909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
102 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Deferred Questions
Community
Durable non-blocking questions with exact answer binding and gateway continuation.
Durable non-blocking questions with exact answer binding and gateway continuation.
Good to know before installing
Its pre_gateway_dispatch hook sees every gateway message and consumes only `dq <id> …` answers from the stored recipient; with `enable_tool` on, the model can send questions to any chat the gateway already authorizes, and a question marked continue_agent resumes that chat's agent with the user's answer; questions and answers are stored unencrypted in $HERMES_HOME/deferred-questions/questions.sqlite3; it calls private gateway and adapter methods, so a Hermes update can break delivery until it is re-pinned.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install deferred-questions
Said no? Turn it on later:
hermes plugins enable deferred-questions
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
LLM Council (karpathy/llm-council) as a Hermes plugin. Four fixed advisor seats (First-Principles Analyst, Skeptic, Pragmatist, Researcher) answer in parallel, anonymously review and rank each other, and a Chairman model synthesizes the final answer. Members borrow your existing provider credentials - no API keys. Registers a Council group in every model menu, a council_deliberate tool, /council, hermes council CLI, and a desktop panel.
Good to know before installing
Council_deliberate and the Council model fan each prompt (as a session model, the whole conversation) out to every seat, judge and chairman model you assign, up to 2N+1 billed calls per turn on your existing provider credentials; it also adds a non-secret "council" marker row to auth.json and keeps run history in $HERMES_HOME/council/runs/.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-council
Said no? Turn it on later:
hermes plugins enable hermes-council
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Pocket Watch
Community
Dashboard-only cron companion: a Pocket Watch pane showing cron jobs by schedule (daily/weekly/monthly), a health view of run outcomes and consecutive failures, a timeline, and maintenance actions — a read-oriented…
Dashboard-only cron companion: a Pocket Watch pane showing cron jobs by schedule (daily/weekly/monthly), a health view of run outcomes and consecutive failures, a timeline, and maintenance actions — a read-oriented window onto the scheduler rather than another agent-facing toolset.
Good to know before installing
The pane's API reads the cron jobs file under HERMES_HOME to render schedules and run history; it registers no tools, hooks or middleware, performs no network I/O and holds no credentials.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install pocket-watch
Said no? Turn it on later:
hermes plugins enable pocket-watch
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Microsoft-Decision-1 (Azure AI Foundry System One) decision provider for bounded agent decisions. Registers typed-decision tools (decision_noul, decision_choice, decision_score, decide) that preserve full probability distributions, plus an opt-in pre_tool_call hook that requests human approval for known-risk calls without sending their arguments to Azure. Reference implementation of the typed decision-provider runtime in #113008.
Good to know before installing
The four decision tools send the caller-supplied state/questions text to the Azure Foundry endpoint you set in AZURE_FOUNDRY_BASE_URL (nothing is sent while it is unset); with MS_DECISION_GATE=1 the pre_tool_call gate sends only a coarse operation label for known-risk tool calls to that endpoint and routes them to Hermes's human approval prompt (MS_DECISION_GATE_MODE=block hard-denies instead); the labelled eval corpus under tests/ contains literal destructive commands as should-refuse examples.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs AZURE_FOUNDRY_API_KEY, AZURE_FOUNDRY_BASE_URL), then asks whether to turn it on.
hermes plugins install ms-decision-provider
Said no? Turn it on later:
hermes plugins enable ms-decision-provider
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Unitares
Community
Records each Hermes session on a UNITARES server you run: one identity per session and one check-in per completed turn, so the agent's working record carries across sessions.
Records each Hermes session on a UNITARES server you run: one identity per session and one check-in per completed turn, so the agent's working record carries across sessions. Fail-open; never blocks the agent.
Good to know before installing
Sends only to the server named in UNITARES_MCP_URL, which you host; there is no default server. Per session it sends your model name and platform; per completed turn a fixed check-in marker (never user, assistant or tool text). Hooks run synchronously, so an unresponsive server can delay a call by roughly 40 seconds (connection plus call timeout). After 3 consecutive failures the plugin stops reporting for that session only, until the session is finalized or reset; it stays fail-open and never blocks the agent. If UNITARES_BEARER is set, it is sent as a request header to that same server only.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs UNITARES_MCP_URL), then asks whether to turn it on.
hermes plugins install unitares
Said no? Turn it on later:
hermes plugins enable unitares
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Typesafe Skill Router
Community
TypeSafe (Jev) skill routing: the request is routed before the model call and the one skill from the live roster that fits it is named in a single <skill_relevance> line on the user message — nothing is injected when…
TypeSafe (Jev) skill routing: the request is routed before the model call and the one skill from the live roster that fits it is named in a single <skill_relevance> line on the user message — nothing is injected when nothing fits.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TYPESAFE_API_KEY), then asks whether to turn it on.
hermes plugins install typesafe-skill-router
Said no? Turn it on later:
hermes plugins enable typesafe-skill-router
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
MCP Plugin Creator
Community
Turn any MCP server into a portable Agent Plugin (mcp.json + workflow skill) built from evidence: the server's self-description, your past sessions with it, its docs and a read-only probe.
Turn any MCP server into a portable Agent Plugin (mcp.json + workflow skill) built from evidence: the server's self-description, your past sessions with it, its docs and a read-only probe. Validates and installs the package in linked mode, and checks a built plugin for server drift and new errors in use.
Good to know before installing
Starts the target MCP server to introspect it; reads this profile's state.db read-only; logs redacted mcp__* call summaries locally (log_calls: false turns it off); inline server launches, writes outside its data dir and installs ask for approval.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install mcp-plugin-creator
Said no? Turn it on later:
hermes plugins enable mcp-plugin-creator
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
View and manage Bot Mode agents in a shared office in Hermes Desktop.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-office
Said no? Turn it on later:
hermes plugins enable hermes-office
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Opt-in idle/daily gateway conversation resets. Reads the existing session_reset block (mode idle | daily | both, idle_minutes, at_hour) and starts a fresh session on the first inbound message past the boundary. No timers, no background writes.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jev Skill Router
Community
Names the one skill from your live roster that fits the turn, before the model call — typed routing via TypeSafe Jev (one choice over the roster plus gate booleans, then a re-read of the shortlist with per-candidate…
Names the one skill from your live roster that fits the turn, before the model call — typed routing via TypeSafe Jev (one choice over the roster plus gate booleans, then a re-read of the shortlist with per-candidate fits), with both thresholds applied in code. Says nothing when nothing fits; opt-in, fail-open, stdlib only, no Node; no redirects, proxy env ignored, payload capped.
Good to know before installing
On eligible turns it sends your message (up to 4,000 chars) plus skill names and short SKILL.md excerpts from your local roster to TypeSafe, OpenRouter, or your configured gateway, using your key. With backend auto an OpenRouter key is used automatically when no TypeSafe key is set, and the OpenRouter route also reads Hermes' OpenRouter credential pool (auth.json) when OPENROUTER_API_KEY is absent, rotating that pool's entries through the core pool API.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jev-skill-router
Said no? Turn it on later:
hermes plugins enable jev-skill-router
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Automatically pin every new interactive session (desktop, CLI, TUI) and the branches you fork from them. Cron, one-shot, subagent and messaging sessions are left alone, and unpinning a session sticks.
Good to know before installing
On each new desktop/CLI/TUI session it sets the session's pinned flag in Hermes's session database (state.db) through the shared SessionDB handle, and records each automatic pin in $HERMES_HOME/auto-pin/ledger.txt; no network, no tools.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install auto-pin
Said no? Turn it on later:
hermes plugins enable auto-pin
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Monitor
Community
Kanban worker health in the Desktop status bar — live activity per running card with stall and loop detection (same tool + same arguments repeated), plus a compact per-provider quota readout (the related…
Kanban worker health in the Desktop status bar — live activity per running card with stall and loop detection (same tool + same arguments repeated), plus a compact per-provider quota readout (the related ai-usage-tracker plugin covers quota windows as a standalone feature). Zero model tokens.
Good to know before installing
Opens HERMES_HOME/kanban.db and each profile's state.db read-only for worker activity; for quota chips it reads every Hermes profile's credential pool (each profile's auth.json, with that profile's .env as secret scope) into read-only snapshots plus DEEPSEEK_API_KEY from the environment or .env files, and calls Hermes' own account-usage fetchers for each configured provider (Anthropic, Codex, OpenRouter, DeepSeek at https://api.deepseek.com/user/balance, and any provider plugin exposing fetch_account_usage), sending each entry's own token only to its own provider. The plugin never refreshes or persists a credential; on a Codex HTTP 401, Hermes core may refresh the active profile's matching Codex token via OpenAI's token endpoint and rewrite that profile's auth.json. No other network egress.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-monitor
Said no? Turn it on later:
hermes plugins enable hermes-monitor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Kanban Stream
Community
Live-stream Hermes kanban worker activity to a Telegram ops channel: one edit-in-place message per task with rolling tool-call history, elapsed timer, tokens/sec, thinking indicator, and a pinned final state…
Live-stream Hermes kanban worker activity to a Telegram ops channel: one edit-in-place message per task with rolling tool-call history, elapsed timer, tokens/sec, thinking indicator, and a pinned final state (done/blocked). Mid-task steering via task comments — /steer from Telegram through the bundled companion daemon, or straight from the board. Ships disabled by default; needs a dedicated ops bot (KANBAN_STREAM_BOT_TOKEN + KANBAN_STREAM_ALLOWED_USERS). Outbound calls go only to api.telegram.org; reads the kanban DB read-only; no telemetry, no self-update.
Good to know before installing
Sends kanban task titles, summaries and tool names with command/path snippets to the Telegram chat you configure via your own bot; the optional steer daemon posts allowlisted Telegram users' /steer text as task comments that reach the running worker.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs KANBAN_STREAM_BOT_TOKEN, KANBAN_STREAM_ALLOWED_USERS), then asks whether to turn it on.
hermes plugins install kanban-stream
Said no? Turn it on later:
hermes plugins enable kanban-stream
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Telegram Notify
Community
Remote Telegram lifecycle notifications for the main Hermes agent: turn start, completion with a bounded final answer, interruption/failure, and user-facing approval requests.
Remote Telegram lifecycle notifications for the main Hermes agent: turn start, completion with a bounded final answer, interruption/failure, and user-facing approval requests. Suppresses subagent, Telegram-origin lifecycle, and automatic/smart-approval noise. Outbound-only, no input channel.
Good to know before installing
Enabled by default once installed and reuses the core Telegram gateway's TELEGRAM_BOT_TOKEN and TELEGRAM_HOME_CHANNEL when present, so each main-agent turn's final answer (up to 3,200 chars) and approval-request command text (up to 700 chars) from CLI, Desktop and eligible gateway platforms are sent to api.telegram.org for delivery to that one chat; Telegram-origin lifecycle and approval-prompt copies (and, when notify_on_approval_response is enabled, Telegram-origin approval-response copies) are suppressed because the core Telegram gateway already delivers them in that chat; token and state are stored 0600 under HERMES_HOME/telegram-notify.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install telegram-notify
Said no? Turn it on later:
hermes plugins enable telegram-notify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Authenticated Hermes agent-to-agent tasks and optional file transfer over Iroh QUIC.
Good to know before installing
Tasks from a paired peer run in your live gateway agent with its full toolset; pairing is confirmed via the tool's confirm=true argument, not a UI prompt. Uses n0's public relays by default (HERMES_IROH_RELAY=off or a self-hosted URL for LAN-only). iroh_send_file can share any readable path the model names (credential-name denylist only, overridable with allow_sensitive); remote-triggered auto-fetch is off by default and confined to HERMES_IROH_AUTO_FETCH_DIR. The Rust sidecar is built locally with cargo, never downloaded.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-iroh-interconnect
Said no? Turn it on later:
hermes plugins enable hermes-iroh-interconnect
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Fleet Policy
Community
For administrators who pin settings through the managed scope: records what each agent role really sends to the provider (model, reasoning effort, service tier, plus the tier the provider says it served) next to the…
For administrators who pin settings through the managed scope: records what each agent role really sends to the provider (model, reasoning effort, service tier, plus the tier the provider says it served) next to the managed-scope state and the effective config (`hermes fleet-policy status --json`); measures cron cost per job — runs, empty runs, $/day, gate present (`crons --cost`); and `watch`, a generic wake gate for cron scripts that replays one read tool on an MCP server and wakes the agent only when new item ids appear (stock `wakeAgent` gate, no LLM call otherwise). Ships two skills (managed-scope admin, recurring tasks).
Good to know before installing
Records only model, reasoning effort and service tier per role (no message content, headers or keys) via the pre_api_request and pre_auxiliary_call hooks and a pass-through llm_execution middleware, stored in $HERMES_HOME/fleet-policy/observed.json; crons --cost opens cron/executions.db and state.db read-only and checks each cron run's final reply locally for silence; watch is an operator CLI command that calls one MCP tool at the config's server_url (or the admin-pinned watch_server_url) with config headers in which ${VAR} env values are expanded, follows redirects, and writes seen ids to a state file at the config-chosen path; the recurring-tasks skill has the agent write watch configs under $HERMES_HOME/watches, a script under $HERMES_HOME/scripts and a cron job; no other network access, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install fleet-policy
Said no? Turn it on later:
hermes plugins enable fleet-policy
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Worker Monitor
Community
Kanban board groups and worker health in the Hermes Desktop footer: blocked cards first and red, live running state as a coloured dot, hover for the breakdown, one click to open the board.
Kanban board groups and worker health in the Hermes Desktop footer: blocked cards first and red, live running state as a coloured dot, hover for the breakdown, one click to open the board. Worker-only fork of hermes-monitor. No credentials are read and there is no network egress; it opens kanban.db and each profile's state.db read-only and returns counts only. Zero model tokens.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-worker-monitor
Said no? Turn it on later:
hermes plugins enable hermes-worker-monitor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Session Mirror
Community
Mirrors Hermes Desktop, CLI, TUI and ACP conversations into Discord: one public thread per session in a channel you choose, one post per turn (your message and the reply), so work started on a desktop can be followed…
Mirrors Hermes Desktop, CLI, TUI and ACP conversations into Discord: one public thread per session in a channel you choose, one post per turn (your message and the reply), so work started on a desktop can be followed from the phone. Posting runs on a background thread and never delays or breaks a turn.
Good to know before installing
Register() adds one post_llm_call hook; every turn's text (your message and the final reply, not tool calls or outputs) is sent to the Discord REST API (discord.com) using the bot token you configure, after Hermes's redact_for_egress plus a local token-pattern filter (fail-closed: nothing is sent if the redactor is unavailable); mentions are disabled. The bot token is read only via agent.secret_scope.get_secret (an UnscopedSecretError under multiplexing skips the turn); no external command is ever run. Each turn reads the session's title and source from $HERMES_HOME/state.db read-only; session-to-thread ids are stored (mode 0600) in $HERMES_HOME/state/session-mirror.json. The optional `hermes session-mirror backfill` CLI command reads $HERMES_HOME/state.db read-only and replays past sessions through the same redaction. No other files, telemetry or long-running processes beyond one daemon sender thread.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install session-mirror
Said no? Turn it on later:
hermes plugins enable session-mirror
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Phone notifications, questions and approvals through Pushary's native Hermes approval transport, with optional per-tool gates.
Good to know before installing
Approval transport and per-tool gates hand dangerous-command approvals to whoever holds the devices or Slack channel paired to your Pushary account (fails closed); messages queued in the Pushary app or Mac notch are injected into the next turn as operator instructions and wait in ~/.pushary/run/hermes-commands; sends session events with a machine id (~/.pushary/machine-id when present, else a hashed hostname) on every turn, the redacted command and description of each approval it carries, the redacted reason when Hermes marks a turn failed (max 200 characters), redacted gated-tool arguments and pushary_remind reminder text to pushary.com; reads PUSHARY_API_KEY only through Hermes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs PUSHARY_API_KEY), then asks whether to turn it on.
hermes plugins install pushary
Said no? Turn it on later:
hermes plugins enable pushary
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Walkie-Talkie
Community
Let one session message another existing session (Telegram topic, group thread or DM), waking it like a user turn so the reply lands in that chat Disclosure — starts agent turns in other existing gateway sessions (any…
Let one session message another existing session (Telegram topic, group thread or DM), waking it like a user turn so the reply lands in that chat
Good to know before installing
Starts agent turns in other existing gateway sessions (any routed chat, including groups, and from cron jobs) via ctx.inject_message, only after plugins.entries.walkie-talkie.allow_gateway_injection: true; after an accepted handoff it posts a visible copy into the target chat through Hermes's send_message helper using your existing gateway bot credentials; reads state.db, config.yaml and cron/jobs.json read-only; no network calls of its own, no shell, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install walkie-talkie
Said no? Turn it on later:
hermes plugins enable walkie-talkie
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Jev Cron Gate
Community
Skip agent cron runs that would do nothing: a pre-run wake-gate script asks TypeSafe Jev one yes/no question over a small state snapshot (files, changed-since-last-run, localhost URLs) and prints {"wakeAgent": false}…
Skip agent cron runs that would do nothing: a pre-run wake-gate script asks TypeSafe Jev one yes/no question over a small state snapshot (files, changed-since-last-run, localhost URLs) and prints {"wakeAgent": false} when it is confident the run is pointless. Fail-open on every error, forced wake after N consecutive skips, stdlib only.
Good to know before installing
Each gated cron tick (and the tool's test action) sends the configured snapshot of file contents, localhost URL response bodies and change flags (≤6,000 chars) to api.typesafe.ai with your TypeSafe key.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs TYPESAFE_API_KEY), then asks whether to turn it on.
hermes plugins install jev-cron-gate
Said no? Turn it on later:
hermes plugins enable jev-cron-gate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only Hermes Desktop pane for live and past delegated subagent workers.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install protean-subagent-viewer
Said no? Turn it on later:
hermes plugins enable protean-subagent-viewer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Prompt Queue
Community
Kanban-style prompt queue for the desktop: Play drains cards one at a time into per-card target modes — new session, existing session, project, or a profile's canonical Bot Chat — gated on the global model slot…
Kanban-style prompt queue for the desktop: Play drains cards one at a time into per-card target modes — new session, existing session, project, or a profile's canonical Bot Chat — gated on the global model slot, background-review completion, and context compaction. Queue/Done/Skipped/ Failed tabs, two-row target picker, markdown ingest (Windows), and a trust-aware ::enqueue directive (ask-first by default).
Good to know before installing
Desktop pane that runs queued prompts as full agent turns (all tools the session allows) in new or chosen existing sessions, projects it can create, or a hidden per-profile "Bot Chat" session while Play is on; reads recent agent.log lines to detect background reviews and context compaction; on Windows the markdown-ingest menu runs local shell commands (mkdir, dir, certutil, explorer, and python on a small bundled reader script it writes into the chosen folder) through Hermes's shell.exec; an opt-in Auto-add setting lets ::enqueue directives in a live assistant reply queue prompts that run without a click.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install prompt-queue
Said no? Turn it on later:
hermes plugins enable prompt-queue
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
OpenSpec CLI tools for spec-driven development workflows
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install openspec
Said no? Turn it on later:
hermes plugins enable openspec
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Coding workflow skills — dual-model harness, subagent-driven development, and implementation planning patterns for Hermes Agent
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hades-coding-workflows
Said no? Turn it on later:
hermes plugins enable hades-coding-workflows
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only dashboard tab and model-free /duty and hermes duty summaries for waiting conversations, unanswered messages, running turns, undelivered background results and failing cron jobs. Supports all 17 dashboard languages, including right-to-left Arabic.
Good to know before installing
Opens HERMES_HOME/state.db with SQLite mode=ro (sessions, messages, turn leases, async delegations, goals) and reads cron/jobs.json and gateway_state.json; writes only HERMES_HOME/duty-board/dismissed.json for dashboard dismissals. Chat requires in-process Hermes 0.21.7+ and a configured owner; shared-chat summaries default to counts only. No network calls, no model calls, no credentials, no background processes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install duty-board
Said no? Turn it on later:
hermes plugins enable duty-board
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Live, now-centered Gantt timeline for the Hermes kanban boards — a slidable, persisted 72 h window (default now -24h -> now +48h; drag to move, drag the ends to resize), free wheel zoom down to hour ticks, a now line, status filtering, an optional done lane, and lifecycle rendering (dashed waiting vs solid run spans at real durations). Fork of kanban-gantt (GPL-3.0).
Good to know before installing
The backend can transition, reassign, comment on and permanently delete kanban tasks on any board (Desktop asks for confirmation before deletes); local SQLite only, no network.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install kanban-live-gantt
Said no? Turn it on later:
hermes plugins enable kanban-live-gantt
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Iowap
Community
Fleet control for Hermes Desktop: live statusbar chip (N/M IOWAP nodes online), a draggable fleet pane, a full fleet page (status, load, queue depth, capabilities per node, activity) and a tasks page that submits to…
Fleet control for Hermes Desktop: live statusbar chip (N/M IOWAP nodes online), a draggable fleet pane, a full fleet page (status, load, queue depth, capabilities per node, activity) and a tasks page that submits to any task-type capability on the fleet and tracks submitted tasks live (per-stage status dots, result previews, artifacts). Data stays local via the local node-cli against your own IOWAP relay; agent sessions join through an optional iowap-task bridge into a shared track store.
Good to know before installing
The dashboard backend runs the local node-cli (the IOWAP node client from github.com/iowap-org/iowap-node) to read your relay's node list, capabilities and task results, and to submit tasks you start from the Tasks page to nodes on your IOWAP fleet. Relay health also goes through the local node-cli (`server health`) — the plugin itself makes no raw HTTP calls to the relay; node identity comes from the node's own ~/.relay state files. Tracked task ids are stored in your Hermes home under plugin-data/iowap/.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install iowap
Said no? Turn it on later:
hermes plugins enable iowap
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Watch over opencode sessions from anywhere: alerts for stopped turns, questions and permissions, plus a dependency-free CLI to reply.
Good to know before installing
The skill has the agent install the ocshepherd CLI from GitHub at a pinned commit and, after asking you, add a cron entry or systemd unit that polls your opencode server; the CLI talks to that server with the password you provide, can reply to its questions and permission prompts, and optionally sends alerts to Telegram or runs a notify command you configure.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install opencode-shepherd
Said no? Turn it on later:
hermes plugins enable opencode-shepherd
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Tailgate
Community
Per-job progress updates in chat for jobs Hermes hands off to other machines (coding agents, CI, scripts), with per-job mute and follow and no model calls.
Per-job progress updates in chat for jobs Hermes hands off to other machines (coding agents, CI, scripts), with per-job mute and follow and no model calls.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install tailgate
Said no? Turn it on later:
hermes plugins enable tailgate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Auto fetch/pull before reads, and commit + push only the files each turn changed, for every git worktree Hermes touches.
Good to know before installing
After each turn it commits and pushes (push on by default; GIT_HOOK_PUSH=0 keeps commits local) the changed files of git worktrees under GIT_HOOK_ROOTS (default PROJECTS_ROOT, "*" for every repo), pushing to origin HEAD when no upstream is set; it pulls --ff-only before reads. A branch whose direct push the remote refuses on policy grounds (branch protection, a PR-required ruleset) is never committed to again: the hook drops its own unpushed commit, leaves the edit staged and dirty, and reports it once.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install git-hook
Said no? Turn it on later:
hermes plugins enable git-hook
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Conservative Chrome tab cleanup with in-process observation and browser-call leases.
Good to know before installing
Runs a background thread inside Hermes that proxies your local Chrome DevTools port (127.0.0.1:9222 → 127.0.0.1:9223, loopback only, you must point browser.cdp_url at it), injects a focus/activity listener into every Chrome page, rewrites browser_exec session names to a per-profile namespace, and a cron script you schedule auto-closes idle, duplicate and blank tabs (including tabs with unsaved text).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install chrome-tab-watchdog
Said no? Turn it on later:
hermes plugins enable chrome-tab-watchdog
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Chat-as-frontend for the Comfyrizz film pipeline: brief, plan, revise, explicit accept, generate, CPU assemble, export, and retake. Portable Agent Plugins v1 package (plugin.json, stdio mcp.json, comfyrizz-film skill) with the MCP server in-tree.
Good to know before installing
The stdio server launches local Node that talks only to a loopback Comfyrizz engine URL (COMFYRIZZ_ENGINE_URL); optional Streamable HTTP binds 127.0.0.1 only when deliberately enabled and has no authentication, so any local process or web page in your browser can call its tools while it runs. Paid generation (Google Colab, Comfy API, or ComfyUI) is dispatched by the agent with an approval id it reads from the engine's spend card; the bundled skill tells the model to get your explicit yes first, but Hermes itself does not prompt before paid generation or retakes. Env vars are forwarded as ${VAR} from the user environment (COMFYRIZZ_ENGINE_URL, COMFYRIZZ_MCP_HTTP, COMFYRIZZ_TOKEN, and optional provider keys); no credentials are stored in the package. No self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install comfyrizz
Said no? Turn it on later:
hermes plugins enable comfyrizz
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
DSers — Multi Platform Dropshipping
Community
DSers multi-platform dropshipping connector for dropshippers: supplier discovery, product sourcing, store management, supplier mapping, order fulfillment, and shipment tracking.
DSers multi-platform dropshipping connector for dropshippers: supplier discovery, product sourcing, store management, supplier mapping, order fulfillment, and shipment tracking. The DSers ecosystem includes AliExpress, Alibaba.com, 1688, DVAN, Shopify, WooCommerce, Wix, eBay, TikTok Shop, Amazon, Walmart, BigCommerce, Squarespace, Square, Ecwid, Magento, SHOPLINE, Jumpseller, Big Cartel, Cartpanda, Genstore, and LPQV; available operations depend on account and channel access.
Good to know before installing
Configuration-only portable MCP connector, with no bundled skills or native tools. Hermes v0.22.5 requires manual native OAuth connection setup. A DSers Advanced, Pro, or Enterprise subscription is required. Tool arguments and results are exchanged with ai.dsers.com; Hermes manages OAuth credentials. Remote tools include write operations, among them supplier-order placement that spends money through the user's DSers account, pricing changes and listing publication; the package and the documented native entry mark the server untrusted so Hermes asks before non-read-only calls, and the remote tool set can change independently of the pinned package. Removing the plugin alone leaves the native MCP connection.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install dsers
Said no? Turn it on later:
hermes plugins enable dsers
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Finance
Community
Personal-finance tools over your own local hermes-finance database: spending, budgets, transactions, net worth, bills, loans, investments, cash flow, goals and categorization rules (read-only), a bank sync on…
Personal-finance tools over your own local hermes-finance database: spending, budgets, transactions, net worth, bills, loans, investments, cash flow, goals and categorization rules (read-only), a bank sync on request, and four writes (file a transaction, add a rule, set a budget cap, track a bill) that each wait for your approval and are blocked under cron and other unattended runs. Needs a separate trusted app checkout prepared with Python 3.12 and `uv sync`, set as HERMES_FINANCE_APP_DIR.
Good to know before installing
Reads open the separate hermes-finance app's SQLite database outside the plugin directory, and the plugin imports that app checkout's code into the Hermes process, so it runs whatever that checkout contains, not the catalog pin. `finance_sync` runs the app's sync, which calls Plaid with your optional Plaid keys and fetches security logos from financialmodelingprep.com (ticker symbols leave the machine). `hermes finance completion`, started by the app's Ask panel, sends that conversation and your finance results to your profile's own model. The opt-in report jobs (`hermes finance crons plan/apply`) write profile-owned entry scripts and run the app on a schedule. They call Plaid and, with a live read-only key, Alpaca (GET-only); they look up car and home values through NHTSA, Wikimedia/OpenStreetMap and, only if you switch them on, Carfax (in the local Chrome at 127.0.0.1:9222) and Redfin. The daily job's agent applies transaction categorizations through the app's own CLI without a per-change approval card. The four approval-gated writes stay blocked in cron. Nothing moves money or places trades. The optional Plaid and Alpaca keys are read through Hermes's secret scope only; the plug
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-finance
Said no? Turn it on later:
hermes plugins enable hermes-finance
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Profile-bound semantic session handoffs for CLI and Desktop with independent destination and optional summary-writer models. Derived from yuzushi-dev/session-handoff.
Good to know before installing
Reads bounded persisted session evidence from the originating profile's state.db and project/Git metadata; runs local Git and foreground Hermes subprocesses without a shell; stores private handoff/journal sidecars under that profile; optional writer and new chat turns use configured model providers and may incur inference costs. No telemetry or plugin-owned credential store. Four internal tool-policy imports remain version-coupled; no runtime overrides or self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-handoff
Said no? Turn it on later:
hermes plugins enable hermes-handoff
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Windows Tasks
Community
Answer "what does this machine run on its own, and did it work" on Windows: win_scheduled_tasks lists the Task Scheduler's tasks with their state (Ready, Running, Disabled), the account each runs as, its first…
Answer "what does this machine run on its own, and did it work" on Windows: win_scheduled_tasks lists the Task Scheduler's tasks with their state (Ready, Running, Disabled), the account each runs as, its first action's command line, its triggers in words (at logon, daily, weekly, at a time, on event), its last and next run with the machine's offset, its missed runs, and what its last result code means - 0x80070002 is a program that is no longer there, 0x800710E0 a task that needed a desktop it did not have, 0x40010004 one that was stopped, 0x80040154 a COM class that is not registered. win_scheduled_task_detail takes one task and gives its triggers with start boundaries and repetition, its actions with arguments and working directory, its principal and the settings that decide whether it runs on battery or when late; a task with no triggers but MaintenanceSettings runs during automatic maintenance and the notes say so rather than leaving an empty list. Use it for why a logon task keeps failing, for finding what an uninstalled program left behind at logon, for telling a disabled task from a broken one, and for reading a task's command line before trusting it. Read-only: nothing is created, started, changed or deleted. Reads through the ScheduledTasks cmdlets rather than the store on disk, because the TaskCache registry tree and C:\Windows\System32\Tasks both answer access denied without elevation, and rather than schtasks /Query /FO CSV, which is localized and interleaves error lines for tasks whose definitions are gone. The plugin declares no Python dependencies; there is no network call and no file write. Windows only.
Good to know before installing
The tools report task paths, command lines, working directories, account names and SIDs to the model, and those reveal what the person has installed, what starts at their logon, and the paths under C:\Users\<name>; treat the output like a Task Scheduler window opened on their machine.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-windows-tasks
Said no? Turn it on later:
hermes plugins enable hermes-windows-tasks
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Levea Video Editor
Community
Agentic AI video editing via Levea: describe an edit in plain language (trim, 9:16 reframe, viral clips, captions, B-roll, multicam, audio cleanup, color, motion graphics) and get a verified MP4.
Agentic AI video editing via Levea: describe an edit in plain language (trim, 9:16 reframe, viral clips, captions, B-roll, multicam, audio cleanup, color, motion graphics) and get a verified MP4.
Good to know before installing
Prompts, source video URLs/assets and project ids go to api.livecore.ai with your LEVEA_API_KEY; edits and exports consume your Levea account quota with no Hermes approval prompt; levea_video_edit and levea_job_status (wait) can block up to 10 minutes. No telemetry, no shell, no background processes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs LEVEA_API_KEY), then asks whether to turn it on.
hermes plugins install levea-video-editor
Said no? Turn it on later:
hermes plugins enable levea-video-editor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Runa
Community
Bring your Runa meetings into Hermes: prep for what's next, recap decisions and who owes what, draft the follow-up, and find the exact words behind a claim, through Runa's hosted MCP server (Streamable HTTP,…
Bring your Runa meetings into Hermes: prep for what's next, recap decisions and who owes what, draft the follow-up, and find the exact words behind a claim, through Runa's hosted MCP server (Streamable HTTP, OAuth 2.1), with four workflow skills bundled. Portable Agent Plugins v1 package (plugin.json + mcp.json + skills/).
Good to know before installing
Hosted-only connector with no local code: every tool call goes to Runa's MCP server at mcp.joinruna.com, signed in as the user through Runa's sign-in (Google or Microsoft), and a first sign-in creates a Runa account. Meeting titles, summaries, transcripts, action items, people and company notes, and reads from apps the user connected to Runa are pulled into the session context, and so reach the user's model provider. No tool changes data in Runa or in those apps; Runa logs each call's metadata. The tool list comes from Runa's server at run time, so the pinned commit doesn't cover it. Hermes stores and refreshes the OAuth tokens. OAuth must be enabled with `hermes mcp add runa --url https://mcp.joinruna.com/mcp --auth oauth --connect-timeout 300`; the bundled mcp.json alone yields 401.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install runa
Said no? Turn it on later:
hermes plugins enable runa
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Signal texts when a Hermes turn pauses, fails or is interrupted, and when Hermes waits on a clarify question, approval or sudo prompt. Sends through the user's own signal-cli HTTP daemon (the same SIGNAL_* settings as the core Signal gateway); skips Signal-origin, cron and subagent turns, and dedupes identical texts within 60s. Outbound-only, no input channel.
Good to know before installing
Enabled turns POST to SIGNAL_HTTP_URL (plain HTTP unless that URL is https), which signal-cli delivers as a Signal message; by default each text includes up to 300 characters of the final reply (not secret-redacted) or of the redacted question/command (reply_chars: 0 sends none); sudo passwords and clarify answers are never seen; nothing is stored on disk, at most 64 clipped reply previews are kept in memory, and each send runs on a short-lived daemon thread with a 20s timeout.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SIGNAL_HTTP_URL, SIGNAL_ACCOUNT, SIGNAL_HOME_CHANNEL), then asks whether to turn it on.
hermes plugins install signal-notify
Said no? Turn it on later:
hermes plugins enable signal-notify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Super Artifacts
Community
Publish pages, forms, trackers and proofs as live URLs that open on a phone, and read back what visitors submit, through the hosted Super Artifacts MCP server (Streamable HTTP, OAuth 2.1 + DCR), with the…
Publish pages, forms, trackers and proofs as live URLs that open on a phone, and read back what visitors submit, through the hosted Super Artifacts MCP server (Streamable HTTP, OAuth 2.1 + DCR), with the super-artifacts workflow skill bundled. Portable Agent Plugins v1 package (mcp.json + skills/), no code.
Good to know before installing
Hosted-only connector: every tool call goes to superartifacts.app/mcp; published artifacts and what visitors submit to them are stored on Super Artifacts' servers. Artifacts are private by default, and the skill tells the model to publish private and never widen who can open one unless the person asked; Hermes does not prompt before these tools run unless you set `trust: untrusted` on the server. No telemetry. OAuth must be enabled with `hermes mcp add super-artifacts --url https://superartifacts.app/mcp --auth oauth --connect-timeout 300`; the bundled mcp.json alone yields 401.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install super-artifacts
Said no? Turn it on later:
hermes plugins enable super-artifacts
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Tripwire
Community
Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert.
Logs every refused agent action (a tool blocked by a guardrail or plugin, or a dangerous command denied, cancelled or timed out at approval) as one JSON line, so a no-agent cron script can send the owner one short alert. Observer only: it stores no tool arguments, results or message text, and fails open.
Good to know before installing
Appends one JSON line per refused action (profile, tool name, block type or approval choice, session id, and the first 120 characters of the block reason or approval rule) to ~/.hermes/tripwire/events.jsonl, shared by all profiles (path overridable with TRIPWIRE_EVENTS); a pre_tool_call hook reads ~/.hermes/tripwire/TEST_BLOCK and, only while that file exists, blocks the single tool it names for the single profile it names (a drill switch to prove the alarm). No network calls, no shell commands, no background processes, no stored credentials, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install tripwire
Said no? Turn it on later:
hermes plugins enable tripwire
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.
