Every Hermes plugin, in one place

Makes Ollama Cloud's off-peak window visible and actionable in Hermes: a desktop status-bar chip shows the countdown and the queue item counts (Ollama off-peak hours: weekdays 18:00-12:00 UTC, weekends one block), a one-shot notice fires 30 minutes before the window opens, and approval is taken only from the user (`/offpeak-onayla <id,id>`) — work runs only if approved, and items never enter the queue by themselves. `/offpeak-durum` prints a readable report by default (machine-readable JSON with `/offpeak-durum json`), and `/offpeak-kur` prints the cron job it would install in full plus a `plan_hash`; nothing is installed without a hash-bound approval typed by the user, and the plugin never writes the cron store. One `llm_execution` middleware measures the call rate for Ollama Cloud calls during the peak window and ships measure-only (`kuru_kosu: true`): it records what it would delay and never delays. No network calls, no telemetry, no credential reads; the only local files it touches are the queue ledger, its own JSONL measurement log, and a read-only look at the profile's cron/jobs.json. Output language is English by default; `dil: tr` selects Turkish. Auto-delivery is host-dependent: in a classic CLI session the request enters the agent queue; on the Ink TUI / desktop-panel host the core asks for a persistent `session_key`, which the command handler does not receive, so the command prints the parameters as a single line of JSON. Injecting into a gateway additionally requires `plugins.entries.offpeak-bekci.allow_gateway_injection: true` (default off); the only in-process way to read that key is the private `gateway.session_context` module (rule 9 -> not used). Requires Hermes >= 0.22.2.

Category

Security & privacy · Hermes Desktop add-ons

Maintained by

onkanat (Community)

Needs

No API keys declared

Needs Hermes

0.22.2 or newer

Version

0.1.8

In the catalog

2026-10-17, updated 2026-10-24

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Multi-repo GitHub issues & PRs in an Orca-style Tasks view for Hermes Desktop.

Category

Security & privacy · Hermes Desktop add-ons

Maintained by

meviusisback (Community)

Needs

No API keys declared

Needs Hermes

0.21.1 or newer

Version

0.2.0

In the catalog

2026-10-18, updated 2026-10-23

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Everything that snagged - cross-session shelf of failed tool calls. Full Desktop page, chip, pin, fix-prompt insert. No API keys.

Category

Security & privacy · Hermes Desktop add-ons

Maintained by

aydnOktay (Community)

Needs

No API keys declared

Adds tools

snag_shelf_list snag_shelf_clear

Needs Hermes

0.21.5 or newer

Version

0.1.0

In the catalog

2026-10-02

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Store a secret on the gateway host without showing it to the model.

Category

Security & privacy · Hermes Desktop add-ons

Maintained by

Goitonthefloor (Community)

Needs

No API keys declared

Version

1.4.0

In the catalog

2026-09-26

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Jev-powered Hermes plugin for skill/model routing, typed assess, DOM/Cua computer use, adaptive reasoning effort with a per-turn receipt line, and FTS rerank.

Category

Security & privacy

Maintained by

bgrablin (Community)

Needs

No API keys declared

Adds tools

jev_assess jev_computer_use jev_skill_select jev_skill_select_many jev_model_route jev_model_route_approved jev_session_search_rerank

Works on

linux, macos, windows

Needs Hermes

0.21.3 or newer

Version

0.6.0

In the catalog

2026-09-26, updated 2026-10-05

GitHub stars

9

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

EU Mode (beta): HaloGuard EU, Astroware's guard API hosted in the EU, checks each message and each reply (allow or block). EU Mode looks for personal data in what users send and masks what it finds before the request reaches the model, then puts the originals back in the reply, on your machine.

Category

Security & privacy · AI models & providers

Maintained by

AstrowareAI (Community)

Needs

HALOGUARD_API_KEY API key

Needs Hermes

0.20.0 or newer

Version

0.1.1

In the catalog

2026-10-29

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Write one namespace in cluster.json to approve the scope, then use four reads: list pods, get one pod, list events, and read logs. Kubernetes is a registered trademark of The Linux Foundation. kubernetes-mcp-server 0.0.68 is the GitHub release binary. The plugin downloads kubernetes-mcp-server-<os>-<arch> from https://github.com/containers/kubernetes-mcp-server/releases/download/v0.0.68/ into the plugin data directory, checks the sha256 against constants taken from that release's GitHub asset digest, and starts that file. MCP initialize and tools/list are answered before that download. A partial download is kept and continued with HTTP Range. A mismatch, including a file that was already there, is refused. read_only is true, toolsets stay core, and only pods_list_in_namespace, pods_get, events_list, and pods_log are enabled. Helm is not offered. Secret, ConfigMap, and ServiceAccount are denied. configuration_view is not listed. prod, production, live, and prd names are refused unless allow_production is true. Public and link-local hosts are always refused. The host must be local, and DNS is not resolved. readOnlyHint is true, so no approval card is shown. Before the call, name the namespace, the object, and that it only reads, because status, events, and logs reach the model. This plugin does not create a cron job.

Category

Security & privacy · AI models & providers

Maintained by

TakeshiTGAL (Community)

Needs

No API keys declared

Adds tools

mcp__kubernetes__pods_list_in_namespace mcp__kubernetes__pods_get mcp__kubernetes__events_list mcp__kubernetes__pods_log

Needs Hermes

0.21.4 or newer

Version

0.1.0

In the catalog

2026-10-29

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Install, configure and operate a self-hosted Headscale control plane from Hermes. netplane_setup previews a configuration and, after approval, installs the pinned official Headscale v0.29.6 DEB on a fresh Debian 12+ or Ubuntu 22.04+ systemd host (amd64/arm64). Installation runs on the Hermes host, requires root or noninteractive sudo, refuses existing deployments, and verifies the package SHA-256. It configures SQLite, MagicDNS, embedded DERP/STUN, local admin gRPC, and either Let's Encrypt HTTPS or a loopback backend for an existing reverse proxy. It starts the system service, creates the first user, and saves a 90-day API key and connection settings through Hermes's active-profile APIs. netplane_status reports health, netplane_nodes lists devices, and netplane_preauth lists metadata without stored join secrets or creates an approval-gated, single-use-by-default join key with a 1–168 hour lifetime. Desktop includes setup preview/confirmation, health, nodes, join keys and confirmed node expiration, with a FastAPI backend. Management requires NETPLANE_APIKEY; setup works before a key exists. Bundled protobuf stubs use pinned sources and a compatible toolchain.

Category

Security & privacy

Maintained by

lEWFkRAD (Community)

Needs

No API keys declared

Needs Hermes

0.21.6 or newer

Version

0.3.1

In the catalog

2026-10-29

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Obscurify.ai as a Hermes model provider (`--provider obscurify`, or Obscurify.ai in `hermes model`): a privacy-focused, OpenAI-compatible API to 200+ models with zero-data-retention routes and account-number sign-up (no email). The model list leaves out decision models and models under Hermes' 64K context minimum, context windows come from the catalog, and reasoning effort is sent as `reasoning_effort`.

Category

AI models & providers · Security & privacy

Maintained by

Obscurify-ai (Community)

Needs

OBSCURIFY_API_KEY API key

Needs Hermes

0.22.5 or newer

Version

1.0.0

In the catalog

2026-10-29

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.

Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert. Observer only: it stores no tool arguments, results or message text, and fails open.

Category

Security & privacy · Automation & multi-agent

Maintained by

percyhendrux123-prog (Community)

Needs

No API keys declared

Needs Hermes

0.22.5 or newer

Version

0.1.1

In the catalog

2026-10-30

Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.