909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
909 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Yolo Auto
Community
Yolo-Auto: flat-rate OpenAI-compatible API with plan-filtered live model discovery.
Yolo-Auto: flat-rate OpenAI-compatible API with plan-filtered live model discovery.
How to install
Install it. Hermes asks for any API keys it needs (this one needs YOLO_AUTO_API_KEY, YOLO_AUTO_BASE_URL), then asks whether to turn it on.
hermes plugins install yolo-auto
Said no? Turn it on later:
hermes plugins enable yolo-auto
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-first Arabic/English intelligent memory with canonical facts, conflict lifecycle, bounded recall, and selective Hermes cloud enrichment.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install intelligent_memory
Said no? Turn it on later:
hermes plugins enable intelligent_memory
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Ai Usage Tracker
Community
Live subscription-quota windows for every AI provider Hermes can route to, as a desktop page plus a status-bar chip, with a per-profile picker — Codex, Claude, Copilot, OpenCode Go/Zen, Z.AI, Kimi, MiniMax, Nous…
Live subscription-quota windows for every AI provider Hermes can route to, as a desktop page plus a status-bar chip, with a per-profile picker — Codex, Claude, Copilot, OpenCode Go/Zen, Z.AI, Kimi, MiniMax, Nous, OpenRouter, DeepSeek.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install ai-usage-tracker
Said no? Turn it on later:
hermes plugins enable ai-usage-tracker
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Gbrain Retrieval Reflex
Community
pre_llm_call hook plugin, enabled with `hermes plugins enable`: injects ambient context from a GBrain instance before each turn (volunteer_context, then a hybrid-query fallback).
pre_llm_call hook plugin, enabled with `hermes plugins enable`: injects ambient context from a GBrain instance before each turn (volunteer_context, then a hybrid-query fallback). Not a `memory.provider`. Silent no-op when GBrain is unreachable or no token is set.
Good to know before installing
Before each non-trivial turn the last six user and assistant messages (truncated) and the current message are sent with a GBRAIN_TOKEN bearer token to GBRAIN_MCP_URL (default http://127.0.0.1:3131/mcp), and returned brain-page text is injected into the turn.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install gbrain-retrieval-reflex
Said no? Turn it on later:
hermes plugins enable gbrain-retrieval-reflex
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Next Steps
Community
Next-step suggestions under the Hermes Desktop composer after each turn: local Ollama inference, per-session state, target routing (session, new tab, bots, kanban), tiny-model capacity profiles, EN/DE UI.
Next-step suggestions under the Hermes Desktop composer after each turn: local Ollama inference, per-session state, target routing (session, new tab, bots, kanban), tiny-model capacity profiles, EN/DE UI. No API keys.
Good to know before installing
After every agent turn, sends the last 8 messages (each cut to 200 chars) plus the working directory to Ollama on localhost; clicking a suggestion immediately submits it as a prompt in the current session, a new session, or another profile's session, or creates a kanban card, and for non-current targets also attaches the working directory and the last 6 messages (on by default, can be turned off under Targets).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install next-steps
Said no? Turn it on later:
hermes plugins enable next-steps
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Lightningai Rate Limit
Community
Per-process throttle for Lightning AI (https://lightning.ai/api/v1) keeping LLM requests within the ~15 requests/min limit, using an in-memory token bucket.
Per-process throttle for Lightning AI (https://lightning.ai/api/v1) keeping LLM requests within the ~15 requests/min limit, using an in-memory token bucket. Gates only calls whose provider or base_url points at Lightning AI; no-op otherwise.
Good to know before installing
Registers one llm_execution middleware and nothing else; no network calls, files, or processes of its own.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install lightningai-rate-limit
Said no? Turn it on later:
hermes plugins enable lightningai-rate-limit
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Excel-backed hierarchical long-term memory tree (10-row cap per workbook, dynamic branching, leaf pointers). Classifier defaults to the host model; third-party keyless rotation is opt-in.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install excel_line
Said no? Turn it on later:
hermes plugins enable excel_line
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Agent Plugins v1 package: one skill plus one stdio MCP server (memory_select) started with uv run from the checkout. Needs uv on PATH. Registers no Hermes tools or hooks; do not expect jev_* tools.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install jev-memory-selector
Said no? Turn it on later:
hermes plugins enable jev-memory-selector
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Memobase memory provider — self-hosted user profile + event timeline recall, with hybrid BM25/vector/entity retrieval and automatic per-turn prefetch.
How to install
Install it. Hermes asks for any API keys it needs (this one needs MEMOBASE_API_KEY, MEMOBASE_BASE_URL), then asks whether to turn it on.
hermes plugins install memobase
Said no? Turn it on later:
hermes plugins enable memobase
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Metronix memory provider for Hermes with prefetch recall and built-in memory write-through.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install metronix
Said no? Turn it on later:
hermes plugins enable metronix
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-only YantrikDB dashboard for Hermes Agent memory operations
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install yantrikdb-hermes-dashboard
Said no? Turn it on later:
hermes plugins enable yantrikdb-hermes-dashboard
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Disclosure — copies .env key values (and opt-in auth.json backups) between profiles; rewrites other profiles' SOUL, memory and config.yaml.
Good to know before installing
Copies .env key values (and opt-in auth.json backups) between profiles; rewrites other profiles' SOUL, memory and config.yaml. Cross-profile config pane with copy+manifest reconcile and per-group scope.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install profile-pane
Said no? Turn it on later:
hermes plugins enable profile-pane
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Two extra delegation modes for `delegate_task`, next to the built-in default. Model routes (`delegation.backend: model_map`): the agent picks a named model route per subagent from a list you define (e.g. fast, deep, local). Profile routes (`delegation.backend: profile_routes`): the agent runs a subagent as one of your Hermes profiles, with that profile's own model, credentials, skills and SOUL.md. Only route names and their one-line descriptions reach the model. Adds `hermes delegation config` (pick the mode and edit its routes; `--show` prints the setup) and the `/delegation` slash command (save a mode for the next session, or `--now` to apply it to the current chat). Needs Hermes 0.22.5 or newer, the first release with pluggable delegation providers; Hermes 0.22.0 to 0.22.4 refuses to install it, and on a core older than 0.22.0 it installs, logs one warning and does nothing.
Good to know before installing
No Python dependencies and no network or model calls of its own; subagents run through core's `delegate_task` on the routes you configured. Writes only `delegation.backend` and `delegation.backends.*` (model_map / profile_routes) in the active profile's config.yaml, through core's config writer. A model route's optional `api_key` is stored in config.yaml in plain text (`provider:` keeps keys in .env / auth.json). Listing a profile under profile routes lets this profile's subagents use that profile's credentials, SOUL.md and terminal policy.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install advanced-delegation
Said no? Turn it on later:
hermes plugins enable advanced-delegation
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Mcp Serve
Official
Run Hermes as an MCP server: `hermes mcp-serve` lets any MCP client (Claude Code, Claude Desktop, Cursor, Codex) list and read your messaging conversations, poll live events, send messages and answer approvals over stdio.
Run Hermes as an MCP server: `hermes mcp-serve` lets any MCP client (Claude Code, Claude Desktop, Cursor, Codex) list and read your messaging conversations, poll live events, send messages and answer approvals over stdio. `--tools` (off by default) also exposes Hermes' web, browser, vision, image generation, skills and TTS tools; terminal, file and kanban tools are never exposed. Formerly built into Hermes core as `hermes mcp serve` (MCP clients change their args to ["mcp-serve"]).
Good to know before installing
The connecting MCP client reads the active profile's conversation history (state.db) and can send messages as your connected platform accounts; with `--tools` it also runs Hermes tools under your configured provider credentials, which can spend provider credits. The plugin itself makes no network or model calls beyond those tool calls and sends.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install mcp-serve
Said no? Turn it on later:
hermes plugins enable mcp-serve
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Telegram Business
Community
Observe-with-approval Telegram Business Mode (secretary bot): Hermes drafts replies to your customers' messages and DMs each draft to you with Send, Edit and Discard buttons; nothing reaches a customer until you tap Send.
Observe-with-approval Telegram Business Mode (secretary bot): Hermes drafts replies to your customers' messages and DMs each draft to you with Send, Edit and Discard buttons; nothing reaches a customer until you tap Send. A Hermes Labs plugin: built by Nous Research, not supported.
Good to know before installing
Each customer message is sent to your active Hermes model to draft the reply, and drafts and connection records are stored locally in <HERMES_HOME>/telegram-business/state.db.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-telegram-business
Said no? Turn it on later:
hermes plugins enable hermes-telegram-business
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Agent Importers
Official
`hermes import-agent`: import an OpenClaw (~/.openclaw, or legacy ~/.clawdbot / ~/.moltbot), Claude Code (~/.claude), Codex CLI (~/.codex) or Cursor (~/.cursor) setup into Hermes in one command.
`hermes import-agent`: import an OpenClaw (~/.openclaw, or legacy ~/.clawdbot / ~/.moltbot), Claude Code (~/.claude), Codex CLI (~/.codex) or Cursor (~/.cursor) setup into Hermes in one command; always previews first and asks before applying. Claude Code / Codex / Cursor: instructions, Cursor rules and memories become memory entries, Bash permission rules become command allow/deny lists, MCP servers land in config.yaml, skills are copied, and `--sync` re-imports sources that changed. OpenClaw (core's former `hermes claw migrate`; the plugin keeps that spelling, `hermes claw cleanup` and the openclaw-migration skill): persona, memories, skills, model and messaging settings, MCP servers and agent behaviour. Formerly built into Hermes core; `hermes setup` offers to install it when it finds one of these agents, and profiles with a registered sync source are migrated automatically.
Good to know before installing
No Python dependencies, no network calls and no model calls. Claude Code / Codex / Cursor: reads those agents' local config trees (never their credential files; secret-looking MCP env vars and headers are stripped and listed) and writes only into the active profile (memories/MEMORY.md with a backup, config.yaml, skills/ and import-sync.json). OpenClaw: reads the OpenClaw dir (openclaw.json, its .env, workspace files such as SOUL.md / MEMORY.md / USER.md, skills); API keys and bot tokens come over only with --migrate-secrets (allowlisted names, shown in the preview). It writes into the active profile (config.yaml, .env, SOUL.md, memories/, skills/openclaw-imports/, a migration/openclaw/<time>/ report with item backups, and a backups/pre-migration-*.zip restore point), plus a workspace dir only when --workspace-target names one. It runs local pgrep / systemctl / tasklist checks to warn when OpenClaw or a Hermes gateway is still running, and `hermes claw cleanup` renames the OpenClaw dir to *.pre-migration after a confirmation.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install agent-importers
Said no? Turn it on later:
hermes plugins enable agent-importers
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Agent Blackbox
Community
Security for agents: checks every tool call and model request before it runs against a curated, verifiable threat graph (prompt injection, dangerous commands, malicious packages, unsafe skills, phishing and drainer…
Security for agents: checks every tool call and model request before it runs against a curated, verifiable threat graph (prompt injection, dangerous commands, malicious packages, unsafe skills, phishing and drainer indicators) and local rules that keep an agent away from wallet stores, seed phrases, private keys and exchange API keys. Audit mode records; block mode refuses. Can share privacy-safe threat reports with an open community graph once the user turns sharing on (off by default); community findings only ever flag. Hooks only: no tools, no middleware.
Good to know before installing
Hooks see every tool call and model request; `hermes blackbox setup` installs Node (via a checksum-pinned nvm installer) if missing, the OriginTrail DKG node from npm (checksum-pinned) and Blazegraph in Docker or Oxigraph, registers the DKG node and the dashboard as login services (systemd/LaunchAgent), and joins the DKG peer-to-peer network; package installs are looked up on api.osv.dev (name and version); community threat reports signed by a local reporter key (threat identifiers, including domains of fetched pages that served a verified injection) are shared to the community graph only after you turn sharing on (off by default); the optional LLM reviewer sends the current turn's user and tool text to OpenAI or Anthropic; `blackbox attach` copies the plugin into the Hermes homes/profiles and OpenClaw workspaces you name and enables it in their config (automatic attaching is off unless you set `auto_attach: true`); `hermes blackbox chat` creates an `agent-blackbox` profile cloned from the current one (config.yaml and .env); the dashboard runs on 127.0.0.1:9700.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install blackbox
Said no? Turn it on later:
hermes plugins enable blackbox
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Call any Scalekit connector from Hermes: 500+ connectors and 20,000+ tools.
Good to know before installing
HTTP calls go to the Scalekit environment URL you paste; the three Scalekit values are read with get_secret; one person id is stored at plugin-data/scalekit/identifier; the model can request an approval link, run a named tool, or proxy one HTTP request. Provider tokens stay in Scalekit; no shell, no background process, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SCALEKIT_CLIENT_ID, SCALEKIT_CLIENT_SECRET, SCALEKIT_ENVIRONMENT_URL), then asks whether to turn it on.
hermes plugins install scalekit
Said no? Turn it on later:
hermes plugins enable scalekit
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Accent Picker
Official
OKLCH accent colour picker for the Hermes Desktop status bar: drag it and the whole theme retints live, with palette commands to reset to the theme default or copy the current colour.
OKLCH accent colour picker for the Hermes Desktop status bar: drag it and the whole theme retints live, with palette commands to reset to the theme default or copy the current colour. A theme-authoring tool; the colour is scratch state and is never persisted. Desktop-only (desktop/plugin.js inside the plugin SDK surface); no agent tools, hooks, middleware or env vars.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install accent-picker
Said no? Turn it on later:
hermes plugins enable accent-picker
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Bubblewrap
Official
Bubblewrap terminal backend for Linux: every terminal and execute_code command runs in its own bwrap sandbox on this machine at the host's own paths, with a read-only root, a writable working directory (per profile…
Bubblewrap terminal backend for Linux: every terminal and execute_code command runs in its own bwrap sandbox on this machine at the host's own paths, with a read-only root, a writable working directory (per profile: restricted, workspace or network), the dot entries of the home directory (credential stores always) and the Hermes home hidden, private temp and process directories, agent and docker sockets masked, and per-command memory, CPU and process limits (`hermes config set terminal.backend bubblewrap`).
Good to know before installing
No Python dependencies and no network calls of its own: it runs your commands through the `bwrap` and `prlimit` binaries you install (bubblewrap, util-linux), and under the default `network` profile those commands share the host network. It reads no credentials. File tools (read_file, write_file, patch, search_files) still run on the host and are not confined, and because the working directory is a real host directory Hermes keeps its dangerous-command prompts, as for the local backend.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install bubblewrap
Said no? Turn it on later:
hermes plugins enable bubblewrap
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Langfuse
Official
Langfuse observability for Hermes: one trace per turn, one generation per LLM call (usage and cost from Hermes' own pricing, cache and reasoning tokens included), one observation per tool call and subagent.
Langfuse observability for Hermes: one trace per turn, one generation per LLM call (usage and cost from Hermes' own pricing, cache and reasoning tokens included), one observation per tool call and subagent. Content capture is sanitized by default (metadata-only and full are opt-in); sends traces only to the Langfuse project whose keys you set. Formerly built into Hermes core as observability/langfuse; existing users are migrated automatically.
How to install
Install it. Hermes asks for any API keys it needs (this one needs HERMES_LANGFUSE_PUBLIC_KEY, HERMES_LANGFUSE_SECRET_KEY), then asks whether to turn it on.
hermes plugins install langfuse
Said no? Turn it on later:
hermes plugins enable langfuse
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes OSINT Map
Community
A live situational-awareness globe in Hermes Desktop: earthquakes (USGS), disaster alerts (GDACS), natural events (NASA EONET), US severe weather (NWS), military and nearby aircraft (adsb.lol), satellites propagated…
A live situational-awareness globe in Hermes Desktop: earthquakes (USGS), disaster alerts (GDACS), natural events (NASA EONET), US severe weather (NWS), military and nearby aircraft (adsb.lol), satellites propagated live from CelesTrak elements, GDELT news incidents, official traffic cameras (Transport for London, Singapore LTA) and shipping chokepoints on a dithered 3D globe, with satellite orbits, aircraft tracks and live camera stills, country dossiers (World Bank facts, events, headlines), NOAA space weather, markets, a feed of events, headlines and alerts, and a passive recon toolkit (DNS, RDAP, TLS, security headers, CT subdomains, CVE with CISA KEV, IP, GitHub, MAC). Five agent tools (osint_situation, osint_events, osint_country, osint_recon, osint_news) answer from the same sources in any chat, and the page's Brief me, Ask Hermes and dossier buttons open a chat that uses them. No keys needed; an optional TWELVEDATA_API_KEY (plugin setting, read through Hermes's secret scope) adds equities and commodities. Unofficial; not affiliated with any data provider.
Good to know before installing
The gateway fetches public data from fixed hosts (earthquake.usgs.gov, eonet.gsfc.nasa.gov, gdacs.org, api.weather.gov, data.gdeltproject.org, api.adsb.lol, celestrak.org, services.swpc.noaa.gov, api.tfl.gov.uk and api.data.gov.sg (camera lists), and camera stills from TfL's JamCams bucket on s3-eu-west-1.amazonaws.com and images.data.gov.sg, fetched only by camera id for a camera the user opens, api.worldbank.org, the BBC, Al Jazeera, DW, Guardian and France 24 RSS feeds, api.coingecko.com, and api.twelvedata.com with the key in a header when set), cached and only while the page is open or a tool is called, with a hermes-osint-map User-Agent; recon sends the domain, IP, CVE id, GitHub name or MAC prefix the user or agent enters to dns.google, rdap.org, crt.sh, cve.circl.lu, cisa.gov, ipwho.is, api.github.com and api.macvendors.com, and the TLS and headers lookups connect directly to the host named, refusing private, loopback, link-local, CGNAT and other internal addresses on every redirect, on ports 443/8443 (TLS) and 80/443/8080/8443 (headers) only; GDELT incidents are machine-coded from news coverage and labelled as such; the page keeps its layer choices in Desktop plugin storag
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-osint-map
Said no? Turn it on later:
hermes plugins enable hermes-osint-map
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Snyk
Official
Scan code (SAST), dependencies, container images, IaC and SBOMs with Snyk through its first-party MCP server (pinned snyk@1.1306.0 over npx stdio, CLI analytics disabled), with the snyk-security-scan workflow skill…
Scan code (SAST), dependencies, container images, IaC and SBOMs with Snyk through its first-party MCP server (pinned snyk@1.1306.0 over npx stdio, CLI analytics disabled), with the snyk-security-scan workflow skill bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH and a free Snyk account (browser login via the snyk_auth tool).
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install snyk
Said no? Turn it on later:
hermes plugins enable snyk
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Claude Code-style plan mode for Hermes: the agent explores and writes a plan, and edits nothing else until you approve it. It works on every interactive Hermes surface: /plan or /planmode on blocks mutating Hermes tools dispatched through pre_tool_call (writes outside .hermes/plans, terminal, code execution, delegation, MCP) while the agent explores, asks clarifying questions and writes a plan. The agent shows the complete plan, submits it with plan_mode(submit) and one approval card asks: approve and auto-accept edits, approve and review each file edit (when Hermes approvals are on, every write_file and patch then gets Hermes' approval prompt with its path and a preview), or keep planning; Other sends feedback, and the revised plan says what changed since the last revision. Once approved, it implements in the same turn and tracks todo_list progress. To change the plan yourself, keep planning, run /planmode edit, save, then /planmode show and /planmode approve; the text you were shown is saved as an approved snapshot, so later edits to the file do not change the approval. The classic profile (plan_profile: classic), approval_card: false and surfaces without a card use Hermes' own approval prompt (gateway buttons, the TUI/Desktop card, the CLI panel or /approve). When yolo or approvals.mode: off would auto-approve, it asks through clarify instead, so a person still decides. By default plans are compact and decision-complete, the lean profile asks at most three targeted questions, and the agent does not commit unless asked (plan_style, plan_profile, allow_commits and plan_skill settings). Classic CLI enforced on every supported Hermes; gateway, TUI and Desktop from Hermes v2026.9.24 (0.21.5), and refused on older builds; 0.21.6 recommended. On the interactive classic CLI, Hermes' inline diff shows a new plan file in full, so the agent does not retype it (write_once). A report-a-problem skill drafts a bug report and files it with gh only after you approve the draft.
Good to know before installing
Plan-mode does not enforce Codex app-server exec/applyPatch or TUI /background and btw side agents. A plan is approved only on its approval card (a clarify question only the plugin issues and checks), through Hermes' own approval prompt, or with /planmode approve. It reads nine groups of internal Hermes seams for session identity, workspace, profile, skills.inline_shell and the classic CLI's inline diff, each guarded with a documented fallback. It creates .hermes/plans under the session working directory, reads plan files there, saves the approved text of an edited plan as a new file under .hermes/plans/approved, and keeps per-session state in plugin state. It adds a turn note while planning or executing, a ≤200-char system-prompt hint, and a one-line footer to short replies on chat platforms. When a turn ends while a submitted plan still awaits approval and no approval card was answered, it adds one line to that reply on any surface, whatever its length, saying how to approve (unless footer is off). When you pick "Always" on a plan approval or a per-edit review, Hermes core writes a plugin_rule:plan-mode entry to command_allowlist in config.yaml; each entry is keyed to one plan re
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install plan-mode
Said no? Turn it on later:
hermes plugins enable plan-mode
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Apify
Community
Apify, the largest marketplace of tools for AI: discover, run, and collect results from thousands of ready-to-run Actors, from the comfort of your agent, plus an Apify backend for the built-in web_search and…
Apify, the largest marketplace of tools for AI: discover, run, and collect results from thousands of ready-to-run Actors, from the comfort of your agent, plus an Apify backend for the built-in web_search and web_extract tools.
How to install
Install it. Hermes asks for any API keys it needs (this one needs APIFY_API_TOKEN), then asks whether to turn it on.
hermes plugins install apify
Said no? Turn it on later:
hermes plugins enable apify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Singularity
Official
Singularity/Apptainer terminal backend: Hermes's terminal, file and code tools run inside a hardened, rootless container on this machine (--containall --no-home), with CPU/memory limits and an optional per-session…
Singularity/Apptainer terminal backend: Hermes's terminal, file and code tools run inside a hardened, rootless container on this machine (--containall --no-home), with CPU/memory limits and an optional per-session persistent overlay (`hermes config set terminal.backend singularity`; image from `terminal.singularity_image`). Formerly built into Hermes core; existing users are migrated automatically.
Good to know before installing
No Python dependencies and no network calls of its own: it drives the `apptainer` (or `singularity`) CLI you install, which pulls the configured image (default `docker://nousresearch/hermes-sandbox:desktop`) and caches a SIF under your scratch directory. Your skills and registered credential files are bind-mounted read-only into the container, and because the container is a disposable sandbox Hermes skips its dangerous-command prompts there, as for its other container backends.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install singularity
Said no? Turn it on later:
hermes plugins enable singularity
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Workflow Record
Community
hermes record: demonstrate a browser workflow once (clicks, field values, navigations) and its bundled skill lets /learn turn the recording into a skill that replays it with the browser tools.
hermes record: demonstrate a browser workflow once (clicks, field values, navigations) and its bundled skill lets /learn turn the recording into a skill that replays it with the browser tools. A Hermes Labs plugin: built by Nous Research, not supported.
Good to know before installing
Attaches over CDP to a Chromium you point it at (--cdp, BROWSER_CDP_URL, browser.cdp_url or 127.0.0.1:9222) and records what you do in that tab until Ctrl-C; password, one-time-code and card fields are masked inside the page as {SECRET:name} and never written. Recordings stay local in <HERMES_HOME>/recordings; nothing is sent anywhere until you run /learn on one, which hands it to your active model.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install workflow-record
Said no? Turn it on later:
hermes plugins enable workflow-record
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
A live board your agent builds for you: tabs of notes, tables, charts, KPI cards and live Hermes data, in the dashboard and Hermes Desktop. It appears as a Board tab in the dashboard and a page in Desktop, and the agent lays it out with 19 native boardstate_* tools, approval widgets included. Runs a local Node >= 20 sidecar on loopback with a per-spawn nonce; no network access unless you opt in to operator-gated connectors.
Good to know before installing
Spawns a local Node.js ≥20 sidecar (from PATH/HERMES_NODE_BIN, nothing downloaded) on 127.0.0.1 on first use; state under HERMES_HOME/boardstate-state/. Reads the dashboard's loopback session token from Hermes internals (web_server._SESSION_TOKEN) and passes it to the sidecar for live usage/sessions/cron widgets; mounts one token-gated static route for approved widget assets. No outbound network unless you author boardstate.connectors.json (stdio/HTTP MCP connectors); connector actions need operator approval. Ships one plugin skill, boardstate:boardstate-report-problem, which drafts a bug report and files it with the GitHub CLI only after the user approves the exact text.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install boardstate
Said no? Turn it on later:
hermes plugins enable boardstate
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
ActVox
Community
Make Hermes a team member in an ActVox workspace: on a schedule it works the tasks people assign it and answers the comments that @mention it, and submits each task for a person's review.
Make Hermes a team member in an ActVox workspace: on a schedule it works the tasks people assign it and answers the comments that @mention it, and submits each task for a person's review. Skills actvox:actvox and actvox:actvox-inbox, a first-turn inbox line (pre_llm_call), /actvox inbox|status, and hermes actvox setup|install-gate. A cron pre-run gate wakes the agent only when the inbox has work, so an empty tick makes no model call.
Good to know before installing
ActVox is reached only through the user's own actvox MCP server (ctx.call_mcp, needs plugins.entries.actvox.mcp_allowlist) and the user's own actvox CLI (the gate runs `actvox inbox --all --json`); on the first turn of every non-cron session the pre_llm_call hook calls the server's check_inbox (up to 5 s) and adds one line saying how many tasks and mentions wait; the plugin holds and reads no credential and sends no telemetry. `hermes actvox install-gate` writes one file, $HERMES_HOME/scripts/actvox-inbox-gate.py, only on that explicit command and never over a file it did not write; gate state lives in $HERMES_HOME/plugin-data/actvox/. No background work of its own: the cron job runs only after the user creates it, and from then on anyone who can assign Hermes a task or @mention it in your ActVox workspaces decides what an unattended agent run on your host works on, with that job's toolsets (dangerous commands follow approvals.cron_mode, deny by default). Unattended writes need the default trust: full on the actvox server.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install actvox
Said no? Turn it on later:
hermes plugins enable actvox
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Private Yandex Alice voice input for Hermes, with replies in Telegram.
Good to know before installing
Off until you set enabled: true and allow_gateway_injection: true; then, while the Telegram gateway is connected, it listens on 127.0.0.1 (port 8788 by default) for webhooks forwarded by your own HTTPS reverse proxy. The secret URL path (ALICE_WEBHOOK_SECRET) is the only authentication: Yandex request signatures are not checked, and the skill and account IDs in the request can be forged by anyone who has the URL. Each accepted request becomes a user message in one fixed Telegram DM session and runs with that session's tools; approvals stay in Telegram and slash commands are refused. Leaving owner_user_id empty accepts any Alice account presenting the URL.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs ALICE_WEBHOOK_SECRET), then asks whether to turn it on.
hermes plugins install alice-voice
Said no? Turn it on later:
hermes plugins enable alice-voice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Inject live current time into every LLM call via the pre_llm_call hook — fixes stale session-start timestamps in long/cross-day conversations.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install live-time
Said no? Turn it on later:
hermes plugins enable live-time
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
JetBrains Junie coding agent as a Hermes model provider over ACP.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install junie-acp
Said no? Turn it on later:
hermes plugins enable junie-acp
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Rea
Official
Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android packages, firmware and browser/process activity, through REA's MCP server (pinned rea-agents@6.7.0…
Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android packages, firmware and browser/process activity, through REA's MCP server (pinned rea-agents@6.7.0 over npx stdio) with REA's reverse-engineer-anything skill adapted for Hermes. Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js 22.19+/24.11+/26+ on PATH, plus your own Ghidra, Hopper or IDA for native decompilation.
Good to know before installing
A few REA tools run a command under a PTY, launch or drive an application, change a connected Android device or overwrite a chosen file, and Hermes does not prompt before them; the bundled skill tells the agent to ask first and to skip them in unattended runs.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install rea
Said no? Turn it on later:
hermes plugins enable rea
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Extends Hermes Agent API capabilities to deliver a richer chat interface with Talaria WebUI.
Good to know before installing
Adds API_SERVER_KEY-authenticated /talaria/v1 routes to the Hermes API server (cross-session history search, rewind/branch/compress of API sessions, runs with the profile's instructions and prefill); stores response metadata (no message bodies) in $HERMES_HOME/talaria/observations.db; relies on private api_server/AIAgent internals behind feature detection.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install talaria-webui
Said no? Turn it on later:
hermes plugins enable talaria-webui
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Per-provider quota / rate-limit status via /quota command and desktop widget. Reads precomputed quota_cache.json so the widget never does network I/O.
Good to know before installing
Refreshes your Gemini OAuth token using the Gemini CLI's public client identity, in memory only; queries Copilot's internal usage endpoint with VS Code client headers and Anthropic's OAuth usage endpoint using the hermes-quota-plugin User-Agent, caching Anthropic usage responses and rate-limit cooldowns in the Hermes root directory keyed by a token hash so profiles sharing one Claude login share them; optional additional Claude accounts read access tokens only from explicitly configured Claude Code credentials files and send them only to Anthropic's fixed OAuth usage endpoint (read-only, no refresh-token exchange or credential write-back; tokens and paths excluded from the quota cache). Linux extra accounts verified; Windows experimental, extra macOS Keychain accounts unsupported. The openai-codex check reads every saved Codex account from Hermes' own auth.json credential pool (read-only, never refreshed; expired accounts show reauth-required) and queries the Codex usage endpoint with the codex-cli User-Agent; when a Codex account is configured, each refresh also fetches public Codex reset announcements from the third-party site codex-resets.com (anonymous request, no credentials s
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install quota
Said no? Turn it on later:
hermes plugins enable quota
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Lang He
Community
Hebrew (עברית) language pack for Hermes — core CLI, gateway and tips (3,396 of 3,486 keys on main), TUI (1,331 of 1,356) and Desktop (5,153 of 5,245), with Desktop flipped right-to-left.
Hebrew (עברית) language pack for Hermes — core CLI, gateway and tips (3,396 of 3,486 keys on main), TUI (1,331 of 1,356) and Desktop (5,153 of 5,245), with Desktop flipped right-to-left. Hermes bundles no Hebrew, so the pack ships all three catalogs; values identical to English and entries whose English wording depends on an argument (on/off, show/hide) are omitted so they fall back to English.
Good to know before installing
Text-only catalogs plus an __init__.py whose register() is a no-op (kept so Desktop "Install from Git" accepts the pack, #138118); registering the pack never changes display.language, the user opts in via config.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-lang-he
Said no? Turn it on later:
hermes plugins enable hermes-lang-he
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Glasser
Community
Glasser's hosted MCP: search, inspect and run 1,000+ paid data endpoints (people and company enrichment, SEO, web, social media, US property, stock quotes) with one key, pay per call.
Glasser's hosted MCP: search, inspect and run 1,000+ paid data endpoints (people and company enrichment, SEO, web, social media, US property, stock quotes) with one key, pay per call. Portable Agent Plugins v1 package: a stdio bridge through mcp-remote (browser sign-in, no key in the package) plus a bundled skill for setup and the spending rules. Requires Node.js 18+.
Good to know before installing
Paid data broker: each run tool call charges your Glasser balance per the endpoint's published price with no in-Hermes confirm step; runs npx mcp-remote@0.14.3 as a local stdio bridge to https://api.glasser.ai/mcp; the sign-in token is cached by mcp-remote under ~/.mcp-auth/.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install glasser
Said no? Turn it on later:
hermes plugins enable glasser
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Give your agent a team: named subagents with their own instructions, tools and model, which it assigns work to, checks on and steers mid-task. The operator defines the roster; the agent follows up with a digest of earlier results and can work a Kanban teammates lane with a review handoff. Launches subagents only through the public ctx.subagent_lifecycle API. Stock Hermes; no patched core.
Good to know before installing
Adds six tools (teammates_roster, teammate_assign, teammate_check, teammate_wait, teammate_message, teammate_stop) and a /teammates command; the model picks only a teammate name, and the operator's config decides what it means. Teammates run as in-process Hermes subagents using credentials selected by Hermes from the parent, delegation settings or an operator-configured teammate route where supported. Toolsets narrow the parent's tools at toolset granularity only (the file toolset includes write_file and patch); Hermes can add inherited MCP toolsets back unless delegation.inherit_mcp_toolsets is false. A teammate with invalid settings refuses to launch. A delegated child cannot start teammates. Steering uses the lifecycle steer where Hermes provides it, otherwise delegate_task's steer action with the turn-bound parent. Under plugins.isolation: host every tool except the roster refuses. Optionally the roster is read from an operator-named YAML file (roster_file, relative to the profile home or absolute, so several profiles can share one); the plugin never writes it. It keeps a per-profile SQLite run ledger in its plugin-data folder (goals, statuses, clipped summaries, role hashes an
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-teammates
Said no? Turn it on later:
hermes plugins enable hermes-teammates
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
A Miro-like board the agent draws with its own tools and you edit in a desktop pane, both sides working on one JSON document. board_apply builds a whole diagram in one call from ordered ops (nodes, edges, free lines, groups, notes, captions, layered auto-layout, bus trunks); board_render writes a PNG for chat or the interactive HTML editor; board_watch reports your own pane edits back to the agent. The pane docks beside the conversation with the same editor, saves your edits, and takes agent updates live.
Good to know before installing
Board_render shells out to a headless Chrome/Chromium already on PATH (nothing is downloaded; private temp profile, sandbox kept unless running as root) for PNG and self-test rendering; boards live in ~/.hermes/board/ shared across profiles (HERMES_BOARD_DIR / HERMES_BOARD_RENDER_DIR / HERMES_BOARD_WATCH override); serves /api/plugins/hermes-board/ on the plugin host; reads this profile's state.db read-only to find the session board_watch should wake; no external network calls and no stored credentials; board_watch's wake into a messaging chat additionally needs plugins.entries.hermes-board.allow_gateway_injection: true.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-board
Said no? Turn it on later:
hermes plugins enable hermes-board
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only Covision meeting, assigned-task, and published-knowledge tools through the Covision Streamable HTTP MCP service, plus a workflow skill. Requires a Covision account, organization connector enablement, and browser OAuth consent; no API key or client secret is stored in the plugin.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install covision
Said no? Turn it on later:
hermes plugins enable covision
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Osv Ref
Community
@cve:, @ghsa: and @osv: context references: attach a vulnerability record from OSV.dev to a message (summary, aliases, severity, affected packages with version ranges and fixed versions, details, references), with…
@cve:, @ghsa: and @osv: context references: attach a vulnerability record from OSV.dev to a message (summary, aliases, severity, affected packages with version ranges and fixed versions, details, references), with package data merged from up to four alias records.
Good to know before installing
Sends HTTPS GET requests to api.osv.dev/v1/vulns/<id> only (the referenced id and up to four of its alias ids leave the machine); no API key, no files written, no subprocess; register() only adds the @cve:, @ghsa: and @osv: reference providers.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install osv-ref
Said no? Turn it on later:
hermes plugins enable osv-ref
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Share Hermes Desktop conversations as long PNG screenshots, self-contained HTML, or Markdown — per-turn selection, turn gutter, search, per-turn collapsing and session metadata. The Hermes Desktop counterpart of dsh-share.
Good to know before installing
Makes no network calls; reads the conversation you share (and the session list, for its title) through the gateway's session.history / session.info / session.list RPCs; writes to the clipboard or downloads a file only when you trigger an export. HTML exports keep the conversation's image and link URLs, which load when the file is opened.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-chat-share
Said no? Turn it on later:
hermes plugins enable hermes-chat-share
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
German federal law, EU law and German federal court decisions for Hermes Agent: read one section or article (§ 203 StGB, Art. 6 DSGVO, Art. 50 AI Act) in the source wording with version status (Stand), gazette reference and a ready source line, search the index of federal laws, list a law's sections, and find and read published decisions of BVerfG, BGH, BVerwG, BFH, BAG, BSG and BPatG. Legal texts, not legal advice.
Good to know before installing
Sends HTTPS GET requests only to www.gesetze-im-internet.de (law folder names, the daily index, weekly abbreviation lists), www.rechtsprechung-im-internet.de (the daily index, document ids of decisions you read) and publications.europa.eu (CELEX numbers, text language, one SPARQL query per act listing its consolidated versions); section numbers and search words are not sent, because whole laws are downloaded and searched locally. Public sources, no key. Writes public legal texts and indexes (JSON with ETag, Last-Modified and fetch time; no questions, no session data) under HERMES_HOME/plugin-data/de-law/cache, capped by the cache_max_mb setting (default 200 MB). Reads only its own plugin settings. At most one request per second per host, 25 s timeout, 40 MB response cap. rechtsprechung-im-internet.de sends a tdm-reservation header; the plugin fetches its index and single decisions on request only, and case_law: false turns that source off. No hooks, no cron jobs, no background processes. Tools stay on every platform, including gateways (a guest can call them; hermes tools disables one). While the plugin is enabled, its skill adds one line to the skills index of every session.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install de-law
Said no? Turn it on later:
hermes plugins enable de-law
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Browse Tailscale devices and connect to remote Hermes instances in Hermes Desktop.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-tailscale
Said no? Turn it on later:
hermes plugins enable hermes-tailscale
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Webly
Community
Publish a website, or share files and folders, at a live *.webly.site URL from Hermes Agent with no account, then sign in to claim it, edit it, and publish drafts the person approves through the hosted Webly MCP server…
Publish a website, or share files and folders, at a live *.webly.site URL from Hermes Agent with no account, then sign in to claim it, edit it, and publish drafts the person approves through the hosted Webly MCP server (Streamable HTTP). Portable Agent Plugins v1 package (plugin.json + mcp.json + skills/).
Good to know before installing
MCP tool calls go to api.webly.ai/v1/mcp, sending WEBLY_API_KEY as a bearer header when it is set, and the webly server is marked untrusted so Hermes asks before each Webly MCP tool that changes something. The bundled webly skill runs a local Node.js 20+ helper (scripts/webly.mjs) through the shell: it uploads only the files and folders the person asks to publish or share to api.webly.ai (sites are public unless password-protected), runs the project's npm/pnpm/yarn install and build first when the folder has a build script, opens the browser for sign-in and claim, and keeps its anonymous-site token and optional OAuth sign-in in ~/.webly (mode 0600). Its doctor command reads ~/.claude.json, ~/.claude/settings.json and ~/.codex/config.toml only to see whether a webly MCP server is configured there. Publishing, deleting and replacing sites through that helper are gated by skill instructions, not by Hermes approvals. The catalog copy has no update check.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install webly
Said no? Turn it on later:
hermes plugins enable webly
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Thai (ภาษาไทย) Language Pack
Community
Thai (ภาษาไทย) language pack covering all three Hermes UI surfaces — Desktop (5,023/5,030), core CLI/gateway/platforms (3,437/3,437), and the Ink TUI (1,259/1,259) — 9,719/9,725 keys total (99.9%).
Thai (ภาษาไทย) language pack covering all three Hermes UI surfaces — Desktop (5,023/5,030), core CLI/gateway/platforms (3,437/3,437), and the Ink TUI (1,259/1,259) — 9,719/9,725 keys total (99.9%). All three catalogs checked against the English reference with `hermes plugins validate`. Manifest-only plugin: flat nested YAML overlays under locales/, no code, no network, no dependencies. Registering the pack never changes display.language — the user opts in via `hermes config set display.language th`.
Good to know before installing
Text-only catalogs (no code, network or dependencies); untranslated keys fall back to English: the 7 array/conditional Desktop keys listed in the repo README, plus strings Hermes added after the pack was built.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-lang-th
Said no? Turn it on later:
hermes plugins enable hermes-lang-th
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Token Lens
Community
Token consumption analytics for Hermes: records exact per-call usage from pre/post_api_request hooks, decomposes every request into categories (system prompt, built-in and per-MCP-server tool schemas, skills, memory…
Token consumption analytics for Hermes: records exact per-call usage from pre/post_api_request hooks, decomposes every request into categories (system prompt, built-in and per-MCP-server tool schemas, skills, memory, history, tool results, output, reasoning) calibrated to billed totals, and adds a Token Lens dashboard tab plus a Sessions-page card with deterministic and AI-evaluated token-reduction suggestions; `hermes token-lens refresh` runs a suggestion refresh from the CLI.
Good to know before installing
Records per-API-call token counts (no message text) from pre/post_api_request hooks into token_lens.db at the Hermes home root (per-call rows kept 90 days, rollups kept), and reads Hermes's state.db read-only for session token totals and, during the optional dashboard history import, message text for estimation only; after 10 recorded sessions it automatically calls your configured main model through Hermes's plugin LLM facade every 5 sessions (up to two calls per refresh, capped at 50,000 tokens by meta_budget_tokens), sending aggregated token statistics plus the names of your enabled MCP servers and plugins, and auto-applies the model's proposed category regex rules and rubric changes (logged to token_lens.EVOLUTION.md; evolve_rules: false turns this off); the dashboard's refresh button spawns a detached `hermes token-lens refresh` process that logs to logs/token-lens-refresh.log; its data paths follow the HERMES_HOME environment variable rather than the active profile, so in a multi-profile gateway every profile records into the launch profile's database; no third-party network calls, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install token-lens
Said no? Turn it on later:
hermes plugins enable token-lens
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Looot
Community
looot gives Hermes one sign-in and one prepaid balance for 2,500+ data API endpoints from 90+ providers: work emails and phones, company and people search, Google results, web pages as markdown, news, local businesses.
looot gives Hermes one sign-in and one prepaid balance for 2,500+ data API endpoints from 90+ providers: work emails and phones, company and people search, Google results, web pages as markdown, news, local businesses. Portable Agent Plugins v1 package with the hosted MCP server (remote streamable-http, OAuth 2.1 with dynamic client registration) and 21 skills.
Good to know before installing
The run tool spends your prepaid looot balance (Hermes asks before each paid call and refuses them in unattended runs); the names, domains and emails you look up are sent to looot.ai and its upstream data providers; a `looot` server you define in config.yaml replaces the package's and drops that prompt unless you add `trust: untrusted`.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install looot
Said no? Turn it on later:
hermes plugins enable looot
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rich, evidence-backed answer cards — tables, charts, metrics, timelines, sources — rendered inline in the desktop transcript
Good to know before installing
Image and ImageGallery cards load agent-supplied https image URLs (up to 8 per gallery) from any host when the card renders in Desktop
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-rich-ui
Said no? Turn it on later:
hermes plugins enable hermes-rich-ui
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Pep Ref
Community
@pep:<number> context references: attach a Python Enhancement Proposal to a message (status, type, authors, Python version and its first section, usually the Abstract), or one section with @pep:<number>#<section>, with…
@pep:<number> context references: attach a Python Enhancement Proposal to a message (status, type, authors, Python version and its first section, usually the Abstract), or one section with @pep:<number>#<section>, with PEP number and title autocomplete in the TUI and Desktop composer.
Good to know before installing
Sends HTTPS GET requests to peps.python.org only (the PEP index and the referenced PEP's page; section names and autocomplete text are matched locally); keeps the index in memory for an hour; no API key, no files written, no subprocess; register() only adds the @pep: reference provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install pep-ref
Said no? Turn it on later:
hermes plugins enable pep-ref
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Instant Context Compactor
Community
Instant context compaction for Hermes Agent: builds the compaction summary in milliseconds with no LLM call, keeping the exact commands, exit codes, errors and files, each linked back to its original message for recall…
Instant context compaction for Hermes Agent: builds the compaction summary in milliseconds with no LLM call, keeping the exact commands, exit codes, errors and files, each linked back to its original message for recall via session_search.
Good to know before installing
No network calls, shell commands or credentials; reads Hermes's config.yaml through Hermes's own loader; subclasses ContextCompressor and relies on its private methods, falling back to the stock compressor if they are missing.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-vcc-engine
Said no? Turn it on later:
hermes plugins enable hermes-vcc-engine
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Bot Forge
Community
Say "make me a <role>" and your agent spawns a complete Bot Mode Bot — name, face, SOUL.md, memory, tools, skills, routines, gateway — tested, with rollback.
Say "make me a <role>" and your agent spawns a complete Bot Mode Bot — name, face, SOUL.md, memory, tools, skills, routines, gateway — tested, with rollback. Then hire a whole crew in one call, ask what is waiting on you, and edit, teach, share and health-check Bots by chatting.
Good to know before installing
Spawns the hermes CLI to create and run Bot profiles under HERMES_HOME/profiles/, and installs its own small companion hook plugin (bot-forge-marks, two hooks, no tools) into each Bot profile it manages, enabling it in that profile's config.yaml; never the root profile. Disclosure — when a Bot journals a blocked/failed entry, the plugin emails its title and summary to your own address via the SMTP account in Hermes' EMAIL_* settings (TLS verified; off with notify_blocked or notify_email false); adopt_bots (off by default) installs the companion hook into every profile on load.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install bot-forge
Said no? Turn it on later:
hermes plugins enable bot-forge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Yandex Search API
Community
Yandex Search API as a backend for the built-in web_search (provider name yandex), plus a yandex_generative_search tool for grounded answers with cited sources.
Yandex Search API as a backend for the built-in web_search (provider name yandex), plus a yandex_generative_search tool for grounded answers with cited sources.
Good to know before installing
Sends web_search queries and yandex_generative_search questions to searchapi.api.cloud.yandex.net, or to the base URL in YANDEX_SEARCH_API_URL if you set one, with your YANDEX_API_KEY and YANDEX_FOLDER_ID read through Hermes; the Search API is a paid Yandex Cloud service billed to the folder that owns the key; no other endpoint, no telemetry, no file or shell access, no background process. Independent community plugin, not affiliated with Yandex.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs YANDEX_API_KEY, YANDEX_FOLDER_ID), then asks whether to turn it on.
hermes plugins install yandex
Said no? Turn it on later:
hermes plugins enable yandex
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Generic Freshdesk API v2 tools for Hermes Agent. Unaffiliated community connector, not a Freshworks product.
Good to know before installing
Calls the account's native Freshdesk HTTPS origin with profile-scoped secrets FRESHDESK_DOMAIN and FRESHDESK_API_KEY; downloads an attachment into the Hermes cache only from that ticket's own attachment hosts; the five write tools (private note, create ticket, public reply that Freshdesk emails to the ticket's requester, time entry, status/priority update) escalate to Hermes human approval and fail closed when no person is present. No third-party dependencies, shell commands, telemetry, or self-updater.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs FRESHDESK_DOMAIN, FRESHDESK_API_KEY), then asks whether to turn it on.
hermes plugins install freshdesk
Said no? Turn it on later:
hermes plugins enable freshdesk
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Eighteen Hermes Desktop themes in dithered classical marble, one god each: all twelve Olympians plus Hades, Nyx, Helios, Selene and Medusa. Install once, then switch with /skin <name>. Matching terminal skins ship in cli/skins.
Good to know before installing
Theme-only desktop plugin: it registers eighteen themes through the plugin SDK, and their stylesheets restyle parts of Desktop's own UI (sidebar art, tabs, composer, wordmark) only while a Pantheon theme is active. It also watches Desktop's active theme: when a terminal skin named pantheon-<god> is active, it switches Desktop to that god's theme through the SDK's requestTheme. The terminal skins are plain YAML files the user copies into the Hermes skins folder by hand; the plugin does not install them or write any files. Fonts and art are bundled; no network requests, no agent tools or hooks.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-pantheon
Said no? Turn it on later:
hermes plugins enable hermes-pantheon
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Catalan (Català) language pack for Hermes Agent — UI translation for core (CLI, gateway, approval prompts and tips), TUI and Desktop. Covers all text-overridable catalog keys; preserves command syntax and non-text Desktop values. Manifest-only plugin, no code execution, no network.
Good to know before installing
Text-only catalogs; registering the pack never changes display.language, the user opts in via config.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-lang-ca
Said no? Turn it on later:
hermes plugins enable hermes-lang-ca
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Read-only Unraid monitoring for Hermes Desktop: server metadata, array capacity, Docker containers, virtual machines, and grouped alerts.
Good to know before installing
Sends fixed GraphQL queries to the user-configured Unraid host and stores a VIEWER key through Hermes secret scope; no telemetry, background process, shell, SSH, MCP, or mutations.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs UNRAID_API_KEY), then asks whether to turn it on.
hermes plugins install unraid
Said no? Turn it on later:
hermes plugins enable unraid
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Agentplaybooks Tools
Community
Connect AgentPlaybooks skills and hosted MCP/OpenAPI tools to Hermes, with guided setup, profile selection, permission diagnostics and an authenticated MCP check.
Connect AgentPlaybooks skills and hosted MCP/OpenAPI tools to Hermes, with guided setup, profile selection, permission diagnostics and an authenticated MCP check. Requires Node.js 20+ and @agentplaybooks/cli@0.7.0; the CLI is installed separately.
Good to know before installing
Skill-only; the separately installed apb CLI does the work. `apb hermes setup --apply` restores complete skill trees into the chosen project and edits the selected Hermes profile's config.yaml to register those skills and a hosted playbook MCP endpoint. Local writes require --apply; setup also probes MCP initialization and tool listing using a scoped key from the process environment, without invoking tools. `doctor` checks profile credential variable names without exposing their values. Hosted operations contact agentplaybooks.ai (or an explicitly configured service); skill restore uses `apb login`, and `apb push --apply` uploads project configuration (secret references, not values).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install agentplaybooks-tools
Said no? Turn it on later:
hermes plugins enable agentplaybooks-tools
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Otel
Community
OpenTelemetry for Hermes Agent: sessions, LLM and API calls, tool calls, sub-agents and approvals as OTLP traces, metrics and logs to any OTLP backend.
OpenTelemetry for Hermes Agent: sessions, LLM and API calls, tool calls, sub-agents and approvals as OTLP traces, metrics and logs to any OTLP backend.
Good to know before installing
Sends span data including prompts, tool arguments and tool output only to backends you configure (a backends: list, an OTEL_* variable, or LANGSMITH_TRACING=true); by default content_capture is full and unclipped (preview clips to 1200 chars, off sends none); vendor SDK keys already in the environment are used only after that opt-in; with nothing configured it keeps a local owner-only SQLite store under $HERMES_HOME and sends nothing; installs opentelemetry-api, -sdk, -exporter-otlp-proto-http (>=1.35,<2) and PyYAML.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes_otel
Said no? Turn it on later:
hermes plugins enable hermes_otel
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Rfc Ref
Community
@rfc:<number> context references: attach an IETF RFC's record from the RFC Editor to a message (title, status, date, authors, abstract, what it obsoletes and updates and what obsoletes or updates it, errata link).
@rfc:<number> context references: attach an IETF RFC's record from the RFC Editor to a message (title, status, date, authors, abstract, what it obsoletes and updates and what obsoletes or updates it, errata link).
Good to know before installing
Sends one HTTPS GET per reference to www.rfc-editor.org/rfc/rfc<number>.json only (the referenced RFC number leaves the machine); no API key, no caching, no files written, no subprocess; register() only adds the @rfc: reference provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install rfc-ref
Said no? Turn it on later:
hermes plugins enable rfc-ref
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.
