909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
880 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Comfyrizz
Community
Chat-as-frontend for the Comfyrizz film pipeline: brief, plan, revise, explicit accept, generate, CPU assemble, export, and retake.
Chat-as-frontend for the Comfyrizz film pipeline: brief, plan, revise, explicit accept, generate, CPU assemble, export, and retake. Portable Agent Plugins v1 package (plugin.json, stdio mcp.json, comfyrizz-film skill) with the MCP server in-tree.
Good to know before installing
The stdio server launches local Node that talks only to a loopback Comfyrizz engine URL (COMFYRIZZ_ENGINE_URL); optional Streamable HTTP binds 127.0.0.1 only when deliberately enabled and has no authentication, so any local process or web page in your browser can call its tools while it runs. Paid generation (Google Colab, Comfy API, or ComfyUI) is dispatched by the agent with an approval id it reads from the engine's spend card; the bundled skill tells the model to get your explicit yes first, but Hermes itself does not prompt before paid generation or retakes. Env vars are forwarded as ${VAR} from the user environment (COMFYRIZZ_ENGINE_URL, COMFYRIZZ_MCP_HTTP, COMFYRIZZ_TOKEN, and optional provider keys); no credentials are stored in the package. No self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install comfyrizz
Said no? Turn it on later:
hermes plugins enable comfyrizz
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Connect and disconnect Composio accounts from Hermes Desktop and the web dashboard. Lists every row the Composio CLI returns, including expired, duplicate, and unaliased accounts, opens OAuth in the user's browser, and disconnects one exact account after confirmation. No agent tools or hooks. Catalog metadata uses COMPOSIO_USER_API_KEY through agent.secret_scope.get_secret and requests only https://backend.composio.dev.
Good to know before installing
Inventory, connect, and disconnect run the composio CLI already logged in on the gateway; the API key never reaches the browser. Removing a Composio connection does not revoke every permission at the provider. The bundled service logos include an Ngrok mark; the plugin does not open a tunnel.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs COMPOSIO_USER_API_KEY), then asks whether to turn it on.
hermes plugins install composio-connections
Said no? Turn it on later:
hermes plugins enable composio-connections
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
DSers — Multi Platform Dropshipping
Community
DSers multi-platform dropshipping connector for dropshippers: supplier discovery, product sourcing, store management, supplier mapping, order fulfillment, and shipment tracking.
DSers multi-platform dropshipping connector for dropshippers: supplier discovery, product sourcing, store management, supplier mapping, order fulfillment, and shipment tracking. The DSers ecosystem includes AliExpress, Alibaba.com, 1688, DVAN, Shopify, WooCommerce, Wix, eBay, TikTok Shop, Amazon, Walmart, BigCommerce, Squarespace, Square, Ecwid, Magento, SHOPLINE, Jumpseller, Big Cartel, Cartpanda, Genstore, and LPQV; available operations depend on account and channel access.
Good to know before installing
Configuration-only portable MCP connector, with no bundled skills or native tools. Hermes v0.22.5 requires manual native OAuth connection setup. A DSers Advanced, Pro, or Enterprise subscription is required. Tool arguments and results are exchanged with ai.dsers.com; Hermes manages OAuth credentials. Remote tools include write operations, among them supplier-order placement that spends money through the user's DSers account, pricing changes and listing publication; the package and the documented native entry mark the server untrusted so Hermes asks before non-read-only calls, and the remote tool set can change independently of the pinned package. Removing the plugin alone leaves the native MCP connection.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install dsers
Said no? Turn it on later:
hermes plugins enable dsers
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
EU Mode (beta): HaloGuard EU, Astroware's guard API hosted in the EU, checks each message and each reply (allow or block). EU Mode looks for personal data in what users send and masks what it finds before the request reaches the model, then puts the originals back in the reply, on your machine.
Good to know before installing
On every turn the conversation's user and assistant text (not system prompts, tool results, files or images) goes to api.astroware.ai (or the HALOGUARD_BASE_URL you set) with your own HaloGuard EU key, up to twice per turn (your message, then the reply); fail-open: if the API does not answer, the message goes on unchecked and not masked, and the reply says so; reads two Hermes settings (session titles, context compression) only to say when they are on; stores SHA-256 fingerprints of blocked messages, never their text.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs HALOGUARD_API_KEY), then asks whether to turn it on.
hermes plugins install eu-mode
Said no? Turn it on later:
hermes plugins enable eu-mode
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
FOUND
Community
FOUND, the AI SDR for LinkedIn and email, through FOUND's hosted MCP server (Streamable HTTP at https://app.foundtofind.com/mcp, OAuth sign-in, no keys in config): warm leads found from buying signals with the…
FOUND, the AI SDR for LinkedIn and email, through FOUND's hosted MCP server (Streamable HTTP at https://app.foundtofind.com/mcp, OAuth sign-in, no keys in config): warm leads found from buying signals with the reason for each, pipeline and campaign numbers, account research, new companies and the right contact at a company, work emails, drafted messages, lists, and paused campaigns with their sequences. Bundles the found-outreach workflow skill. Agent Plugins v1 package (plugin.json + mcp.json + skills/), configuration only.
Good to know before installing
Every tool call goes to FOUND's hosted server (app.foundtofind.com) and acts on the user's FOUND account; the tool set is served by that server at runtime and is not covered by the pinned sha. Sign-in runs the pinned mcp-remote@0.1.49 through npx (Node.js 20.18.1+ and npm required), which opens a browser and a local callback port on first use and stores OAuth tokens under ~/.mcp-auth. Some tools spend FOUND credits (FOUND states they quote the price first and spend only on a confirming second call), and FOUND states campaigns created from Hermes start paused; the package marks the server untrusted, so Hermes asks before every tool the server does not mark read-only and refuses them in unattended runs.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install found
Said no? Turn it on later:
hermes plugins enable found
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Translucent glass surfaces for Hermes Desktop in light and dark, teal accent, with terminal colors that match.
Good to know before installing
Theme-only plugin: it registers one theme through the Desktop plugin SDK and injects no CSS, no DOM access and no stylesheet of its own; the palette ships light and dark sets and the desktop terminal pane takes its colours from them. The package also ships two optional CLI/TUI skins (glass-light, glass-dark) as plain YAML files the user copies into ~/.hermes/skins, plus an inert __init__.py whose register() does nothing so the Agent loader imports the package cleanly instead of reporting a missing module. No network requests, no agent tools, no hooks, no background processes, no settings page.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install glass-theme
Said no? Turn it on later:
hermes plugins enable glass-theme
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Git publishing and independent cloning using local Nostr keys and Hashtree. Instruction-only skill; requires separately installed htree and git-remote-htree, invokes shell commands, and can publish repository history.
Good to know before installing
Instruction-only skill: the agent runs git, htree and git-remote-htree in the terminal (installed separately by the user, or by the agent from the project's release binaries or an unpinned `cargo install hashtree-cli git-remote-htree`); a push publishes the repository's history and author metadata to Hashtree storage servers and Nostr relays, publicly unless a link-visible or private URL is used; the CLI creates and stores a local signing key, and an optional htree daemon keeps running until stopped.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hashtree-git
Said no? Turn it on later:
hermes plugins enable hashtree-git
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Finance
Community
Personal-finance tools over your own local hermes-finance database: spending, budgets, transactions, net worth, bills, loans, investments, cash flow, goals and categorization rules (read-only), a bank sync on…
Personal-finance tools over your own local hermes-finance database: spending, budgets, transactions, net worth, bills, loans, investments, cash flow, goals and categorization rules (read-only), a bank sync on request, and four writes (file a transaction, add a rule, set a budget cap, track a bill) that each wait for your approval and are blocked under cron and other unattended runs. Needs a separate trusted app checkout prepared with Python 3.12 and `uv sync`, set as HERMES_FINANCE_APP_DIR.
Good to know before installing
Reads open the separate hermes-finance app's SQLite database outside the plugin directory, and the plugin imports that app checkout's code into the Hermes process, so it runs whatever that checkout contains, not the catalog pin. `finance_sync` runs the app's sync, which calls Plaid with your optional Plaid keys and fetches security logos from financialmodelingprep.com (ticker symbols leave the machine). `hermes finance completion`, started by the app's Ask panel, sends that conversation and your finance results to your profile's own model. The opt-in report jobs (`hermes finance crons plan/apply`) write profile-owned entry scripts and run the app on a schedule. They call Plaid and, with a live read-only key, Alpaca (GET-only); they look up car and home values through NHTSA, Wikimedia/OpenStreetMap and, only if you switch them on, Carfax (in the local Chrome at 127.0.0.1:9222) and Redfin. The daily job's agent applies transaction categorizations through the app's own CLI without a per-change approval card. The four approval-gated writes stay blocked in cron. Nothing moves money or places trades. The optional Plaid and Alpaca keys are read through Hermes's secret scope only; the plug
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-finance
Said no? Turn it on later:
hermes plugins enable hermes-finance
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Run approved GitHub mentions as Hermes tasks and reply in the original thread. Polls GitHub's API in a gateway worker and sends signed local webhooks granting terminal, file, web, skills and todo tools. Optional Discord copies and read-only Hermes session progress tracking.
Good to know before installing
Polls the GitHub notifications API every 60 s or more as the bot account, and when a GitHub user on your allowed_authors list @mentions the bot in any repository the bot can see, starts an unattended Hermes agent turn with terminal, file, web, skills and todo tools on this computer through a signed local webhook route; the mention text and the repository content the agent reads are untrusted input, and the agent acts with the bot's classic `repo` token (the same GITHUB_TOKEN Hermes' GitHub tools use). Hermes' unattended approval mode (deny by default) still governs flagged commands. `hermes github-mentions routes --apply` edits this profile's config.yaml (adds webhook routes, enables the webhook platform on 127.0.0.1). Optional progress notices read Hermes' state.db read-only; optional Discord notices post through Hermes' own Discord adapter.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-github-mentions
Said no? Turn it on later:
hermes plugins enable hermes-github-mentions
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Profile-bound semantic session handoffs for CLI and Desktop with independent destination and optional summary-writer models. Derived from yuzushi-dev/session-handoff.
Good to know before installing
Reads bounded persisted session evidence from the originating profile's state.db and project/Git metadata; runs local Git and foreground Hermes subprocesses without a shell; stores private handoff/journal sidecars under that profile; optional writer and new chat turns use configured model providers and may incur inference costs. No telemetry or plugin-owned credential store. Four internal tool-policy imports remain version-coupled; no runtime overrides or self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-handoff
Said no? Turn it on later:
hermes plugins enable hermes-handoff
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
PR Studio
Community
Review GitHub pull requests in Hermes Desktop — inbox of your open PRs across repos, diffs with inline threads, line comments and reviews, private-repo images, watched PRs, and one-click Send to Hermes for any comment.
Review GitHub pull requests in Hermes Desktop — inbox of your open PRs across repos, diffs with inline threads, line comments and reviews, private-repo images, watched PRs, and one-click Send to Hermes for any comment.
Good to know before installing
Shells out to your logged-in gh CLI (and `git remote get-url origin` in the open project); GitHub writes only on explicit click, reviews confirmed; "Send to Hermes" and "review in new chat" submit the PR comment text (written by other GitHub users) to your chat as a prompt immediately; polls watched PRs every 60 s while Desktop is open; no stored credentials, no telemetry. Independent codebase, not derived from githermes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-pr-studio
Said no? Turn it on later:
hermes plugins enable hermes-pr-studio
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Composer profile picker with explicit context handoff into a new chat and verified single-folder project inheritance.
Good to know before installing
Reads focused session/project metadata; may read the live roster and transcript to verify empty sources, even for Start fresh. Copy context and Brief handoff store selected source text in a new target-profile session. No automatic submission or model call. Cross-gateway handoffs have no inherited project; source chat, composer drafts and profile configuration are not modified.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-profile-switcher
Said no? Turn it on later:
hermes plugins enable hermes-profile-switcher
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Themes Pack
Community
The 23 Omarchy stock themes (Tokyo Night, Catppuccin, Gruvbox, Nord, Rose Pine, Jade Horse and more) as Hermes skins, with one /theme command that switches the CLI, the TUI and Desktop together.
The 23 Omarchy stock themes (Tokyo Night, Catppuccin, Gruvbox, Nord, Rose Pine, Jade Horse and more) as Hermes skins, with one /theme command that switches the CLI, the TUI and Desktop together. Optionally follows the Omarchy theme. Works without Omarchy.
Good to know before installing
Registers only the /theme command (plus a `hermes theme` CLI subcommand under plugins.isolation: in_process); nothing runs at load time. /theme writes the pack's skins and a receipt under the active profile's HERMES_HOME (personal or edited skins of the same name are skipped) and selects one by running `hermes config set display.skin <name>`; it never edits config.yaml itself. It reads the current Omarchy theme from ~/.local/state/omarchy/current/theme.name. Only after /theme follow on does it write one executable hook into $XDG_CONFIG_HOME/omarchy/hooks/theme-set.d/; Omarchy runs it on theme switches and it switches ~/.hermes and every profile under ~/.hermes/profiles that has the pack installed. No network calls, background processes, Hermes tools, hooks or middleware, credentials, telemetry or self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-themes-pack
Said no? Turn it on later:
hermes plugins enable hermes-themes-pack
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Vitals Light
Community
CPU, load, free RAM, Linux PSI CPU pressure, active sessions, running Hermes processes and round-trip time of the connected Hermes server in the Desktop status bar, plus an optional TUI card.
CPU, load, free RAM, Linux PSI CPU pressure, active sessions, running Hermes processes and round-trip time of the connected Hermes server in the Desktop status bar, plus an optional TUI card.
Good to know before installing
The Desktop chip's backend route reads CPU/memory figures via psutil, Linux /proc/pressure/cpu and /proc/meminfo, every process's command line (only per-command Hermes process counts are returned) and the server's own loopback /api/status, and reports the server hostname to the Desktop; the optional TUI card, copied by hand into tui-widgets/, runs the same code as a long-lived `python3 -c` child of the TUI and saves its options to <HERMES_HOME>/vitals.json; no third-party network call, no telemetry, no credentials.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-vitals-light
Said no? Turn it on later:
hermes plugins enable hermes-vitals-light
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Windows Tasks
Community
Answer "what does this machine run on its own, and did it work" on Windows: win_scheduled_tasks lists the Task Scheduler's tasks with their state (Ready, Running, Disabled), the account each runs as, its first…
Answer "what does this machine run on its own, and did it work" on Windows: win_scheduled_tasks lists the Task Scheduler's tasks with their state (Ready, Running, Disabled), the account each runs as, its first action's command line, its triggers in words (at logon, daily, weekly, at a time, on event), its last and next run with the machine's offset, its missed runs, and what its last result code means - 0x80070002 is a program that is no longer there, 0x800710E0 a task that needed a desktop it did not have, 0x40010004 one that was stopped, 0x80040154 a COM class that is not registered. win_scheduled_task_detail takes one task and gives its triggers with start boundaries and repetition, its actions with arguments and working directory, its principal and the settings that decide whether it runs on battery or when late; a task with no triggers but MaintenanceSettings runs during automatic maintenance and the notes say so rather than leaving an empty list. Use it for why a logon task keeps failing, for finding what an uninstalled program left behind at logon, for telling a disabled task from a broken one, and for reading a task's command line before trusting it. Read-only: nothing is created, started, changed or deleted. Reads through the ScheduledTasks cmdlets rather than the store on disk, because the TaskCache registry tree and C:\Windows\System32\Tasks both answer access denied without elevation, and rather than schtasks /Query /FO CSV, which is localized and interleaves error lines for tasks whose definitions are gone. The plugin declares no Python dependencies; there is no network call and no file write. Windows only.
Good to know before installing
The tools report task paths, command lines, working directories, account names and SIDs to the model, and those reveal what the person has installed, what starts at their logon, and the paths under C:\Users\<name>; treat the output like a Task Scheduler window opened on their machine.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-windows-tasks
Said no? Turn it on later:
hermes plugins enable hermes-windows-tasks
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Memory provider with keyed corrections you can undo. A correction retires the old value by key, so it stops being recalled, and inspeximus_revert puts the previous value back from the key alone, without anyone retyping what the record used to say. Recall before each turn returns retrieval minus what a later correction retired, so a value corrected three sessions ago cannot come back as context. Adds inspeximus_remember, inspeximus_correct, inspeximus_revert, inspeximus_forget and inspeximus_forget_me.
Good to know before installing
Installs the inspeximus package from PyPI (inspeximus>=3.23.1,<4, including its `inspeximus` command-line tools) into the Hermes environment; the provider makes no network calls and carries no telemetry: memories live in a local JSON file under the profile's Hermes home (or a path you set), recalled memories are added to each turn's context and to the compression summary prompt, and writes made with the built-in memory tool are mirrored into the store.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install inspeximus
Said no? Turn it on later:
hermes plugins enable inspeximus
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Private messaging through the separately installed Iris CLI. Instruction-only skill; uses a selected local identity and message history, connects to Nostr relays, and may run a persistent sync service.
Good to know before installing
Instruction-only skill: the agent runs the separately installed iris CLI in the terminal, which creates a local messaging identity (secret keys and message history stored on disk), connects to Nostr relays and peers, can run a persistent sync service until stopped, and sends messages on the user's behalf; messages received from other people are read into the agent's context.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install iris-chat
Said no? Turn it on later:
hermes plugins enable iris-chat
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Write one namespace in cluster.json to approve the scope, then use four reads: list pods, get one pod, list events, and read logs. Kubernetes is a registered trademark of The Linux Foundation. kubernetes-mcp-server 0.0.68 is the GitHub release binary. The plugin downloads kubernetes-mcp-server-<os>-<arch> from https://github.com/containers/kubernetes-mcp-server/releases/download/v0.0.68/ into the plugin data directory, checks the sha256 against constants taken from that release's GitHub asset digest, and starts that file. MCP initialize and tools/list are answered before that download. A partial download is kept and continued with HTTP Range. A mismatch, including a file that was already there, is refused. read_only is true, toolsets stay core, and only pods_list_in_namespace, pods_get, events_list, and pods_log are enabled. Helm is not offered. Secret, ConfigMap, and ServiceAccount are denied. configuration_view is not listed. prod, production, live, and prd names are refused unless allow_production is true. Public and link-local hosts are always refused. The host must be local, and DNS is not resolved. readOnlyHint is true, so no approval card is shown. Before the call, name the namespace, the object, and that it only reads, because status, events, and logs reach the model. This plugin does not create a cron job.
Good to know before installing
Reads the kubeconfig you name in cluster.json (read-only) and sends its token only to that kubeconfig's API host (plain http sends it unencrypted); on the first tool call downloads the kubernetes-mcp-server 0.0.68 GitHub release binary (~90 MB) into the plugin data directory, refuses it unless its sha256 matches the pinned release digest, and runs it as a subprocess (a file swap between the check and the start is not fully excluded); pod status, events and logs reach the model, with password-like env values and last-applied-configuration redacted; no HTTP proxy is used; gateway users can call these read tools with that kubeconfig; stop with hermes plugins disable kubernetes or hermes tools disable mcp-kubernetes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install kubernetes
Said no? Turn it on later:
hermes plugins enable kubernetes
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Levea Video Editor
Community
Agentic AI video editing via Levea: describe an edit in plain language (trim, 9:16 reframe, viral clips, captions, B-roll, multicam, audio cleanup, color, motion graphics) and get a verified MP4.
Agentic AI video editing via Levea: describe an edit in plain language (trim, 9:16 reframe, viral clips, captions, B-roll, multicam, audio cleanup, color, motion graphics) and get a verified MP4.
Good to know before installing
Prompts, source video URLs/assets and project ids go to api.livecore.ai with your LEVEA_API_KEY; edits and exports consume your Levea account quota with no Hermes approval prompt; levea_video_edit and levea_job_status (wait) can block up to 10 minutes. No telemetry, no shell, no background processes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs LEVEA_API_KEY), then asks whether to turn it on.
hermes plugins install levea-video-editor
Said no? Turn it on later:
hermes plugins enable levea-video-editor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Minimalist Themes
Community
Eighteen warm, readable palettes for Hermes Desktop, assigned natively per profile, with one embedded type system (Figtree + Geist Mono), matching terminal colors and a CLI banner painted per palette.
Eighteen warm, readable palettes for Hermes Desktop, assigned natively per profile, with one embedded type system (Figtree + Geist Mono), matching terminal colors and a CLI banner painted per palette.
Good to know before installing
Theme-only plugin: it registers eighteen themes through the plugin SDK, and its stylesheet adjusts a few Desktop surfaces (profile-rail glyph contrast, Capabilities metadata, the MCP JSON editor and the Manage Profiles overlay) only while a Minimalist theme is active. It also ships optional CLI/TUI skins as plain YAML files the user copies; the Desktop side never reads them. Fonts are bundled; no network requests, no agent tools or hooks, no background processes. The package also ships an inert Agent entrypoint whose register() does nothing, so Hermes Agent imports it cleanly instead of reporting a missing module.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install minimalist-themes
Said no? Turn it on later:
hermes plugins enable minimalist-themes
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Modular Cloud model-provider plugin — OpenAI-compatible API for open models (MiniMax, DeepSeek, Gemma), with per-model reasoning controls.
How to install
Install it. Hermes asks for any API keys it needs (this one needs MODULAR_API_KEY), then asks whether to turn it on.
hermes plugins install modular
Said no? Turn it on later:
hermes plugins enable modular
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Netplane
Community
Install, configure and operate a self-hosted Headscale control plane from Hermes. netplane_setup previews a configuration and, after approval, installs the pinned official Headscale v0.29.6 DEB on a fresh…
Install, configure and operate a self-hosted Headscale control plane from Hermes. netplane_setup previews a configuration and, after approval, installs the pinned official Headscale v0.29.6 DEB on a fresh Debian 12+ or Ubuntu 22.04+ systemd host (amd64/arm64). Installation runs on the Hermes host, requires root or noninteractive sudo, refuses existing deployments, and verifies the package SHA-256. It configures SQLite, MagicDNS, embedded DERP/STUN, local admin gRPC, and either Let's Encrypt HTTPS or a loopback backend for an existing reverse proxy. It starts the system service, creates the first user, and saves a 90-day API key and connection settings through Hermes's active-profile APIs. netplane_status reports health, netplane_nodes lists devices, and netplane_preauth lists metadata without stored join secrets or creates an approval-gated, single-use-by-default join key with a 1–168 hour lifetime. Desktop includes setup preview/confirmation, health, nodes, join keys and confirmed node expiration, with a FastAPI backend. Management requires NETPLANE_APIKEY; setup works before a key exists. Bundled protobuf stubs use pinned sources and a compatible toolchain.
Good to know before installing
The netplane_setup tool (after Hermes approval) and the Desktop pane (after confirmation) install the pinned official Headscale v0.29.6 DEB as root through noninteractive sudo on the Hermes host, downloading it from GitHub (SHA-256 verified) and possibly contacting configured APT repositories; it writes /etc/headscale, /var/lib/headscale and a systemd drop-in, and enables a persistent headscale service that in Let's Encrypt mode listens publicly on TCP 80/443 and UDP 3478 (admin gRPC and metrics stay on loopback); Let's Encrypt receives the chosen domain and email; setup saves a new 90-day Headscale API key as NETPLANE_APIKEY in the active Hermes profile; management reads credentials only from Hermes and uses TLS with system trust off-host; approved join-key creation returns the key into the chat; status runs systemctl is-active headscale and tailscale serve status; no telemetry and no automatic software updates.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install netplane
Said no? Turn it on later:
hermes plugins enable netplane
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Private mesh networking through the separately installed nvpn CLI. Instruction-only skill; connects to relays and peers and starts a persistent daemon. Tunnels need elevated host networking privileges.
Good to know before installing
Instruction-only skill: the agent runs the separately installed nvpn CLI in the terminal (installed by the user, or by the agent from the project's latest GitHub release or an unpinned `cargo install nvpn`), which creates local device keys, connects to Nostr relays and peers, starts a persistent daemon that with elevated privileges creates tunnel interfaces and routes, and on an admin host can approve devices into the user's private network.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install nostr-vpn
Said no? Turn it on later:
hermes plugins enable nostr-vpn
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Obscurify.ai
Community
Obscurify.ai as a Hermes model provider (`--provider obscurify`, or Obscurify.ai in `hermes model`): a privacy-focused, OpenAI-compatible API to 200+ models with zero-data-retention routes and account-number…
Obscurify.ai as a Hermes model provider (`--provider obscurify`, or Obscurify.ai in `hermes model`): a privacy-focused, OpenAI-compatible API to 200+ models with zero-data-retention routes and account-number sign-up (no email). The model list leaves out decision models and models under Hermes' 64K context minimum, context windows come from the catalog, and reasoning effort is sent as `reasoning_effort`.
Good to know before installing
Registers one model provider at import and nothing else (no tools, hooks, commands or threads); chat requests go to https://obscurify.ai/v1 through Hermes' own client with OBSCURIFY_API_KEY, which Hermes reads; the plugin itself only fetches the public model catalog (GET https://obscurify.ai/v1/models, no credentials) at most once an hour per process, reads and writes no files and starts no processes. Usage is billed from the user's prepaid Obscurify.ai balance; the plugin makes no payments.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs OBSCURIFY_API_KEY), then asks whether to turn it on.
hermes plugins install obscurify-provider
Said no? Turn it on later:
hermes plugins enable obscurify-provider
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
QQ (OneBot)
Community
QQ bot via the OneBot 11 protocol: connects Hermes to your own self-hosted NapCat, Lagrange, LLOneBot or go-cqhttp deployment over WebSocket — the plugin hosts a reverse-WS server inside the Hermes gateway, or…
QQ bot via the OneBot 11 protocol: connects Hermes to your own self-hosted NapCat, Lagrange, LLOneBot or go-cqhttp deployment over WebSocket — the plugin hosts a reverse-WS server inside the Hermes gateway, or dials an existing forward-WS endpoint — and adds the qq toolset (qq_send_image, qq_send_voice, qq_send_video, qq_send_file, qq_send_forward, qq_napcat_api, qq_group_history) for DM and group chats with admin allowlists, group mention gating, per-member soft limits, and cron/notification delivery to a configured home channel. Inbound images are downloaded and (with Pillow) downscaled before the vision tool sees them; long replies are split at sentence boundaries or rendered locally into a text image with fonttools/Pillow.
Good to know before installing
Talks only to the user's own OneBot deployment; the plugin's listener (default port 8643) is a long-running background server inside the Hermes gateway process that accepts the bridge's reverse WebSocket and also serves the qq_* tools' local HTTP API, refuses a non-loopback bind without an access token, and limits tool sends from a QQ session to that chat or the configured home channel unless the session is an admin user's private chat; inbound message images are downloaded from that deployment into the plugin's data directory for the vision tool; text-to-image rendering runs locally (fonttools, Pillow, system CJK fonts) with no third-party calls; credentials (the OneBot access token, allowed-user lists, home channel) reach the plugin only through Hermes's secret scope and ONEBOT_* config and go nowhere but your own OneBot deployment; no telemetry or usage reporting.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install onebot-platform
Said no? Turn it on later:
hermes plugins enable onebot-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Real OpenCode CLI over ACP as a Hermes model provider, with curated free-model selection and Hermes-owned tool execution and approvals. Independent stdlib transport using only the documented provider API, not an HTTP compatibility client or a handoff to OpenCode's autonomous tools.
Good to know before installing
Starts the separately installed opencode acp executable for discovery/inference in the included restricted workspace; forwards the conversation, tool schemas and results to OpenCode and its selected upstream model. The CLI uses its normal HOME/configuration/login and may load user-configured vendor plugins/hooks; its normal network calls, local records and vendor terms apply. Child environment is allowlisted; Hermes/provider keys and YOLO settings are not inherited. Plugin code reads no credential stores, writes no runtime state, makes no direct network calls, installs no binaries and sends no telemetry. Native ACP permission/file/terminal requests are refused, native tool events abort the request, and selection must be confirmed before inference. This is not an OS sandbox or an authorization to use OpenCode; broader vendor policies can override workspace restrictions, and free availability/pricing/privacy can change.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install opencode-free-acp
Said no? Turn it on later:
hermes plugins enable opencode-free-acp
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Perf HUD
Community
Live performance HUD for Hermes Desktop: a status-bar chip with core-compatible TPS (sum of output tokens over sum of API durations for the last 10 completed calls, the same window and arithmetic as Hermes' own…
Live performance HUD for Hermes Desktop: a status-bar chip with core-compatible TPS (sum of output tokens over sum of API durations for the last 10 completed calls, the same window and arithmetic as Hermes' own status bar) in `tps`, `tps_ttft` or `calls` form, and a statistics popover with TPS, a separately labelled Session Avg TPS (the same ratio over every call in the session), median TTFT from `first_chunk_at`, LLM calls, an `Agent steps*` compatibility alias (equal to LLM calls, footnoted inside the snapshot by `agent_steps_note`), turns, errors, input, output and cache-read tokens, cache hit rate on Hermes' `cache_read / (cache_read + input)` buckets, tool calls and tool time, tool time share, wall-clock session duration, and the model and provider. Two controls — Reset current statistics (clears the plugin's own in-memory counters, never Hermes session state) and Clear history — plus local performance history for the last 50 sessions. Observes only: nine observer hooks, no tool or message is ever blocked, rewritten or reordered, no Hermes core file is touched, the aggregation layer is pure with no I/O and no host imports, all handlers are fail-open so a telemetry bug cannot break a turn, and a corrupt history file is quarantined instead of raised.
Good to know before installing
Reads only from the observer payloads: token usage buckets (input, output, cache read, cache write, reasoning), API and tool timings, first-chunk timestamps, model and provider names, session ids, and tool names plus error status for the counts; prompts, model responses, conversation contents, tool arguments and tool results are never read and have no field in its snapshot, its desktop event or its history record. Writes exactly one JSON file per profile at `<HERMES_HOME>/plugin-data/agent-plugin-perf-hud-*/history.json` containing only session_id, model, provider, started_at, updated_at, duration_ms, ttft_ms, tps_core, input_tokens, output_tokens, cache_hit_pct, tool_time_ms and llm_calls, allow-list enforced, atomic, capped at 50 sessions; no other disk writes, and no config change beyond the documented `plugins.entries.perf-hud.settings.*` keys (chip_enabled, chip_metric, history_enabled, history_max_sessions, poll_ms, broadcast_min_interval_ms). Desktop updates travel over Hermes' in-process plugin event bridge (`broadcast_plugin_event`, topic `plugin.perf-hud.stats.update`, throttled to 400 ms) and its REST routes are served by the user's own local dashboard at /api/plugins/pe
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install perf-hud
Said no? Turn it on later:
hermes plugins enable perf-hud
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Runa
Community
Bring your Runa meetings into Hermes: prep for what's next, recap decisions and who owes what, draft the follow-up, and find the exact words behind a claim, through Runa's hosted MCP server (Streamable HTTP,…
Bring your Runa meetings into Hermes: prep for what's next, recap decisions and who owes what, draft the follow-up, and find the exact words behind a claim, through Runa's hosted MCP server (Streamable HTTP, OAuth 2.1), with four workflow skills bundled. Portable Agent Plugins v1 package (plugin.json + mcp.json + skills/).
Good to know before installing
Hosted-only connector with no local code: every tool call goes to Runa's MCP server at mcp.joinruna.com, signed in as the user through Runa's sign-in (Google or Microsoft), and a first sign-in creates a Runa account. Meeting titles, summaries, transcripts, action items, people and company notes, and reads from apps the user connected to Runa are pulled into the session context, and so reach the user's model provider. No tool changes data in Runa or in those apps; Runa logs each call's metadata. The tool list comes from Runa's server at run time, so the pinned commit doesn't cover it. Hermes stores and refreshes the OAuth tokens. OAuth must be enabled with `hermes mcp add runa --url https://mcp.joinruna.com/mcp --auth oauth --connect-timeout 300`; the bundled mcp.json alone yields 401.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install runa
Said no? Turn it on later:
hermes plugins enable runa
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Session Relay
Community
Hands a long-running conversation over to a fresh session before the context window fills up: a ⚡ chip in the status bar shows live context usage, and at the threshold (45% by default) the agent writes a…
Hands a long-running conversation over to a fresh session before the context window fills up: a ⚡ chip in the status bar shows live context usage, and at the threshold (45% by default) the agent writes a hand-off note while the plugin opens a new chat, seeded with that note as its first message and named after the current one (+1). On Telegram and other messaging platforms the gateway half provides a session_relay_handoff tool; after /new it attaches that chat's note to the first message of the new session, so the fresh session opens with the hand-off.
Good to know before installing
Each relay runs one extra agent turn and therefore uses model tokens.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install session-relay
Said no? Turn it on later:
hermes plugins enable session-relay
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Signal texts when a Hermes turn pauses, fails or is interrupted, and when Hermes waits on a clarify question, approval or sudo prompt. Sends through the user's own signal-cli HTTP daemon (the same SIGNAL_* settings as the core Signal gateway); skips Signal-origin, cron and subagent turns, and dedupes identical texts within 60s. Outbound-only, no input channel.
Good to know before installing
Enabled turns POST to SIGNAL_HTTP_URL (plain HTTP unless that URL is https), which signal-cli delivers as a Signal message; by default each text includes up to 300 characters of the final reply (not secret-redacted) or of the redacted question/command (reply_chars: 0 sends none); sudo passwords and clarify answers are never seen; nothing is stored on disk, at most 64 clipped reply previews are kept in memory, and each send runs on a short-lived daemon thread with a 20s timeout.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SIGNAL_HTTP_URL, SIGNAL_ACCOUNT, SIGNAL_HOME_CHANNEL), then asks whether to turn it on.
hermes plugins install signal-notify
Said no? Turn it on later:
hermes plugins enable signal-notify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Smol machines
Community
smol machines' own plugin: runs Hermes's terminal, file and code tools in a smol machine, a microVM with its own Linux kernel on this computer (macOS on Apple Silicon, or Linux with KVM), as a terminal backend…
smol machines' own plugin: runs Hermes's terminal, file and code tools in a smol machine, a microVM with its own Linux kernel on this computer (macOS on Apple Silicon, or Linux with KVM), as a terminal backend (`hermes config set terminal.backend smolmachines`). It needs no Docker and no account.
Good to know before installing
Installs the `smolmachines` Python SDK (>=1.27.2,<2), which carries the VM engine. Everything runs on this computer: the plugin always asks the SDK for a local machine, so nothing is sent to smol machines' cloud, even with SMOL_CLOUD_TOKEN set or the smol CLI signed in (Hermes strips SMOL_CLOUD_TOKEN from the commands it runs). Creating a machine pulls its image (default `python:3.12-slim`, from Docker Hub), and the engine pulls with this computer's Docker registry login when one is configured (`~/.docker/config.json`, including a credential helper such as the macOS keychain), read-only and sent only to the registry being pulled from. A machine has outbound network access and mounts nothing from this computer. With `terminal.container_persistent` (the Hermes default) each Hermes home and session keeps one machine, which keeps running after Hermes exits until stopped or deleted with the smolvm CLI, otherwise the machine is deleted when the session ends. Because the machine is a disposable sandbox, Hermes skips its dangerous-command prompts there, as it does for its other container backends.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install smolmachines
Said no? Turn it on later:
hermes plugins enable smolmachines
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Super Artifacts
Community
Publish pages, forms, trackers and proofs as live URLs that open on a phone, and read back what visitors submit, through the hosted Super Artifacts MCP server (Streamable HTTP, OAuth 2.1 + DCR), with the…
Publish pages, forms, trackers and proofs as live URLs that open on a phone, and read back what visitors submit, through the hosted Super Artifacts MCP server (Streamable HTTP, OAuth 2.1 + DCR), with the super-artifacts workflow skill bundled. Portable Agent Plugins v1 package (mcp.json + skills/), no code.
Good to know before installing
Hosted-only connector: every tool call goes to superartifacts.app/mcp; published artifacts and what visitors submit to them are stored on Super Artifacts' servers. Artifacts are private by default, and the skill tells the model to publish private and never widen who can open one unless the person asked; Hermes does not prompt before these tools run unless you set `trust: untrusted` on the server. No telemetry. OAuth must be enabled with `hermes mcp add super-artifacts --url https://superartifacts.app/mcp --auth oauth --connect-timeout 300`; the bundled mcp.json alone yields 401.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install super-artifacts
Said no? Turn it on later:
hermes plugins enable super-artifacts
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
TaskWatch
Community
Background-task watchboard for the Hermes Desktop status bar and a side pane: every process the focused chat dispatched through terminal(background=true) (claude, opencode, codex, a build, anything) with live…
Background-task watchboard for the Hermes Desktop status bar and a side pane: every process the focused chat dispatched through terminal(background=true) (claude, opencode, codex, a build, anything) with live output tail, runtime, a silence heartbeat, a two-click stop, and OS notifications when a task goes quiet past a configurable threshold or exits (success/failure by exit code). Agent-agnostic by construction — it renders the gateway's own process.list projection for the focused session. Desktop-only (desktop/plugin.js inside the plugin SDK surface); no agent tools, hooks, middleware, env vars or network. Everything is local.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install taskwatch
Said no? Turn it on later:
hermes plugins enable taskwatch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Live output/input tokens-per-second chip in the Hermes Desktop status bar for a local llama.cpp server. Hermes itself reads the server's log ($HERMES_HOME/logs/llama-server.log, last 200 lines: `tg = X t/s` for output and `prompt eval time ... X tokens per second` for input) and serves it at /api/plugins/token-rate/; the chip polls that route once a second. The counter starts off — click the chip, or run the palette entry "Token Rate: start/stop the tok/s counter" (Ctrl/Cmd+K), to start it; the on/off flag is a file ($HERMES_HOME/cache/token-rate-state.json). It also registers the get_token_rate agent tool, so the model can read its own speed.
Good to know before installing
It reads one local file (the llama.cpp log) and nothing else: no network calls, no external process, no extra port, no API key, no credentials, no telemetry. UI is English by default, Italian when the app locale is Italian.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install token-rate
Said no? Turn it on later:
hermes plugins enable token-rate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Speech-to-text for Hermes via DashScope (Qwen) — voice messages and live dictation. Needs a Qwen AI Platform API key.
Good to know before installing
Voice messages and live dictation audio are uploaded to Alibaba's Qwen AI Platform (DashScope, maas.qianwenaiapi.com by default, or the base URL set in stt.dashscope.base_url / TRANSCRIPTION_DASHSCOPE_BASE_URL / DASHSCOPE_BASE_URL); the API key is TRANSCRIPTION_DASHSCOPE_API_KEY, falling back to the HERMES_CUSTOM_DASHSCOPE_API_KEY custom-provider key or the built-in Alibaba provider's DASHSCOPE_API_KEY; clips are converted with the local ffmpeg into a temporary wav that is deleted afterwards.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install transcription-dashscope
Said no? Turn it on later:
hermes plugins enable transcription-dashscope
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Tripwire
Community
Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert.
Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert. Observer only: it stores no tool arguments, results or message text, and fails open.
Good to know before installing
Appends one JSON line per refused action (profile, tool name, block type or approval choice, session id, and the first 120 characters of the block reason or approval rule) to ~/.hermes/tripwire/events.jsonl, shared by all profiles (path overridable with TRIPWIRE_EVENTS); a pre_tool_call hook reads ~/.hermes/tripwire/TEST_BLOCK and, only while that file exists, blocks the single tool it names for the single profile it names (a drill switch to prove the alarm). No network calls, no shell commands, no background processes, no stored credentials, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install tripwire
Said no? Turn it on later:
hermes plugins enable tripwire
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Uuid Ref
Community
@uuid: context references that decode a UUID or ULID for the model: @uuid:<id> takes a UUID in any common spelling (hyphens or not, braces, upper case, urn:uuid:) or a ULID, and attaches what its bits say, read…
@uuid: context references that decode a UUID or ULID for the model: @uuid:<id> takes a UUID in any common spelling (hyphens or not, braces, upper case, urn:uuid:) or a ULID, and attaches what its bits say, read the way RFC 9562 lays them out: version and variant in words, the creation time a v1, v6, v7 or ULID carries in UTC with how long ago, the clock sequence and node of a v1 or v6 and whether the node is random or looks like a network card (MAC) address, the local id and domain of a v2, a ULID's 128 bits written as a UUID, and the Nil, Max and RFC namespace UUIDs by name; up to 10 identifiers in one reference are compared by creation time; the TUI and Desktop composer preview an identifier as you type it.
Good to know before installing
Reads only the text of the reference itself and the system clock, using Python's re, datetime and fractions; nothing is looked up; no network, no files read or written, no subprocess, no credentials read; the plugin keeps no copy of the identifiers, but the @uuid: reference and the decoded text become part of the message sent to your model provider and saved in the session history; register() only adds the @uuid: reference provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install uuid-ref
Said no? Turn it on later:
hermes plugins enable uuid-ref
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
X Dashboard
Community
Zero-cost ($0.00) X analytics dashboard for Hermes Web and Desktop with profile KPIs, verified-follower & impression goal tracking, post/mention feeds, SVG charts, and CSV/JSON export.
Zero-cost ($0.00) X analytics dashboard for Hermes Web and Desktop with profile KPIs, verified-follower & impression goal tracking, post/mention feeds, SVG charts, and CSV/JSON export.
Good to know before installing
Free Mode fetches public profile and post metadata from api.fxtwitter.com / api.vxtwitter.com and r.jina.ai and caches snapshots in <hermes_home>/plugin-data/x-dashboard/; when the xurl CLI is on PATH it runs `xurl auth status` locally to detect your linked handle; optional xAI x_search discovery (enable_x_search=true, billed to your xAI account) and Live X API v2 mode (api.x.com with X_BEARER_TOKEN, or the xurl CLI) run only when explicitly opted in.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs X_DASHBOARD_HANDLE, X_BEARER_TOKEN, XAI_API_KEY), then asks whether to turn it on.
hermes plugins install x-dashboard
Said no? Turn it on later:
hermes plugins enable x-dashboard
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
You should know
Community
A side agent rereads the conversation while Hermes works on longer turns and surfaces the one thing you might have missed — a silent tradeoff, an unverified result, an irreversible action — as a dismissible…
A side agent rereads the conversation while Hermes works on longer turns and surfaces the one thing you might have missed — a silent tradeoff, an unverified result, an irreversible action — as a dismissible note above the prompt.
Good to know before installing
On tool-using turns in Desktop, CLI and TUI (configurable via `platforms`), sends up to 12,000 characters of the recent conversation, including clipped tool calls and results, to Hermes's configured auxiliary model up to five extra times per turn (45 s cooldown), which adds model cost; notes are stored in the plugin's own data folder.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install you-should-know
Said no? Turn it on later:
hermes plugins enable you-should-know
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Zoth Studio tool catalog and ZOTHOS local-service tools (search/open Studio tools, probe Zoth services on 127.0.0.1, pull published tools)
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install zoth
Said no? Turn it on later:
hermes plugins enable zoth
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.