stock phrases, monotonous sentence endings, overused symbols and Markdown, English-calque grammar) with line, column and a fix hint.
Rule-based proofreading for Japanese business text: finds and fixes AI-style phrasing (stock phrases, monotonous sentence endings, overused symbols and Markdown, English-calque grammar) with line, column and a fix hint. It checks wording, not authorship, and rarely flags plain model output. A transform_llm_output hook checks every final Japanese answer and only reports by default; opt-in enforce mode rewrites flagged answers with the user's own model and delivers the rewrite only if numbers, names, URLs, code and negation survive and the score drops under the threshold.
Good to know before installing
No network calls of its own; enforce mode sends each flagged answer to the user's configured model (one extra call, a second only when the first rewrite fails the checks or stays over the threshold; extra cost and up to 25 s delay); a read-only post_tool_call hook notes turns with MEDIA: lines so attachments from other plugins are kept; reports stay in process memory on local surfaces only. Disclosure — no network calls of its own; mode report (default) only logs scores; opt-in mode enforce sends each flagged final answer (with finding excerpts) to the user's configured model via ctx.llm (1–3 calls, up to 25 s delay) and replaces the delivered and stored answer when its preservation checks pass, which do not prove meaning is unchanged; reads plugins.hook_callback_timeout via a private read-only Hermes helper; eval/ dev scripts ship in the tree but are never loaded.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install ja-writing-guard
Said no? Turn it on later:
hermes plugins enable ja-writing-guard
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Keep the desktop composer solid while scrolling so conversation text stays readable.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install opaque-composer
Said no? Turn it on later:
hermes plugins enable opaque-composer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Tracekit
Community
Tracekit's signer decides every tool call before it runs (deny blocks, ask waits for a person) and signs each call and its outcome into a run you can verify offline.
Tracekit's signer decides every tool call before it runs (deny blocks, ask waits for a person) and signs each call and its outcome into a run you can verify offline.
Good to know before installing
Every tool call's name and arguments, plus its result (in full for tools Tracekit's policy marks untrusted, otherwise a SHA-256 digest), go to a Tracekit signer: by default a same-user dev signer (`python -m tracekit signer serve --dev`) that the plugin starts on first use as a detached background process, which keeps running after Hermes exits until 15 minutes idle and stores signed runs plus each call's redacted arguments and results (encrypted, kept 7 days) under your user's data directory (~/.local/share/tracekit on Linux), or a remote signer when you set TRACEKIT_SIGNER to an https:// URL. The plugin fails closed: when tracekit-ai can't load or the signer refuses or can't be reached, tool calls are blocked (including every tool an execute_code script calls), and an `ask` decision holds the call until someone approves it in Tracekit or Hermes's hook timeout runs out.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TRACEKIT_SIGNER_TOKEN), then asks whether to turn it on.
hermes plugins install tracekit
Said no? Turn it on later:
hermes plugins enable tracekit
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Reaction Ledger
Community
Local ledger of the emoji reactions people leave on messages in your Telegram chats with Hermes: /reaction-log counts each message once, with the reactions it has now, and shows per emoji how many messages carry it, in…
Local ledger of the emoji reactions people leave on messages in your Telegram chats with Hermes: /reaction-log counts each message once, with the reactions it has now, and shows per emoji how many messages carry it, in how many chats and how long ago it was last set, or per day with the day's most used emoji, for the last 24 hours, any number of hours or days, or everything recorded; /reaction-log recent lists the newest reaction changes (ten, or up to 100 with /reaction-log recent 50). Only reactions the gateway authorizes reach it.
Good to know before installing
Subscribes to gateway_platform_event as an observer only and ignores every event but a reaction change; writes the emoji a message has after the change, a count of custom emoji and 12-digit hashes of the chat and message ids (never a user id, user name or message text) to plugin-data/reaction-ledger/reactions.jsonl, trimmed to 5,000 rows past 2 MB; no network
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install reaction-ledger
Said no? Turn it on later:
hermes plugins enable reaction-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Reasserts pinned standing instructions after context compaction.
Good to know before installing
Scope=global pins apply to every session sharing the same HERMES_HOME; memlock_setup.py edits config.yaml and .claude/settings.json (with backups) only when you run it.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install memlock
Said no? Turn it on later:
hermes plugins enable memlock
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Pcs Security Tls Posture
Community
Read-only audit of local TLS posture — certificate validity, key strength, deprecated protocols, weak cipher suites, and the certificate each server's configuration points at.
Read-only audit of local TLS posture — certificate validity, key strength, deprecated protocols, weak cipher suites, and the certificate each server's configuration points at.
Good to know before installing
Reads a fixed list of system certificate and nginx/Apache config paths under / (or a caller-supplied prefix); makes no network connections and runs no subprocesses. If the sibling plugin pcs-security-core is installed, its copy of the shared contract is loaded in preference to the bundled one.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install pcs-security-tls-posture
Said no? Turn it on later:
hermes plugins enable pcs-security-tls-posture
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
A persistent second model reviews every agent turn. After each turn the plugin hands the transcript to the model you nominate as advisor and delivers its findings as advice in the same session: [NIT], [CONCERN] or [BLOCKER] notes, held back until a later review raises the same point again, so the primary agent is not interrupted by a one-off remark. It reviews, it does not act: the advisor never edits files, calls tools or changes session state, and only reads the turn transcript. This is the backend counterpart of MoA — one extra model, not a committee: the primary agent does the work and the advisor checks it. Port of pi-omplike-advisor (Petr Baudis / pasky), itself rooted in oh-my-pi (Can Boluk). Runs inside the plugin host with no dependencies beyond Hermes itself.
Good to know before installing
Once the plugin is enabled, every completed turn costs one extra completion through Hermes's ctx.llm to the advisor model (the primary agent's provider unless you allow a provider/model override under plugins.entries.advisor.llm), carrying the user message, the final reply, every tool call and tool result in the session so far (each clipped to 500 characters) and the contents of a WATCHDOG.md in Hermes's working directory if one exists; deliverable advice is queued into the CLI session as a user-role message, which starts or interrupts an agent turn; state is kept under $HERMES_HOME/advisor/ and reviews run on one background thread; no other network, files or credentials.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install advisor
Said no? Turn it on later:
hermes plugins enable advisor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jp Charts
Community
Bar, line, stacked and 100% band charts as phone-sized PNGs for chat replies and reports, with Japanese text, 万/億 units and a required unit and source line.
Bar, line, stacked and 100% band charts as phone-sized PNGs for chat replies and reports, with Japanese text, 万/億 units and a required unit and source line. Every bar, point, label and tick is read back from the finished figure and compared with the parsed data before the image is returned.
Good to know before installing
No network calls at run time; reads a local .csv/.tsv/.txt/.json only when given its path (never hidden files or the Hermes home); writes PNGs to the Hermes image cache; a transform_llm_output hook adds a forgotten MEDIA line to replies on chat platforms and cron deliveries (setting auto_attach, on by default).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jp-charts
Said no? Turn it on later:
hermes plugins enable jp-charts
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rewrite a composer draft outside the chat and put the finished prompt back in the field. A prompt library keeps saved prompts, and a one-call model pick does not change the session.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install prompt-enhance
Said no? Turn it on later:
hermes plugins enable prompt-enhance
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Kanban Gantt
Community
One board, three views, and each answers a different question: List says what the work is, Timeline says when it happened, Graph says what hangs off what.
One board, three views, and each answers a different question: List says what the work is, Timeline says when it happened, Graph says what hangs off what. The Graph view draws a card per task and an arrow per dependency, laid out top-down by longest path (or left to right, by status, or as a compact grid), with a transitive reduction that counts the arrows it implies instead of hiding them, links you draw, move and delete where they are drawn, and a click that lights the whole upstream and downstream lineage of a task. The Timeline renders any board as real work timestamps (created/started/review/done), with a collapsible tree column (boxed fold controls, tree connectors, per-board fold state, multi-parent links kept visible), live-activity arcs, filters, bulk actions, and a period selector from 6 hours to 7 days. The List view trades the bars for a dense table — task, assignee, status, last activity. Quick scopes (Running, Blocked, Open, All) narrow the board in all three views alike, and a lineage switch widens any of them to what leads to the selection and what follows it. Tasks are created from the page (project, workspace, skills, model override, goal mode), re-parented by drag & drop or from the drawer, and moved between boards with their children; any task with files carries a paperclip, its files listed on demand — the board payload carries only a count — and previewed by type (markdown, plain text, image, PDF, HTML in a sandboxed frame) or downloaded. Zero API keys, zero model tokens; live updates follow the plugin's /events websocket, which a gateway turns off with KANBAN_GANTT_WS=0 (the page then polls every 60 s and shows a Refresh button).
Good to know before installing
Desktop page plus dashboard routes that read and write the local kanban boards (create tasks with workspace path, skills, model override and goal mode; re-parent; move a task, with its children, to another board — the copy is verified there before the source rows and their links are deleted; edit status, assignee and description; bulk archive and delete; read task attachment files from the board's own attachments folder for preview and download); live updates over a dashboard-authenticated /events websocket, off with KANBAN_GANTT_WS=0; no third-party network.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install kanban-gantt
Said no? Turn it on later:
hermes plugins enable kanban-gantt
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Stop Ledger
Community
Local ledger of the turns you stopped while Hermes was still working (/stop, or /new and /reset during a running turn, on messaging platforms, the TUI and the desktop app): /stop-log shows how many running turns were…
Local ledger of the turns you stopped while Hermes was still working (/stop, or /new and /reset during a running turn, on messaging platforms, the TUI and the desktop app): /stop-log shows how many running turns were stopped, how many by /stop and by /new, in how many sessions and how long ago the last one was, per platform or per day, for the last 24 hours, any number of hours or days, the latest session or everything recorded; /stop-log recent lists the newest stops (ten, or up to 100 with /stop-log recent 50).
Good to know before installing
Writes stop metadata (platform, /stop or /new, Hermes's label for the stop, a 12-digit hash of the session key; no session key or chat content) to plugin-data/stop-ledger/stops.jsonl, trimmed to 5,000 rows past 2 MB; observer only, cannot delay or undo a stop; no network
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install stop-ledger
Said no? Turn it on later:
hermes plugins enable stop-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Biomimetic Brain
Community
Meters and a gate for a long-running agent — 25 subsystem state files (energy, fatigue, circadian phase, motivation, novelty, attention, conflict, values, open questions), one folded brain-state.json the rest of the…
Meters and a gate for a long-running agent — 25 subsystem state files (energy, fatigue, circadian phase, motivation, novelty, attention, conflict, values, open questions), one folded brain-state.json the rest of the agent reads, four maintenance passes that keep it honest, and a read-only PROCEED / CAUTION / VETO decision gate whose refusals name the numbers behind them. Provides the mind-kit skill, which seeds the files, produces the aggregate, schedules the passes and teaches the gate.
Good to know before installing
Portable Agent Plugins v1 package; it registers no hooks, no tools and no middleware, makes no network calls, and reads and writes state files only under the agent directory you choose, where a subsystem that has stopped updating reports stale instead of asserting an old number. No dependencies beyond the Python standard library (two shell scripts for the scheduled passes). Its scripts, when the agent or operator runs them, read and write JSON state under the directory chosen with MIND_AGENT_DIR (default an agent/ folder inside the plugin's own install dir), read HERMES_HOME/cron/executions.db for cron counts, and execute scripts/batch-maintenance.sh or scripts/verify-invariants.py from that agent directory if present; no network egress and no LLM calls.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install biomimetic-brain
Said no? Turn it on later:
hermes plugins enable biomimetic-brain
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Add custom dangerous command patterns to Hermes's built-in approval system. Users define regex patterns in YAML; a pre_tool_call hook sends block patterns to Hermes's human approval gate and blocks deny patterns immediately. Modifies no Hermes internals.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install custom-dangerous-patterns
Said no? Turn it on later:
hermes plugins enable custom-dangerous-patterns
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Signed messaging with paired Hermes and OpenClaw agents, with receiver-controlled live and opt-in non-YOLO headless delivery.
Good to know before installing
Runs a loopback-only Node receiver when listen_port is set (you expose only its HTTPS receive route); messages from paired peers become agent turns in the sessions you approve and may cause tool use, and opt-in background delivery runs them in non-YOLO sessions only; smart scanning sends message text through your configured provider; ClawReef Public Groups use a plaintext relay that ClawReef can read; identity keys, peer credentials, holds and receipts live in the profile's plugin-data/antenna (0700/0600) and backups contain credentials; policy and storage commands rewrite config.yaml (comments and formatting are lost).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install antenna
Said no? Turn it on later:
hermes plugins enable antenna
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jp Chatwork
Community
Talk to Hermes from Chatwork rooms, built on the Chatwork API: put Hermes in a Chatwork room and ask it with [To:] or a reply, like a colleague; the answer comes back as a Chatwork reply.
Talk to Hermes from Chatwork rooms, built on the Chatwork API: put Hermes in a Chatwork room and ask it with [To:] or a reply, like a colleague; the answer comes back as a Chatwork reply. Polls the Chatwork API (no public URL or webhook), never answers a message twice across restarts, and while CHATWORK_ALLOWED_USERS is unset only the token's own account can use Hermes commands beyond /help, /whoami, /new and /reset or answer approval prompts.
Good to know before installing
Talks only to api.chatwork.com with your own API token; polls every 5 s by default while the gateway runs; stores read positions and the ids of its posted messages in <HERMES_HOME>/plugin-data/jp-chatwork/state.json. Disclosure — while CHATWORK_ALLOWED_USERS is unset everyone in the rooms listed in CHATWORK_ROOMS (external guests included) can prompt the agent and use its enabled tools, with Hermes commands and approval answers kept to the token's own account; talks only to api.chatwork.com with your API token, polling every 5 s while the gateway runs; stores read positions and posted message ids in <HERMES_HOME>/plugin-data/jp-chatwork/state.json; logs each asker's name and account id.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs CHATWORK_API_TOKEN, CHATWORK_ROOMS), then asks whether to turn it on.
hermes plugins install jp-chatwork
Said no? Turn it on later:
hermes plugins enable jp-chatwork
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rotate the focused session reasoning effort from the status bar. A dialog sets the levels, colors, and per-level prompt limits.
Good to know before installing
Changes the focused session's reasoning effort through the gateway config.set API (core may fall back to writing the global config.yaml when the session id is stale) and auto-demotes the level after the configured number of prompts.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install reasoning-switch
Said no? Turn it on later:
hermes plugins enable reasoning-switch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Agent Mixer
Community
A mixing desk for how much a coding agent may change: four enforced dials (edits, write-scope globs, per-turn line budget, new-dependency policy) with /mixer, live presets, a Desktop dial panel in the composer, a…
A mixing desk for how much a coding agent may change: four enforced dials (edits, write-scope globs, per-turn line budget, new-dependency policy) with /mixer, live presets, a Desktop dial panel in the composer, a web-dashboard saved-defaults bar and a steering-console page. Also drives Claude Code, Codex and Gemini CLI through the agent-mixer hook command.
Good to know before installing
Enforces edit/scope/line-budget/new-dependency dials in pre_tool_call (blocks, or escalates "ask" to Hermes approval, which /yolo skips) and adds a one-line rules context via pre_llm_call when a dial is off its default; per-session dial state is stored under HERMES_HOME/plugin-data/hermes-agent-mixer/sessions/, and the Desktop panel and dashboard bar write the plugin's own saved defaults into config.yaml (plugins.entries.hermes-agent-mixer.settings); the separately installed agent-mixer CLI keeps its own state in ~/.config/agent-mixer and ~/.local/state/agent-mixer, writes hook entries into ~/.claude/settings.json, ~/.claude/commands/mixer.md, ~/.codex/hooks.json or ~/.gemini/settings.json only when run as `agent-mixer install <harness> --yes`, and `agent-mixer ui` serves a token-guarded console on 127.0.0.1:8377.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-agent-mixer
Said no? Turn it on later:
hermes plugins enable hermes-agent-mixer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Status-bar chip for the focused session per-turn iteration usage (N/60), with a hover tooltip and a click popover of per-request stats.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install iteration-budget-meter
Said no? Turn it on later:
hermes plugins enable iteration-budget-meter
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Inject an implicit time-gap sense only when a gap or a date rollover crosses.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install time-gap
Said no? Turn it on later:
hermes plugins enable time-gap
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Observability + budget guardrails for Hermes Agent — tokens, cost, latency, tool calls per session and cron job. Persists to local SQLite. Exposes /stats and /budget slash commands.
Good to know before installing
Records per-session tokens, cost, latency, tool names and sender/profile ids (no message text) in ~/.hermes/telemetry/telemetry.db; fetches public model pricing from openrouter.ai/api/v1/models on first load and at most once a day; in the default enforce mode first load writes a $5/day, $100/month global budget to telemetry/budget.yaml, and a hard breach blocks every tool call and pauses the over-budget cron job until the window resets (set plugins.entries.hermes-telemetry.settings.mode: observe to record without enforcing); the optional standalone dashboard server binds 127.0.0.1 with no auth.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-telemetry
Said no? Turn it on later:
hermes plugins enable hermes-telemetry
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jp Corporate
Community
Japanese corporate lookup (法人照会): find or verify a company by name or corporate number and read its gBizINFO record (basic info, subsidies, government contracts, awards, certifications, financials, patents, workplace…
Japanese corporate lookup (法人照会): find or verify a company by name or corporate number and read its gBizINFO record (basic info, subsidies, government contracts, awards, certifications, financials, patents, workplace data).
Good to know before installing
Sends the company names, corporate numbers and prefectures you look up to api.info.gbiz.go.jp (METI gBizINFO) with your own GBIZINFO_API_TOKEN in a request header; no other host, nothing written to disk.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs GBIZINFO_API_TOKEN), then asks whether to turn it on.
hermes plugins install jp-corporate
Said no? Turn it on later:
hermes plugins enable jp-corporate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Pushover as an outbound-only gateway platform, plus opt-in agent lifecycle notifications (finished, questions, errors, approvals, kanban blockers, Hermes's sudo password prompt) via Pushover and/or native notify-send, managed with /notifications.
Good to know before installing
Sends HTTPS requests to api.pushover.net only, carrying your Pushover app token, user key and notification text (when lifecycle notifications are enabled, excerpts of agent replies, clarify questions, approval commands, the command waiting on the sudo password prompt (redacted by Hermes; never the password) and kanban block reasons; PUSHOVER_NOTIFY_QUESTION=minimal suppresses all but kanban reasons); send_message can address any Pushover user or group key; runs notify-send (argv, no shell) when native notifications are enabled; writes an unrotated log under $HERMES_HOME/logs and settings.json under $HERMES_HOME/plugin-data, and $HERMES_HOME/.env only from the interactive setup wizard. Outbound-only, no inbound or approval path, no telemetry, no background processes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs PUSHOVER_APP_TOKEN, PUSHOVER_USER_KEY), then asks whether to turn it on.
hermes plugins install pushover-hermes-plugin
Said no? Turn it on later:
hermes plugins enable pushover-hermes-plugin
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Hide and reorder core sidebar navigation rows from a statusbar dialog.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install sidebar-manager
Said no? Turn it on later:
hermes plugins enable sidebar-manager
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Field notes for a Hermes install: search known pitfalls before debugging and record new ones with root cause; register every local core edit as a patch note with a declarative checks file, then verify read-only after each hermes update (OK / MISSING / UPSTREAMED / N/A / UNKNOWN with reason) and list core files changed outside the registry. Ships 42 pitfalls and 10 patch recipes checked against 0.22.0. Optional pinned Telegram dashboard edited in place by an hourly no_agent cron job. Portable Agent Plugins v1 package (plugin.json + skills/); no tools, hooks, middleware or env vars; never edits the core or runs patch scripts.
Good to know before installing
Its scripts only read the Hermes core (pyproject.toml, read-only git status/diff) and never edit it or run patch scripts; the skill does walk the agent through hand-editing core files from its patch recipes and re-running the owner's re-apply scripts, each only after the user says yes. Network: Telegram Bot API only when the dashboard is enabled (reuses the agent's TELEGRAM_BOT_TOKEN from env or ~/.hermes/.env), and the public GitHub API without credentials (latest release plus compare against the installed commit SHA, cached 12 h; upstream.check=false disables). Writes: the notes store (~/.hermes/field-notes), ~/.hermes/field-notes.json, state and lock files in ~/.hermes/cache, a copy of the cron script in ~/.hermes/scripts when install.py runs (the skill runs it on first use), and one hourly no_agent cron job only when the user runs install_cron.py (it reads ~/.hermes/installs/*/facts.json to find Hermes' own Python and re-runs itself with it). Without a dashboard chat, install_cron.py sends the job's alerts to the Telegram home channel when TELEGRAM_HOME_CHANNEL is set (read from env or ~/.hermes/.env), else local.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-field-notes
Said no? Turn it on later:
hermes plugins enable hermes-field-notes
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Nine-Balance Widget
Community
Nine AI provider balances in one desktop widget — live balance/usage and quota reads, token-based spend estimates with off-peak price windows, drop alerts, and an anime mascot per provider with rotating flavour lines…
Nine AI provider balances in one desktop widget — live balance/usage and quota reads, token-based spend estimates with off-peak price windows, drop alerts, and an anime mascot per provider with rotating flavour lines (DeepSeek, MiniMax, GLM, Kimi, MiMo, ChatGPT, Claude, Gemini, Grok). Fully English UI. Desktop-only: desktop/plugin.js inside the plugin SDK surface; no agent tools, hooks, middleware or env vars. Keys are entered in the widget's settings page and stored in plugin-scoped storage; the widget only calls those providers' official APIs. Ported from MeteorNOX/DeepSeek-Balance-Whale-Widget (MIT).
Good to know before installing
API keys you enter in the widget's settings are stored in plaintext in Desktop plugin storage (not Hermes' secret store); while the widget is on, the Desktop renderer polls the balance/usage endpoint of the provider matching your current model every 60 s with that provider's key (api.deepseek.com, api.minimaxi.com / api.minimax.io, open.bigmodel.cn / api.z.ai, api.moonshot.cn / api.moonshot.ai, api.kimi.com, token-plan-cn.xiaomimimo.com, api.openai.com, api.anthropic.com, generativelanguage.googleapis.com with the key in the URL, api.x.ai); each key goes only to its own provider; draws a floating widget over the app window.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install nine-balance-widget
Said no? Turn it on later:
hermes plugins enable nine-balance-widget
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Context optimization and execution alignment for agent sessions.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jekyll-hyde
Said no? Turn it on later:
hermes plugins enable jekyll-hyde
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Pass Secrets
Community
pass (password-store) secret source: resolves secrets from a local, GPG-encrypted, git-tracked password store into environment variables at startup, as a first-class SecretSource beside the built-in Bitwarden and…
pass (password-store) secret source: resolves secrets from a local, GPG-encrypted, git-tracked password store into environment variables at startup, as a first-class SecretSource beside the built-in Bitwarden and 1Password sources. Stdlib-only (subprocess + pathlib), no Python deps, no network — ever. Config: secrets.pass.{enabled,store_path,subdirs,override_existing,timeout_seconds}.
Good to know before installing
When enabled, shells out to the local pass binary (10 s per entry) for every .gpg entry under the configured store subdirs and injects each as an env var that by default overrides .env and shell values; when enabled, also adds a ~900-char system-prompt note about secret resolution; no network.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install pass-secrets
Said no? Turn it on later:
hermes plugins enable pass-secrets
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Model Drift Watch
Community
Scheduled check that the model you use in Hermes has not quietly got worse: 34 fixed, exactly graded questions (reasoning, instruction following, Japanese, plus your own) run through Hermes cron, each run tested…
Scheduled check that the model you use in Hermes has not quietly got worse: 34 fixed, exactly graded questions (reasoning, instruction following, Japanese, plus your own) run through Hermes cron, each run tested against the same model's own baseline with an exact per-question test and a same-day confirmation run, and a message only for a confirmed drop, a changed served model or a failed measurement. Not yet tried against a real LLM API (checked with a local mock model and real Hermes cron).
Good to know before installing
Each check calls your own model through ctx.llm on your bill, capped per check by the plugin (default 120,000 tokens / $0.50, no daily cap; the agent can start checks itself via the model_drift tool, and the scheduled agent turn is extra); price lookup goes through Hermes's pricing code (may fetch OpenRouter/models.dev prices); 10 optional code questions, off by default, run model-written Python in a limited child process (not a hostile-code sandbox) including in unattended cron runs when enabled; `schedule` creates one Hermes cron job that survives plugin removal (run `unschedule` first); writes run history to plugin-data/model-drift-watch; no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install model-drift-watch
Said no? Turn it on later:
hermes plugins enable model-drift-watch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Cabinet
Community
Tell Cabinet the job you need done and it answers with the smallest setup that does it (one chat, a skill, a routine, a Bot or a crew), shows which answers led there, then helps you act: add one of botcabinet.com's 20…
Tell Cabinet the job you need done and it answers with the smallest setup that does it (one chat, a skill, a routine, a Bot or a crew), shows which answers led there, then helps you act: add one of botcabinet.com's 20 Bots (each with its test record shown) as a Hermes profile, plan a new Bot line by line, or set up a crew of Bots in a handoff order with blocked Kanban cards. Everything Cabinet makes can be removed again from My Bots, and a Bot that Hermes's own Bots catalog carries is handed over to it, never duplicated.
Good to know before installing
Fetches its Bot catalog from https://botcabinet.com/catalog.json on open and Refresh (data only, 2 MB cap) and, after you confirm, creates Hermes profiles whose instructions (SOUL.md) come from that catalog; can create and archive Kanban cards for a crew; deletes only profiles it created that you have not changed; reads ~/.hermes/profiles and hashes profile files to track what it made; calls private Hermes modules (hermes_cli.profiles, kanban_db), so a Hermes update can break it; no shell, credentials, telemetry or self-updates.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install bot-cabinet-v2
Said no? Turn it on later:
hermes plugins enable bot-cabinet-v2
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Your workspace, shaped by your agent: a bundled browser desktop powered by Hermes. Describe the workflow you need; the agent can rearrange windows and panes, customize appearance, build versioned sandboxed web apps, and refine your workspace with scoped control, previews and checkpoints. Illustrated examples show a project-specific COCS 3D asset viewer and OmniVoice experiment bench; these example apps and their backends are not bundled. Includes permission-controlled desktop agent-reply notifications (generic alerts while Orbit remains open; browser/OS restrictions apply) and 100,000-character chat messages, guidance and drafts. Includes Devplan Studio for guided interviews, specifications, phased devplans and circular-development handoff exports. Optional conversational interviews require explicit service setup and a working Hermes provider login, and send project context to that provider. Includes 14 distinctive interface presets including Nous Atelier, with local wallpapers, themed icons and taskbar treatments. Agent chats include inline expandable tool activity, running/completed/failed summaries, an activity strip, a workspace agent overview and responsive toolbar controls. Missing tool-call IDs are explicitly uncorrelated. Embedded apps retain their own styling. Includes a reviewed GitHub app catalog with immutable source pins and a portable Live Telemetry package. Catalog sync (operator-run scripts/orbit_catalog.py, never triggered by the Hermes tool or at register) reads the entry list from the upstream repo's main branch at sync time and downloads third-party static app bundles at their per-entry commit pins; installed UI runs in a sandboxed iframe and never executes backend code. Optional telemetry backend staging downloads pinned Python; execution requires explicit host-code trust and separate private authenticated HTTPS setup. Backend code runs with owner privileges, not a sandbox.
Good to know before installing
Adapter talks only to the configured local Orbit server (loopback, Bearer capability from runtime_dir); mutations off by default. Optional orbit.py setup runs npm ci / node. Bundled VNC/Xpra launchers use the Orbit page's hostname and scheme; optional Linux apps require separate provisioning. Optional api.typesafe.ai requests require explicit consent and a user-supplied key. The 0.2.7 web app's opt-in Show tools panel displays tool call arguments and results for the current Hermes conversation, fetched from the local Orbit server and local Hermes session API and kept in the browser only. The Nous Atelier theme contains Nous Research logo artwork and is unofficial; Orbit is not affiliated with Nous Research.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install orbit-desktop
Said no? Turn it on later:
hermes plugins enable orbit-desktop
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Review boards for UI mockups. The agent builds a board from a decisions.json file and your prototype pages; you open it on desktop or phone, mark each decision approve, change or skip, pin comments on the mocks and press Send, and your agent wakes up with the feedback as a markdown digest. Four mock_review tools, the `hermes mockreview` CLI and slash command, and a bundled usage skill. Boards are served from your computer (loopback by default, or your tailnet) or published on here.now.
Good to know before installing
When autostart is on (off until `hermes mockreview setup`), a board web server (127.0.0.1:8790 by default) and one worker thread run inside the gateway process; setting host to 0.0.0.0 exposes every review to your network with no login. Outbound calls: a signed POST to the local Hermes webhook (localhost:8644) on Send, and, only for reviews hosted on here.now, https://here.now/api/v1 with your HERENOW_API_KEY. Secrets are read through Hermes's secret scope only. Runs `bash publish.sh` from the official here-now skill (key in the child environment), `tailscale status --json` and `tailscale serve status --json` (read only; on macOS the Tailscale app's own binary if the symlink crashes) for tailnet hosting, and from `setup` the hermes subcommands `--version`, `gateway status`, `config get/set/unset`, `webhook subscribe`, `webhook remove` (only for a stale self-delivering route, after you confirm) and `plugins validate`. Reviews are stored under $HERMES_HOME/workspace/mock-reviews. No telemetry, no update check, no Python dependencies.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs HERENOW_API_KEY, MOCKREVIEW_WEBHOOK_SECRET), then asks whether to turn it on.
hermes plugins install mock-review
Said no? Turn it on later:
hermes plugins enable mock-review
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Model-aware prompt rewriting with quality scoring, analytics, and coaching.
Good to know before installing
The default auto mode rewrites every user message of 5+ words through your configured model (one extra LLM call per turn) before the agent sees it.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install prompt-optimizer
Said no? Turn it on later:
hermes plugins enable prompt-optimizer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Evidence-based, session-safe skill routing with auditable decisions and opt-in learning
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install skill-router
Said no? Turn it on later:
hermes plugins enable skill-router
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only status and peer list for a WireGuard server running on the same Windows machine as Hermes. Two tools: vpn_status (service state, tunnel address and port, server public key, per-peer handshake and transfer) and vpn_peers (the peer list only). The plugin runs only wg.exe show, sc.exe query, and one PowerShell adapter lookup; it never changes the tunnel and never reads the tunnel configuration file or any private key material. Windows only (WireGuard for Windows).
Good to know before installing
Runs local wg.exe show, sc.exe query and one PowerShell Get-NetIPAddress lookup (read-only, never touches the tunnel config or private key); tool results put peer public keys, allowed IPs and peer endpoint IP addresses into the conversation sent to your model provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install wireguard
Said no? Turn it on later:
hermes plugins enable wireguard
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Reading Buddy
Community
Local-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in…
Local-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in fictional demo mode for previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only after user confirmation.
Good to know before installing
Live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent's WeRead agent gateway) and nothing else; the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine's npm dependencies resolve as caret ranges at first launch.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install reading-buddy
Said no? Turn it on later:
hermes plugins enable reading-buddy
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Custodian
Community
Autonomous operations monitor for a Hermes install: scans gateway logs, cron jobs, skill journals and agent data directories, classifies findings against a 27-fingerprint registry, auto-repairs Tier 1 problems…
Autonomous operations monitor for a Hermes install: scans gateway logs, cron jobs, skill journals and agent data directories, classifies findings against a 27-fingerprint registry, auto-repairs Tier 1 problems, escalates the rest, and keeps an append-only issue ledger. Ships /custodian (status, scan, issues, repair, verify, schedule, confidence, init, escalation-runner), four scan/health tools and a grid dashboard.
Good to know before installing
Reads gateway logs, cron job state and per-skill journal files under HERMES_HOME to build its findings, and writes repair actions and an issues ledger back there; it performs no network I/O and holds no credentials. Disclosure — /custodian init registers 3 recurring agent cron jobs (deep scan 4×/day, cron-health 4×/day, escalation runner every 30 min on weekdays).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install custodian
Said no? Turn it on later:
hermes plugins enable custodian
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
MIT-licensed product judgment across User, Evidence and Business flows, with one portable Agent Plugins v1 skill and all 91 original skill files.
Good to know before installing
Skill instructions run bundled local Python/jsonschema validators and read/write user-controlled local briefs, context packs and review outputs, which can contain personal data. Optional evidence gathering uses explicitly user/host-authorized tools, including external search and connectors; selected claims, queries or evidence go to the chosen services under their policies. There is no publisher-operated receiving endpoint, retention service, telemetry or background process. The bundled jev_gate.py runs offline; connecting a remote decision service needs separate configuration and consent. No MCP server, native plugin entrypoint, registered tools, hooks or middleware.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install ux3-product-design-harness
Said no? Turn it on later:
hermes plugins enable ux3-product-design-harness
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Codex Theme
Community
Codex × ChatGPT inspired theme for the Hermes Desktop chat: dual light/dark palettes that follow the system appearance, graphite-on-paper typography with a 1.625 root line height (measured from ZCode's chat body) and…
Codex × ChatGPT inspired theme for the Hermes Desktop chat: dual light/dark palettes that follow the system appearance, graphite-on-paper typography with a 1.625 root line height (measured from ZCode's chat body) and content-spacing presets (1.5/1.625/1.75), the OpenAI radius scale (inline 4px / rows 8px / controls 10px / cards 12px / composer 20px), hairline borders instead of shadows, and an 880px reading column with 768/880/992px presets. Settings → Plugins → Codex Theme offers appearance mode, reading width, content spacing, text & code font presets, user/assistant chat bubble colors and a bilingual (EN/中文) UI as native controls; the theme paints theme-level tokens only and never writes user-configurable settings such as --chat-text-scale. v1.2.0 is a compliance release — the composer-drag and input-focus-guard features of the v1.1 line were removed because they patched prototypes and captured global events, which catalog rule 8 forbids.
Good to know before installing
No network calls, no telemetry, no credentials; registers only through the Desktop plugin SDK (THEMES_AREA, PALETTE_AREA, ctx.registerSettingsPage, ctx.i18n), switches the active theme to Codex once on first install, and keeps its preferences in plugin-scoped ctx.storage.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install codex-theme
Said no? Turn it on later:
hermes plugins enable codex-theme
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Know the moment OpenAI resets your Codex usage limits. A status-bar chip counts the time since the last reset; when a new one lands, a small card rises out of it (chip-only while you type), with a history page of every reset.
Good to know before installing
Polls the public codex-resets.com API every 60 s and loads fonts from Google Fonts; sends nothing about you or your sessions.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-codex-resets
Said no? Turn it on later:
hermes plugins enable hermes-codex-resets
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Give the agent a clock. Appends the current date and time, plus the real gap since the previous message, to every user turn. Optional spaced-out timestamps on tool results for long runs.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install nowstamp
Said no? Turn it on later:
hermes plugins enable nowstamp
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
TypeSafe's Jev decision model as Hermes' smart-approval reviewer only: it cannot generate text and refuses every other task. Supports TypeSafe direct, OpenRouter, and configurable Jev-compatible HTTPS endpoints with optional endpoint-specific authentication; validates typed answers and endpoint/redirect boundaries, redacts command credentials, and records bounded structured audit logs.
Good to know before installing
Each command routed to smart approval (redacted best-effort) and the operator's smart-policy text leave the machine for the configured third-party endpoint; provider or validation failures fail closed to ESCALATE.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TYPESAFE_API_KEY), then asks whether to turn it on.
hermes plugins install jev-approvals
Said no? Turn it on later:
hermes plugins enable jev-approvals
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Wechat Social Assistant
Community
Local-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no…
Local-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no cloud), and serves contact briefs, follow-up planning, outreach drafts and weekly relationship reports through 32 MCP tools. Engine pinned to the immutable PyPI release wechat-social-assistant==1.5.1 over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs uv on PATH. All data confined to PLUGIN_DATA via WSA_ALLOWED_ROOT + path enforcement. Never reads WeChat databases, never injects into WeChat, never sends messages — outreach is drafts for human review only.
Good to know before installing
Reads WeChat only by screenshotting/OCR-ing and walking the macOS Accessibility tree of the frontmost window (not WeChat's databases or a bot API), compiles bundled Swift helpers with swiftc into ~/Library/Caches/wechat-social-assistant/bin on first use, and needs Screen Recording (optionally Accessibility) permission for the host terminal; no network egress, never sends messages.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install wechat-social-assistant
Said no? Turn it on later:
hermes plugins enable wechat-social-assistant
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Alan's Way Plugin
Community
Idle check-ins from the primary bot of a Hermes gateway on a Linux machine or a macOS guest VM: when the bound Telegram chat has been quiet for two hours, during 08:00-22:00 in the user's timezone, the bot checks in…
Idle check-ins from the primary bot of a Hermes gateway on a Linux machine or a macOS guest VM: when the bound Telegram chat has been quiet for two hours, during 08:00-22:00 in the user's timezone, the bot checks in once (does one safe step and reports it, suggests one, or asks one question), backing off when unanswered. The model tool can only make check-ins quieter; more often, resume and wider hours are operator-only via /proactivity or the CLI. After install, the workspace-setup skill walks the agent through setting up Alan's Workspace (a separate desktop app for the user's computer: macOS or Windows) and Tailscale; desktop input goes only through Hermes's approval-gated computer_use tool.
Good to know before installing
Once the gateway connects Telegram, a background thread checks every 60 seconds. When the bound Telegram DM has been quiet (2 h by default, doubling per unanswered check-in, 08:00-22:00 user time), it injects an internal user-role prompt into that chat (needs plugins.entries.alans-way.allow_gateway_injection, which setup sets), so the bot runs a turn on its own and may take one "safe, reversible" step; the user still approves tool calls in Telegram. Its pre_llm_call/post_llm_call hooks see every session's turns and store the bound chat's activity timestamps in plugin state; optional cross-bot export adds the separate storage disclosed below. On first load it reads $HERMES_HOME/companion/proactivity/proactivity.sqlite3 once, read-only. The plugin itself makes no network calls. The workspace-setup skill has the agent fetch this repo at the catalog pin into ~/alans-way-agents (or reuse a clean clone there) and hand a JSON setup plan to the human in Alan's Workspace. The app runs setup.sh through an external SSH process outside the gateway, checks the exact repoRef and desktopRef and rejects tracked checkout changes; the agent must never run setup or even --verify in its gateway termin
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install alans-way
Said no? Turn it on later:
hermes plugins enable alans-way
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Today (day panel)
Community
A Today page in Hermes Desktop, plus hermes day show and check, built from sections you list in a YAML file: any program that prints JSON (your tracker, a script of yours), your open GitHub pull requests and review…
A Today page in Hermes Desktop, plus hermes day show and check, built from sections you list in a YAML file: any program that prints JSON (your tracker, a script of yours), your open GitHub pull requests and review requests through gh, one read-only tool of an MCP server you already configured, and your AI providers' limit windows from hermes usage. Items can carry a colour, a progress bar and a relative time; the page follows the Desktop theme. Ships a demo page that needs no login or network. Read-only and no model calls; merging a pull request from the page is off by default and needs a preview and a confirmation pinned to the head commit.
Good to know before installing
Runs the programs your sources file names (no shell), plus gh and hermes usage, as your user with your existing logins; calls a configured MCP server's tool only when the server marks it readOnlyHint, in a child process that imports three undocumented Hermes MCP modules (there is no public seam for this yet); reads only the sources file; writes nothing to disk; logs carry section names and exit statuses, not source output. No credentials stored, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install day-panel
Said no? Turn it on later:
hermes plugins enable day-panel
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Shodan tools with complete capability declarations.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SHODAN_API_KEY), then asks whether to turn it on.
hermes plugins install shodan
Said no? Turn it on later:
hermes plugins enable shodan
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.
