909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
880 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Cheatsheet
Community
Title-bar cheatsheet. Describe what you want to do and it points to a real command or a cited passage; live slash commands and plugins, plus cited passages from this install's docs.
Title-bar cheatsheet. Describe what you want to do and it points to a real command or a cited passage; live slash commands and plugins, plus cited passages from this install's docs. No runtime network. No self-update.
Good to know before installing
Reads the Markdown docs shipped with your Hermes install (website/docs next to hermes_cli) through a local dashboard route and lists your commands, plugins and MCP servers via read-only gateway calls; no network at runtime (doc and GitHub links open in your browser only when clicked).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install cheatsheet
Said no? Turn it on later:
hermes plugins enable cheatsheet
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Model Picker
Community
Per-turn cost classifier across three model tiers (Quick / Standard / Expert): rates each user turn from configurable best_for lists and rewrites the outgoing request's model through the llm_request middleware, biased…
Per-turn cost classifier across three model tiers (Quick / Standard / Expert): rates each user turn from configurable best_for lists and rewrites the outgoing request's model through the llm_request middleware, biased to keep the previous tier unless the turn changes shape, with escalate_model for tool failures.
Good to know before installing
The plugin rewrites the model field of every outgoing request for a classified session, picking between three configured model ids that must all belong to the session's own provider (a foreign-provider tier is refused and the session model stands); it makes one bounded auxiliary classifier call through the host's plugin LLM route on each classified turn (up to about 12,000 characters of recent conversation plus the prompt), reading its model ids from config.json next to the plugin, MODEL_PICKER_CONFIG, or MODEL_PICKER_* env, and falls back to the host's primary model; routing decisions, with the first 120 characters of each classified prompt, are logged to $HERMES_HOME/logs/model-picker.log; a classifier-driven tier change can ask the context engine to compact the transcript before the switch, and escalate_model replaces the next request's context with a model-written handoff summary plus the recent tail; that engine registers only when the host config sets context.engine: model-picker.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install model-picker
Said no? Turn it on later:
hermes plugins enable model-picker
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermetic
Community
Status-bar popover for Hermes Desktop with three views: Costs (spend, cache, pricing drift, OpenRouter provider routing), AAI (skill changes, ratings, tests and replays) and HDR (a guard for risky tool calls, hooks…
Status-bar popover for Hermes Desktop with three views: Costs (spend, cache, pricing drift, OpenRouter provider routing), AAI (skill changes, ratings, tests and replays) and HDR (a guard for risky tool calls, hooks, destinations, sensitive paths, what runs on its own).
Good to know before installing
Reads this profile's sessions (and other profiles' when you pick them) to audit tool calls, paths and hosts; can edit and save config.yaml and rewrite skill files when you ship or revert a version; AAI replays and judge runs resend conversation context and tool definitions to OpenRouter with your OpenRouter key and incur cost; HDR lists listening TCP ports via ps/lsof; HDR's guard (off by default) checks each tool call through a pre_tool_call hook and, when you turn it on, holds calls Hermes does not check itself (reading keys and logins, writing startup items or key places Hermes does not list) and asks you in its own card or a macOS notification, blocking after up to 20 seconds without an answer or at once when Hermetic is not open, or blocks them outright; the guard is a best-effort match on the paths a call names, not a sandbox; questions from every profile wait in the default profile's hermetic folder; HDR also lists shell and gateway hooks and flags hook scripts edited after approval, keeping a copy of each script to compare.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermetic
Said no? Turn it on later:
hermes plugins enable hermetic
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Monitor
Community
Kanban worker health in the Desktop status bar — live activity per running card with stall and loop detection (same tool + same arguments repeated), plus a compact per-provider quota readout (the related…
Kanban worker health in the Desktop status bar — live activity per running card with stall and loop detection (same tool + same arguments repeated), plus a compact per-provider quota readout (the related ai-usage-tracker plugin covers quota windows as a standalone feature). Zero model tokens.
Good to know before installing
Opens HERMES_HOME/kanban.db and each profile's state.db read-only for worker activity; for quota chips it reads every Hermes profile's credential pool (each profile's auth.json, with that profile's .env as secret scope) into read-only snapshots plus DEEPSEEK_API_KEY from the environment or .env files, and calls Hermes' own account-usage fetchers for each configured provider (Anthropic, Codex, OpenRouter, DeepSeek at https://api.deepseek.com/user/balance, and any provider plugin exposing fetch_account_usage), sending each entry's own token only to its own provider. The plugin never refreshes or persists a credential; on a Codex HTTP 401, Hermes core may refresh the active profile's matching Codex token via OpenAI's token endpoint and rewrite that profile's auth.json. No other network egress.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-monitor
Said no? Turn it on later:
hermes plugins enable hermes-monitor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Unofficial port of the standard T3 Code dark theme for Hermes Desktop. Palette, T3 composer, sidebar thread cards with project and branch, model labels and confirm dialogs. Scoped to its own theme; other themes are untouched.
Good to know before installing
Unofficial T3 Code lookalike theme; its stylesheet restyles and hides some native Desktop controls, it reads local session metadata (branch, repo, provider) for sidebar cards, and it switches the active theme once on first enable.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install t3-code-theme
Said no? Turn it on later:
hermes plugins enable t3-code-theme
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Saved chat prompts — click a tray item to insert it into the Hermes composer. Review / Plan / Explain defaults, then your own. No API keys.
Good to know before installing
Inserts prompts through Hermes Desktop's internal hermes:composer-insert event (not a public SDK API); stores prompts in $HERMES_HOME/plugin-data/prompt-tray/prompts.json; no network.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install prompt-tray
Said no? Turn it on later:
hermes plugins enable prompt-tray
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Token Cost Meter
Community
Live token usage, model-aware USD cost and prompt-cache savings in the Hermes Desktop status bar, with a persistent per-day ledger that survives restarts.
Live token usage, model-aware USD cost and prompt-cache savings in the Hermes Desktop status bar, with a persistent per-day ledger that survives restarts.
Good to know before installing
Desktop only; no network calls of its own (prices come from the gateway's model.options and a bundled models.dev rate table); stores per-day token totals, per-session counters and last-known rates in its own Desktop plugin storage; costs are list-price estimates, not billing data.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install token-cost-meter
Said no? Turn it on later:
hermes plugins enable token-cost-meter
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
past.dev memory provider: recall before each turn from source-traced memory of past conversations, with sessions sent to past.dev when they end. Maintained by past.dev.
Good to know before installing
The user's message (as the recall query) and each session's user and assistant text, with common secret shapes redacted, are sent to the past.dev API (api.past.dev by default, or the address you configure) under your past project key, with a past-hermes/<version> User-Agent; the key and identity are read from PAST_API_KEY or ~/.past/config.json, which past.dev's other connectors share; off by default on messaging-gateway sessions.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install pastdotdev
Said no? Turn it on later:
hermes plugins enable pastdotdev
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Kanban Stream
Community
Live-stream Hermes kanban worker activity to a Telegram ops channel: one edit-in-place message per task with rolling tool-call history, elapsed timer, tokens/sec, thinking indicator, and a pinned final state…
Live-stream Hermes kanban worker activity to a Telegram ops channel: one edit-in-place message per task with rolling tool-call history, elapsed timer, tokens/sec, thinking indicator, and a pinned final state (done/blocked). Mid-task steering via task comments — /steer from Telegram through the bundled companion daemon, or straight from the board. Ships disabled by default; needs a dedicated ops bot (KANBAN_STREAM_BOT_TOKEN + KANBAN_STREAM_ALLOWED_USERS). Outbound calls go only to api.telegram.org; reads the kanban DB read-only; no telemetry, no self-update.
Good to know before installing
Sends kanban task titles, summaries and tool names with command/path snippets to the Telegram chat you configure via your own bot; the optional steer daemon posts allowlisted Telegram users' /steer text as task comments that reach the running worker.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs KANBAN_STREAM_BOT_TOKEN, KANBAN_STREAM_ALLOWED_USERS), then asks whether to turn it on.
hermes plugins install kanban-stream
Said no? Turn it on later:
hermes plugins enable kanban-stream
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Diff Review
Community
Analyze git diffs for common code quality issues — debug prints, hardcoded secrets, bare except clauses, and unresolved TODOs, in a diff you pass, the working tree (untracked files included) or a branch against its…
Analyze git diffs for common code quality issues — debug prints, hardcoded secrets, bare except clauses, and unresolved TODOs, in a diff you pass, the working tree (untracked files included) or a branch against its merge base.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install diff-review
Said no? Turn it on later:
hermes plugins enable diff-review
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Live DeepSeek API peak/off-peak pricing whale for the Hermes desktop titlebar. Blue x0.5 off-peak, grey PEAK at full price, countdown on click, 30s repaint, no backend or API key.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install deepseek-whale
Said no? Turn it on later:
hermes plugins enable deepseek-whale
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
A bell in the Hermes desktop composer that pings the ntfy topic Hermes already uses when a turn finishes. Click to cycle off, current turn, or all turns.
Good to know before installing
When enabled, posts the first line of each finished reply plus model, duration, token and cost figures to the ntfy server/topic Hermes is configured with (default ntfy.sh); reads NTFY_* from the profile .env and falls back to the ntfy CLI's ~/.config/ntfy/client.yml login (read-only).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install turn-bell
Said no? Turn it on later:
hermes plugins enable turn-bell
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local Presidio-based PII pseudonymization for Hermes model requests and tool results with an encrypted profile-scoped alias vault.
Good to know before installing
PII detection runs locally with Presidio and the spaCy en_core_web_lg model, which you install manually; alias mappings are stored encrypted in the Hermes plugin DB under HERMES_PRIVACY_GATEWAY_KEY; requests are blocked when the engine cannot load; tools outside rehydrate_tool_allowlist receive alias tokens, not plaintext.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs HERMES_PRIVACY_GATEWAY_KEY), then asks whether to turn it on.
hermes plugins install privacy-gateway
Said no? Turn it on later:
hermes plugins enable privacy-gateway
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Telegram Notify
Community
Remote Telegram lifecycle notifications for the main Hermes agent: turn start, completion with a bounded final answer, interruption/failure, and user-facing approval requests.
Remote Telegram lifecycle notifications for the main Hermes agent: turn start, completion with a bounded final answer, interruption/failure, and user-facing approval requests. Suppresses subagent, Telegram-origin lifecycle, and automatic/smart-approval noise. Outbound-only, no input channel.
Good to know before installing
Enabled by default once installed and reuses the core Telegram gateway's TELEGRAM_BOT_TOKEN and TELEGRAM_HOME_CHANNEL when present, so each main-agent turn's final answer (up to 3,200 chars) and approval-request command text (up to 700 chars) from CLI, Desktop and eligible gateway platforms are sent to api.telegram.org for delivery to that one chat; Telegram-origin lifecycle and approval-prompt copies (and, when notify_on_approval_response is enabled, Telegram-origin approval-response copies) are suppressed because the core Telegram gateway already delivers them in that chat; token and state are stored 0600 under HERMES_HOME/telegram-notify.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install telegram-notify
Said no? Turn it on later:
hermes plugins enable telegram-notify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only diagnostics for Hermes configuration: /hermes-doctor in-session and hermes guide in a terminal. Nine read-only health checks (config, mcp, skills, commands, hooks, plugins, memories, sessions, update) and points to 22 troubleshooting skills, installed separately as a skills tap, for what the built-in doctor doesn't cover. Complements — never replaces — hermes doctor.
Good to know before installing
Reads config.yaml, SKILL.md frontmatter, skill bundles, plugin manifests, the shell-hooks allowlist and the built-in MEMORY.md/USER.md stores read-only (the report quotes short memory snippets); the sessions scope reads the tail of logs/agent.log read-only for runaway-session signatures (session ids, model names and token counts appear in the report); the update scope reads the update-lock record in the co-located hermes-agent checkout under $HERMES_HOME and probes it — owner-PID liveness, then a brief lock acquisition it releases immediately, opening the lock file writable, with a read-only fallback for a root-owned lock on POSIX (writes no content, never deletes the lock); registers one read-only plugin skill, hermes-guide:start, listed in model sessions while the plugin is enabled; /hermes-doctor and hermes guide run hermes config path as a subprocess (argument list, no shell); the default hooks check reads hook configuration, consent state and the exec bit in-process and executes nothing, while hooks --deep runs hermes hooks doctor, which executes every approved shell hook once with a synthetic payload (--fast starts no subprocess and executes no hook); /hermes-doctor and herme
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-guide
Said no? Turn it on later:
hermes plugins enable hermes-guide
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Boot Screen
Community
Six-act boot animation for the Hermes desktop app — black-screen brand reveal, over-exposed whiteout bridge, a technical-dossier plate, an authorization handshake with identity confirmation, and a welcome finale — with…
Six-act boot animation for the Hermes desktop app — black-screen brand reveal, over-exposed whiteout bridge, a technical-dossier plate, an authorization handshake with identity confirmation, and a welcome finale — with audio cues, theme-aware light/dark plates and Esc/Enter/Space controls. Desktop-only: desktop/plugin.js inside the plugin SDK surface; no agent tools, hooks, middleware or env vars. Fully English UI. Adapted from 6shenhonghong9/dsh-startup-screen (MIT).
Good to know before installing
On every Desktop launch (default: once per session) it covers the whole window with a full-screen animation that plays audio and spoken narration and waits for Enter/Space/click on two steps (Esc skips); while it is up it captures Enter/Space/Esc at the document level. Turn it off or switch to daily in its Startup Animation settings page.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-boot-screen
Said no? Turn it on later:
hermes plugins enable hermes-boot-screen
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-only content-free usage tally and native Desktop statusline (Windows and macOS beta).
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install usage-ledger
Said no? Turn it on later:
hermes plugins enable usage-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Look a paid x402 or MPP URL up in vet402's public record of real purchases before the agent pays it. BLOCK stops the tool call. ALLOW, and a WARN that only says vet402 has not bought there yet, let it run. Any other WARN, a URL with no record for the paying HTTP method, and a vet402 outage ask for approval, and the call is refused when nobody can answer (yolo, approvals off, cron). vet402 only knows endpoints in public x402 and MPP discovery, so an unlisted URL asks. By default only mpp_fetch is checked, and a payment made inside Hermes HTTPX traffic is not seen.
Good to know before installing
Sends each guarded or model-queried URL (scheme, host, port and path; userinfo, query and fragment stripped) and its HTTP method to vet402.com in up to two HTTPS GETs; a missing record or a vet402 outage asks for approval and is refused when nobody can answer, unless VET402_UNKNOWN=allow lets it pay; while enabled, its skill adds one line to the skills index of every session.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install vet402
Said no? Turn it on later:
hermes plugins enable vet402
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Authenticated Hermes agent-to-agent tasks and optional file transfer over Iroh QUIC.
Good to know before installing
Tasks from a paired peer run in your live gateway agent with its full toolset; pairing is confirmed via the tool's confirm=true argument, not a UI prompt. Uses n0's public relays by default (HERMES_IROH_RELAY=off or a self-hosted URL for LAN-only). iroh_send_file can share any readable path the model names (credential-name denylist only, overridable with allow_sensitive); remote-triggered auto-fetch is off by default and confined to HERMES_IROH_AUTO_FETCH_DIR. The Rust sidecar is built locally with cargo, never downloaded.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-iroh-interconnect
Said no? Turn it on later:
hermes plugins enable hermes-iroh-interconnect
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local developer tools, transformation recipes, and reviewed chat handoff inside Hermes Desktop.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-toolsmith
Said no? Turn it on later:
hermes plugins enable hermes-toolsmith
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Pickup
Community
Pick up where you left off: up to 10 cards (5 by default) of unfinished work from your recent Hermes chats, project folders and files, each with where you stopped and a one-click next step.
Pick up where you left off: up to 10 cards (5 by default) of unfinished work from your recent Hermes chats, project folders and files, each with where you stopped and a one-click next step. Adapted from Herald OS by Luke (iamlukethedev), MIT.
Good to know before installing
After explicit in-app consent (stored per profile), each Refresh reads recent chats from every profile's session store (read-only; profiles the user skips in Settings are never opened) and sends chat excerpts and metadata, project/file names and paths, git branch/changed-file names and recent commit subjects to the current profile's Hermes LLM route (the auxiliary title-generation model, main provider unless configured); runs read-only git and, on macOS, Spotlight `mdfind`; never reads document contents; writes only $HERMES_HOME/pickup/. The "Next step" button can submit a model-written prompt straight into the card's chat in one click. The optional install.sh, when asked, adds the plugin to every profile's plugins.enabled (undone exactly by uninstall.sh).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-pickup
Said no? Turn it on later:
hermes plugins enable hermes-pickup
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Monitor Hermes token usage, notify at thresholds, and freeze tool/gateway activity at configured limits.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install tokenwatch
Said no? Turn it on later:
hermes plugins enable tokenwatch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Darkmoon
Community
Triage the findings file of a Darkmoon autonomous pentest scan (JSON or SARIF): filter by severity and proof status, get a severity-sorted summary and a pass/fail gate for a release.
Triage the findings file of a Darkmoon autonomous pentest scan (JSON or SARIF): filter by severity and proof status, get a severity-sorted summary and a pass/fail gate for a release. Read-only and offline: no network, no subprocess, no credentials, standard library only. Darkmoon is open source (GPL-3.0); its web dashboard and remediation agent are Pro and are not used here.
Good to know before installing
Reads a local .json or .sarif file at a model-supplied path (10 MB cap) and returns its findings; no network, subprocess or writes
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install darkmoon
Said no? Turn it on later:
hermes plugins enable darkmoon
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Fleet Policy
Community
For administrators who pin settings through the managed scope: records what each agent role really sends to the provider (model, reasoning effort, service tier, plus the tier the provider says it served) next to the…
For administrators who pin settings through the managed scope: records what each agent role really sends to the provider (model, reasoning effort, service tier, plus the tier the provider says it served) next to the managed-scope state and the effective config (`hermes fleet-policy status --json`); measures cron cost per job — runs, empty runs, $/day, gate present (`crons --cost`); and `watch`, a generic wake gate for cron scripts that replays one read tool on an MCP server and wakes the agent only when new item ids appear (stock `wakeAgent` gate, no LLM call otherwise). Ships two skills (managed-scope admin, recurring tasks).
Good to know before installing
Records only model, reasoning effort and service tier per role (no message content, headers or keys) via the pre_api_request and pre_auxiliary_call hooks and a pass-through llm_execution middleware, stored in $HERMES_HOME/fleet-policy/observed.json; crons --cost opens cron/executions.db and state.db read-only and checks each cron run's final reply locally for silence; watch is an operator CLI command that calls one MCP tool at the config's server_url (or the admin-pinned watch_server_url) with config headers in which ${VAR} env values are expanded, follows redirects, and writes seen ids to a state file at the config-chosen path; the recurring-tasks skill has the agent write watch configs under $HERMES_HOME/watches, a script under $HERMES_HOME/scripts and a cron job; no other network access, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install fleet-policy
Said no? Turn it on later:
hermes plugins enable fleet-policy
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Look up current library docs from public npm and PyPI (no API keys). Resolve a package, fetch README and metadata, keep recent lookups on Desktop.
Good to know before installing
HTTPS to registry.npmjs.org, pypi.org and cdn.jsdelivr.net (npm READMEs) only; package name and version leave the machine; recent lookups are stored under $HERMES_HOME/plugin-data/lib-docs; the Desktop pane inserts text through Hermes Desktop's internal hermes:composer-insert event (not a public SDK API).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install lib-docs
Said no? Turn it on later:
hermes plugins enable lib-docs
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Independent Catppuccin Latte/Mocha desktop theme with peach accents, SDK-native gateway/profile switching and host-owned session density. Legacy plugin identity: codex-chat-look. No self-updater or native layout overrides.
Good to know before installing
Desktop theme derived from FPSUnleashed's MIT-licensed desktop skin; switches gateway/profile via host.ensureAgent only on user selection and a palette command rewrites the native sessionListDensity setting; no network calls of its own.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install codex-chat-look
Said no? Turn it on later:
hermes plugins enable codex-chat-look
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Nextdns
Community
Read-only NextDNS tools - DNS query logs, blocked queries with the blocklist that matched, and aggregate analytics by domain, device, blocklist or protocol.
Read-only NextDNS tools - DNS query logs, blocked queries with the blocklist that matched, and aggregate analytics by domain, device, blocklist or protocol. For triaging DNS problems and answering "was this blocked, and by what". Uses the official NextDNS API; makes no configuration changes.
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install nextdns
Said no? Turn it on later:
hermes plugins enable nextdns
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Runs agent commands in billable DeepInfra cloud sandboxes and uploads your Hermes skills, cache and skill-registered credential files to the sandbox at /workspace/.hermes; dangerous-command approval is skipped inside the sandbox.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs DEEPINFRA_API_KEY), then asks whether to turn it on.
hermes plugins install deepinfra-sandbox
Said no? Turn it on later:
hermes plugins enable deepinfra-sandbox
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Worker Monitor
Community
Kanban board groups and worker health in the Hermes Desktop footer: blocked cards first and red, live running state as a coloured dot, hover for the breakdown, one click to open the board.
Kanban board groups and worker health in the Hermes Desktop footer: blocked cards first and red, live running state as a coloured dot, hover for the breakdown, one click to open the board. Worker-only fork of hermes-monitor. No credentials are read and there is no network egress; it opens kanban.db and each profile's state.db read-only and returns counts only. Zero model tokens.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-worker-monitor
Said no? Turn it on later:
hermes plugins enable hermes-worker-monitor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Explicit Jev decision sidekick via TypeSafe or Cloudflare; advisory judgments, no automatic tool gating.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jev
Said no? Turn it on later:
hermes plugins enable jev
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Everything Hermes made - cross-session shelf of wrote/patched paths. Full Desktop page, chip, pin. No API keys.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install made-shelf
Said no? Turn it on later:
hermes plugins enable made-shelf
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Jev-powered routing for misspelled, shortened, and meaning-based slash commands in the Hermes Desktop composer. Preserves drafts when unsure. Requires a TypeSafe API key; every non-exact lookup uses paid TypeSafe API usage.
Good to know before installing
Every non-exact slash token is sent through the plugin's local backend to api.typesafe.ai (paid, your TYPESAFE_API_KEY) together with the Desktop command catalog (names and descriptions), any prior route, up to 8 saved correction explanations and any clarification you type into its panel; message arguments and conversation content are not sent; the backend reads HERMES_HOME/.env only to check whether TYPESAFE_API_KEY is set.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TYPESAFE_API_KEY), then asks whether to turn it on.
hermes plugins install hermes-slash-router
Said no? Turn it on later:
hermes plugins enable hermes-slash-router
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Signed, independently checkable receipts for Hermes approval verdicts and, since 0.2.0, for turns that stop on iteration exhaustion. Observe-only: a post_approval_response hook requests an invinoveritas decision receipt for each Guardian LLM verdict (or every approve/deny with scope=all); post_llm_call + on_session_end record, when a turn ends with max_iterations_reached, whether the turn's todo ledger (the last todo result or the list re-injected after compaction) was complete (turn_scope: exhausted by default, all, or off). Each receipt is a signed set of salted commitments that anyone can check for free at /verify-proof and that the holder can later open with the salt kept locally. Never approves, denies, delays, continues or blocks anything.
Good to know before installing
One HTTPS POST per recorded approval decision or recorded turn to api.babyblueviper.com/decision-receipt (or the configured api_url) under INVINOVERITAS_API_KEY, paid automatically at 100 sats per receipt from your invinoveritas balance with no per-call confirmation (defaults: Guardian LLM verdicts, and only turns that stop on max_iterations_reached; scope: all adds every human approve/deny, turn_scope: all pays on every turn); sends a fixed question, the options, the choice, a nonce-salted SHA-256 of the context and the tool_call_id/turn_id, never the command text, todo contents or reply text; stores receipts, salts and the full contexts (including the command as Hermes passed it, and the todo ledger) in plugin-data/invinoveritas-receipts/receipts.jsonl.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs INVINOVERITAS_API_KEY), then asks whether to turn it on.
hermes plugins install invinoveritas-receipts
Said no? Turn it on later:
hermes plugins enable invinoveritas-receipts
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Session Mirror
Community
Mirrors Hermes Desktop, CLI, TUI and ACP conversations into Discord: one public thread per session in a channel you choose, one post per turn (your message and the reply), so work started on a desktop can be followed…
Mirrors Hermes Desktop, CLI, TUI and ACP conversations into Discord: one public thread per session in a channel you choose, one post per turn (your message and the reply), so work started on a desktop can be followed from the phone. Posting runs on a background thread and never delays or breaks a turn.
Good to know before installing
Register() adds one post_llm_call hook; every turn's text (your message and the final reply, not tool calls or outputs) is sent to the Discord REST API (discord.com) using the bot token you configure, after Hermes's redact_for_egress plus a local token-pattern filter (fail-closed: nothing is sent if the redactor is unavailable); mentions are disabled. The bot token is read only via agent.secret_scope.get_secret (an UnscopedSecretError under multiplexing skips the turn); no external command is ever run. Each turn reads the session's title and source from $HERMES_HOME/state.db read-only; session-to-thread ids are stored (mode 0600) in $HERMES_HOME/state/session-mirror.json. The optional `hermes session-mirror backfill` CLI command reads $HERMES_HOME/state.db read-only and replays past sessions through the same redaction. No other files, telemetry or long-running processes beyond one daemon sender thread.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install session-mirror
Said no? Turn it on later:
hermes plugins enable session-mirror
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Persistent session file diffs, run comparisons, and individual edit history in Hermes Desktop.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-session-diff
Said no? Turn it on later:
hermes plugins enable hermes-session-diff
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Quote & Ask
Community
Codex-style ask-about-selection for Hermes Desktop: select text anywhere in a conversation, and a small pill appears above the selection offering Quote & ask — the selection lands in the message composer as a Markdown…
Codex-style ask-about-selection for Hermes Desktop: select text anywhere in a conversation, and a small pill appears above the selection offering Quote & ask — the selection lands in the message composer as a Markdown quote with the caret on the line below, ready for your question — or Copy, which puts the same Markdown quote on the clipboard. A command-palette entry does the same without the pill. Desktop-only (desktop/plugin.js inside the plugin SDK surface): no agent tools, hooks, middleware or env vars, nothing written to disk, nothing persisted.
Good to know before installing
Reads window.getSelection() and the selection rectangle; serializes the selection to Markdown (fenced code with its language, nested lists, bold/italic, links), cut at 4000 characters; writes the draft through host.composer (getDraft/setDraft, falling back to insertText, then ctx.os.writeClipboard) and focuses the composer; ignores selections made inside the composer itself and hides on collapse, scroll or Escape. No network calls, no credentials, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install quote-ask
Said no? Turn it on later:
hermes plugins enable quote-ask
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Call Ledger
Community
Per-call cost ledger for Hermes Desktop: every model call Hermes makes is recorded from the observer hooks (provider, model, tokens, duration, outcome) and paired with the charge the billing provider actually took.
Per-call cost ledger for Hermes Desktop: every model call Hermes makes is recorded from the observer hooks (provider, model, tokens, duration, outcome) and paired with the charge the billing provider actually took; works with no billing account, priced by Hermes' own estimate where the price book knows the model. English or Vietnamese; dong or dollars.
Good to know before installing
Three observer hooks (post_api_request, post_auxiliary_call, api_request_error) record per-call metadata from every profile in the install (session id, platform, task, provider, model, token counts, duration, finish reason, context length; never prompt, response or tool-argument text) into one shared SQLite ledger at <install root>/plugin-data/call-ledger/calls.sqlite, and import this plugin's own older per-profile ledgers into it once. It caches the vilao.ai model list there and the USD-to-VND rate under the active profile's plugin-data/call-ledger. Network is GET-only: vilao.ai (wallet balance, per-request usage, consumer keys) with VILAO_PAT read through Hermes's secret scope (vilao issues one full-scope token per account, including wallet writes; this plugin only reads), the public vilao.ai model list with no credential, and open.er-api.com for the dollar rate. The first full billing pull pages back through up to ten years of the account's usage. Nothing runs while the Desktop page is closed. Derived from hermes-resetwatch (Adolanium, MIT).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs VILAO_PAT), then asks whether to turn it on.
hermes plugins install hermes-call-ledger
Said no? Turn it on later:
hermes plugins enable hermes-call-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Phone notifications, questions and approvals through Pushary's native Hermes approval transport, with optional per-tool gates.
Good to know before installing
Approval transport and per-tool gates hand dangerous-command approvals to whoever holds the devices or Slack channel paired to your Pushary account (fails closed); messages queued in the Pushary app or Mac notch are injected into the next turn as operator instructions and wait in ~/.pushary/run/hermes-commands; sends session events with a machine id (~/.pushary/machine-id when present, else a hashed hostname) on every turn, the redacted command and description of each approval it carries, the redacted reason when Hermes marks a turn failed (max 200 characters), redacted gated-tool arguments and pushary_remind reminder text to pushary.com; reads PUSHARY_API_KEY only through Hermes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs PUSHARY_API_KEY), then asks whether to turn it on.
hermes plugins install pushary
Said no? Turn it on later:
hermes plugins enable pushary
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Walkie-Talkie
Community
Let one session message another existing session (Telegram topic, group thread or DM), waking it like a user turn so the reply lands in that chat Disclosure — starts agent turns in other existing gateway sessions (any…
Let one session message another existing session (Telegram topic, group thread or DM), waking it like a user turn so the reply lands in that chat
Good to know before installing
Starts agent turns in other existing gateway sessions (any routed chat, including groups, and from cron jobs) via ctx.inject_message, only after plugins.entries.walkie-talkie.allow_gateway_injection: true; after an accepted handoff it posts a visible copy into the target chat through Hermes's send_message helper using your existing gateway bot credentials; reads state.db, config.yaml and cron/jobs.json read-only; no network calls of its own, no shell, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install walkie-talkie
Said no? Turn it on later:
hermes plugins enable walkie-talkie
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Native Hermes tools for a configurable local capability index: search/get/neighbors plus local usage feedback/reporting.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install local_knowledge
Said no? Turn it on later:
hermes plugins enable local_knowledge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Step through Hermes Desktop sidebar sessions in on-screen order with Ctrl+Cmd+] / Ctrl+Cmd+[ (rebindable), wrapping at both ends. SDK-only: session-row slot markers for order, host.state for the focused session, host.openSession for navigation.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install sidebar-cycle
Said no? Turn it on later:
hermes plugins enable sidebar-cycle
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Accumulated input/output token totals and context-window occupancy for the focused session, in the Hermes Desktop status bar.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install session-token-counter
Said no? Turn it on later:
hermes plugins enable session-token-counter
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Ephemeral credential paste: request_secret asks through clarify and injects the reply over CDP, never storing it.
Good to know before installing
The reply is typed into the focused field of the page whose origin matches the requested service, over the endpoint from BROWSER_CDP_URL or SECRET_HANDOFF_CDP_URL; the answer is visible in the CLI scrollback or the chat history of the surface that asked, and the value is never written to disk, the tool result, or the session transcript.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install secret-handoff
Said no? Turn it on later:
hermes plugins enable secret-handoff
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jev Cron Gate
Community
Skip agent cron runs that would do nothing: a pre-run wake-gate script asks TypeSafe Jev one yes/no question over a small state snapshot (files, changed-since-last-run, localhost URLs) and prints {"wakeAgent": false}…
Skip agent cron runs that would do nothing: a pre-run wake-gate script asks TypeSafe Jev one yes/no question over a small state snapshot (files, changed-since-last-run, localhost URLs) and prints {"wakeAgent": false} when it is confident the run is pointless. Fail-open on every error, forced wake after N consecutive skips, stdlib only.
Good to know before installing
Each gated cron tick (and the tool's test action) sends the configured snapshot of file contents, localhost URL response bodies and change flags (≤6,000 chars) to api.typesafe.ai with your TypeSafe key.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TYPESAFE_API_KEY), then asks whether to turn it on.
hermes plugins install jev-cron-gate
Said no? Turn it on later:
hermes plugins enable jev-cron-gate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Owner-approved universal phone pairing and bundled read-only Live Operations reporting for selected Hermes profiles.
Good to know before installing
Paired phones get broad fleet:operator access over the internet, including cron jobs (unattended runs), Kanban task dispatch and media reads, and see live session titles/previews and subagent goals from the profiles you select for reporting; any messaging account you make an owner (with a one-time claim code from `hermes fleet claim`) can create pairing links and approve phones from a private chat, so that account's security is your host's security. Runs an explicitly activated background connector/reverse proxy behind your HTTPS origin and may launch a local Hermes backend; legacy QR flow opens a private local browser. Keeps an owner-only control socket in the system temp directory, plus pairing/owner state and shared local snapshots; reads selected profiles' session registries through private read-only imports. `hermes fleet reporting configure --apply` edits the selected profiles' config.yaml (with a backup). Local idle/retirement maintenance is explicit and not exposed to phones. Reporting adds no control power.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-fleet-connector
Said no? Turn it on later:
hermes plugins enable hermes-fleet-connector
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Composer Modes
Community
Cursor-style composer modes (ask / agent / plan / debug) for the Hermes desktop — the mode's operating note reaches the model inside the turn's model-facing bytes, never the bubble, transcript or session titles, and…
Cursor-style composer modes (ask / agent / plan / debug) for the Hermes desktop — the mode's operating note reaches the model inside the turn's model-facing bytes, never the bubble, transcript or session titles, and ask mode is enforced read-only on the tool side.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install composer-modes
Said no? Turn it on later:
hermes plugins enable composer-modes
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Tokstat
Community
Live token usage in the Hermes Desktop status bar: cumulative total, a real-time this-turn counter, last-turn delta, context occupancy, and prompt-cache hit rate.
Live token usage in the Hermes Desktop status bar: cumulative total, a real-time this-turn counter, last-turn delta, context occupancy, and prompt-cache hit rate. Event-driven (no polling, no RPC); English and Chinese, follows the app locale.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install tokstat
Said no? Turn it on later:
hermes plugins enable tokstat
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Uses local Presidio and spaCy to redact supported PII in outgoing user text.
Good to know before installing
Filters Chat Completions user messages and Responses user input locally; system prompts, tool outputs and tool-call arguments are preserved. Fail-open: detector errors, including a missing model, send original text. Install spaCy en_core_web_sm 3.8.0 separately from its GitHub release wheel in the Hermes Python environment before enabling; Hermes installs only the named PyPI dependencies. No runtime model downloads or remote detection.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-pii
Said no? Turn it on later:
hermes plugins enable hermes-pii
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only Hermes Desktop pane for live and past delegated subagent workers.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install protean-subagent-viewer
Said no? Turn it on later:
hermes plugins enable protean-subagent-viewer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Preview Text Size
Community
Larger or smaller text in the Hermes Desktop file preview pane: scales the rendered Markdown from 90% to 175%, independent of Chat Text Size and UI Scale, through a row in Settings → Appearance, three command-palette…
Larger or smaller text in the Hermes Desktop file preview pane: scales the rendered Markdown from 90% to 175%, independent of Chat Text Size and UI Scale, through a row in Settings → Appearance, three command-palette entries and rebindable shortcuts (⌘⌥=, ⌘⌥-, ⌘⌥0 on macOS; unbound by default on Windows and Linux, where Ctrl+Alt is AltGr). The Source and Diff views keep their size.
Good to know before installing
Desktop-only (desktop/plugin.js inside the plugin SDK surface); appends one stylesheet that sets CSS zoom on the preview's [data-preview-markdown] element, removed on disable, so a Desktop release that renames that attribute turns the plugin into a no-op; stores the chosen size in plugin storage; no network calls, credentials, shell commands, background processes or telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install preview-text-size
Said no? Turn it on later:
hermes plugins enable preview-text-size
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Loadout
Community
Desktop pane to manage skills and MCP connections across agent apps: save named loadouts, review changes, apply them, and undo the latest managed operation.
Desktop pane to manage skills and MCP connections across agent apps: save named loadouts, review changes, apply them, and undo the latest managed operation. Agent half is inert (no tools or hooks).
Good to know before installing
MCP sync copies your Hermes mcp_servers env/header secrets into ~/.codex/config.toml and claude_desktop_config.json (with 0600 backups).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-loadout
Said no? Turn it on later:
hermes plugins enable hermes-loadout
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Token Speed
Community
Live decode tokens-per-second chip for the Hermes Desktop status bar: 1-second sliding window while the model is still streaming, tool execution time excluded from decode seconds, UI spinner frames never counted, TTFT…
Live decode tokens-per-second chip for the Hermes Desktop status bar: 1-second sliding window while the model is still streaming, tool execution time excluded from decode seconds, UI spinner frames never counted, TTFT tracked separately, cumulative totals calibrated against authoritative provider usage at turn end. Desktop-only (desktop/plugin.js); no agent tools, hooks, middleware or env vars.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-token-speed
Said no? Turn it on later:
hermes plugins enable hermes-token-speed
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Ring when a Hermes turn finishes so you can leave the window. OS notification, optional chime, and a busy/done chip. Optional "needs you" when approval is waiting. No API keys.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install done-bell
Said no? Turn it on later:
hermes plugins enable done-bell
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Prompt Queue
Community
Kanban-style prompt queue for the desktop: Play drains cards one at a time into per-card target modes — new session, existing session, project, or a profile's canonical Bot Chat — gated on the global model slot…
Kanban-style prompt queue for the desktop: Play drains cards one at a time into per-card target modes — new session, existing session, project, or a profile's canonical Bot Chat — gated on the global model slot, background-review completion, and context compaction. Queue/Done/Skipped/ Failed tabs, two-row target picker, markdown ingest (Windows), and a trust-aware ::enqueue directive (ask-first by default).
Good to know before installing
Desktop pane that runs queued prompts as full agent turns (all tools the session allows) in new or chosen existing sessions, projects it can create, or a hidden per-profile "Bot Chat" session while Play is on; reads recent agent.log lines to detect background reviews and context compaction; on Windows the markdown-ingest menu runs local shell commands (mkdir, dir, certutil, explorer, and python on a small bundled reader script it writes into the chosen folder) through Hermes's shell.exec; an opt-in Auto-add setting lets ::enqueue directives in a live assistant reply queue prompts that run without a click.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install prompt-queue
Said no? Turn it on later:
hermes plugins enable prompt-queue
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jev Judge
Community
TypeSafe Jev as a judgment layer — a pre-tool gate (shadow by default, enforce escalates) on terminal, write_file and patch asking destructive / exfiltration / impact (a v2 signal set — reads_secrets × sends_outbound…
TypeSafe Jev as a judgment layer — a pre-tool gate (shadow by default, enforce escalates) on terminal, write_file and patch asking destructive / exfiltration / impact (a v2 signal set — reads_secrets × sends_outbound, blast_radius, self_advocating — is one setting away), plus a jev_ask tool for typed judgments. Thresholds in code, one JSONL line per decision with the fail-open reason, fail-open on every error path. Stdlib only, no Node; no redirects, proxy env ignored, payload capped; works with TYPESAFE_API_KEY, OPENROUTER_API_KEY, or AI_GATEWAY_API_KEY.
Good to know before installing
Each judged call sends the tool name and its redacted arguments (≤600 chars each, ≤12 args) to TypeSafe, OpenRouter, or your configured gateway, using your key; shadow mode only logs. With the default backend auto, OPENROUTER_API_KEY is used automatically whenever it is present and TYPESAFE_API_KEY is not, so tool names and redacted arguments go to openrouter.ai on your main-model OpenRouter key unless backend is set to typesafe or gateway.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jev-judge
Said no? Turn it on later:
hermes plugins enable jev-judge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Agent Log
Community
Readable agent.log viewer in the desktop status bar — a live, colour-coded feed of API calls, tools, turns, fallbacks, warnings and errors, with per-call tokens/latency/cache, stats tables, and a single-dot alert for…
Readable agent.log viewer in the desktop status bar — a live, colour-coded feed of API calls, tools, turns, fallbacks, warnings and errors, with per-call tokens/latency/cache, stats tables, and a single-dot alert for genuine non-self-healing faults. Follows app theme/language.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install agent-log
Said no? Turn it on later:
hermes plugins enable agent-log
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Background Review Watch
Community
Status-bar chips for the background self-improvement review and batch context compaction: review running/done/stale with live elapsed time, a turn-countdown fill bar to the next nudge, an always-visible compaction chip…
Status-bar chips for the background self-improvement review and batch context compaction: review running/done/stale with live elapsed time, a turn-countdown fill bar to the next nudge, an always-visible compaction chip (compacting/done/failed/stale with committed reduction or failure class), reply-guard recovery and review-overlap diagnostics, and a Settings page that tunes both orphan ceilings.
Good to know before installing
Renderer-only; polls filtered read-only tails of agent.log via host.logs to parse lifecycle markers; listens for review.summary/message.start/message.complete events; stores three small plugin-storage records (settings + last compaction + last review); no network calls beyond the local gateway, no credential access, no self-update.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install background-review-watch
Said no? Turn it on later:
hermes plugins enable background-review-watch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-first regression workbench turning agent failures and corrections into reviewed, evidence-backed checks.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install afterforge
Said no? Turn it on later:
hermes plugins enable afterforge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
OpenSpec CLI tools for spec-driven development workflows
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install openspec
Said no? Turn it on later:
hermes plugins enable openspec
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Usage Stats
Community
Multi-provider usage/balance for the Hermes Desktop status bar — shows live usage for OpenCode, OpenRouter, DeepSeek, Kimi, NovitaAI, ZAI, Alibaba, Arcee, plus gateway-native Claude/Codex/Cursor/Nous.
Multi-provider usage/balance for the Hermes Desktop status bar — shows live usage for OpenCode, OpenRouter, DeepSeek, Kimi, NovitaAI, ZAI, Alibaba, Arcee, plus gateway-native Claude/Codex/Cursor/Nous.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install usage-stats
Said no? Turn it on later:
hermes plugins enable usage-stats
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.
