909 plugins from the official Hermes plugin catalog: 20 official, 9 verified and 880 from the community. 206 were added in the last week. Search, filter by what you want to do, and copy the install command.
80 plugins. Sorted by HermesWatcher's picks: usefulness, polish and trust. Official: made by Nous Research. Verified: listed with a verified maintainer. Community: built by others, so read the source first.
Fish Audio
Community
Lifelike voices for your agent: Fish Audio's expressive text-to-speech in 80+ languages, plus transcription, voice cloning and a voice library.
Lifelike voices for your agent: Fish Audio's expressive text-to-speech in 80+ languages, plus transcription, voice cloning and a voice library. The official Fish Audio plugin: Fish's Drama 3 model with word-level direction, speech-to-text, Fish Audio's community voice library, voice cloning and voice design, with a Voices page in Hermes Desktop. Fish Audio becomes a Hermes speech and transcription provider for voice replies, read-aloud, voice notes and Desktop dictation, with sentence-by-sentence streaming in CLI voice mode and Desktop, and live dictation captions on Hermes 0.21.6+ (stt.streaming: true). Adds the fish_speak, fish_voices and fish_transcribe tools, /fish and hermes fish commands, and four skills.
Good to know before installing
Sends your Fish API key and the text, audio (with file names) and voice titles, tags, descriptions, cover images and design instructions you ask it to process to api.fish.audio, or to the base_url you configure, and reads your Fish wallet for balances and model choice; with live dictation on, microphone audio streams to api.fish.audio's realtime speech-to-text endpoint while you speak, billed per committed phrase rounded up to a second; synthesis, transcription, cloning and voice design are paid requests billed to your Fish account, except the free s2.1-pro-free model (free through 30 November 2026), whose requests Fish may use to improve its models. The key comes from the profile's secret scope (Hermes stores it in the profile .env; a single-profile install may also read FISH_API_KEY from the environment). Generated audio and subtitles are written to Hermes's audio cache; clone samples and recordings it uploads must be regular audio files, and Hermes config, secret and credential paths are refused. Cloning and deleting voices from chat or the model tools go through Hermes's approval gate and follow your approval settings. The Desktop Voices page and a Fish Audio settings page add
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs FISH_API_KEY), then asks whether to turn it on.
hermes plugins install fish-audio
Said no? Turn it on later:
hermes plugins enable fish-audio
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Gives a Hermes agent its own email address. Inbound mail wakes the agent over a websocket, replies go out in-thread, plus tools for sending, reading and provisioning inboxes.
How to install
Install it. Hermes asks for any API keys it needs (this one needs OPENMAIL_API_KEY), then asks whether to turn it on.
hermes plugins install openmail
Said no? Turn it on later:
hermes plugins enable openmail
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Talk to your Hermes from small ESP32 devices with a screen, microphone and speaker: hold a button, ask, and hear the answer. Adds a gateway platform where each device is a chat, plus tools to list devices, show a card on a screen and run device actions (LEDs, relays).
Good to know before installing
The gateway listens for devices on a WebSocket port (8765, all interfaces by default; plain ws:// unless tls_cert/tls_key are set). New devices need a Hermes pairing code unless listed in GADGET_ALLOWED_USERS; GADGET_ALLOW_ALL_USERS skips pairing (development only). A paired device answers the agent's command approvals for its own chat (allow once or deny), within Hermes's approval timeout. The first approved device becomes the platform's home channel by default. Session hooks feed a dashboard on paired devices with each agent session's platform, a short id and its state (idle, busy, waiting for approval); a device that can switch profiles also sees the offered profiles' sessions. Optional profile switching (off unless `profiles` is set in the default profile's gadget config) lets a device paired on the default profile talk to the listed profiles; each profile approves the device through its own pairing flow (the device shows the `hermes -p <profile> pairing approve` command), the plugin writes nothing into other profiles, and revoking the device in the default profile sends it back there. Spoken replies that are not WAV are converted with the local ffmpeg; Opus reply audio uses th
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install gadget
Said no? Turn it on later:
hermes plugins enable gadget
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
/call Me
Community
/call-me gateway: text your Hermes agent from the /call-me iPhone app, and the callme_call tool rings your phone, speaks the agent's text and returns your spoken answer as a transcript.
/call-me gateway: text your Hermes agent from the /call-me iPhone app, and the callme_call tool rings your phone, speaks the agent's text and returns your spoken answer as a transcript.
Good to know before installing
Talks only to the /call-me service at https://callmemcp.com/aiphone (run by the plugin author): creates one agent session, sends texts and call requests, and long-polls for replies while the gateway runs (at most one request every 3 seconds); sends message text, the text to be spoken and the destination numbers, and call audio is transcribed by the service so only the transcript comes back; the agent session token and event cursor are stored at $HERMES_HOME/plugin-data/call-me/session.json (mode 600); only numbers in CALLME_ALLOWED_USERS can message the agent or be called, and inbound messages must come from that number's verified /call-me device; callme_call blocks until the call ends (300 seconds at most) and returns missed if nobody answers; no shell commands, telemetry or self-update. The /call-me iPhone app that receives the messages and calls needs a paid subscription; the plugin itself is free and MIT-licensed.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs CALLME_ALLOWED_USERS), then asks whether to turn it on.
hermes plugins install call-me
Said no? Turn it on later:
hermes plugins enable call-me
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Inkbox email, SMS/MMS, iMessage, voice, and A2A platform plugin for Hermes Agent.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install inkbox
Said no? Turn it on later:
hermes plugins enable inkbox
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
WhatsApp Voice Calls
Community
Live voice calls with Hermes over WhatsApp, on the linked-device (personal number) setup most Hermes users already have, with no WhatsApp Business account.
Live voice calls with Hermes over WhatsApp, on the linked-device (personal number) setup most Hermes users already have, with no WhatsApp Business account. Call your bot's number and talk to your Hermes: the voice uses Hermes's own persona (a short briefing fetched from Hermes) and hands real work to Hermes mid-call. Or let Hermes call you for things that matter: whatsapp_call_owner rings only the configured owner number (it has no destination parameter) and reports answered, no answer or declined, so the agent can fall back to another channel, including from cron. A short summary of each call arrives in WhatsApp. Speech runs on Gemini Live (gemini-3.8-live by default), reusing the Gemini key Hermes already has; any Live setup field is configurable, plus a language lock. Setup is a dashboard tab (pairing QR, settings, test call) or an agent runbook skill.
Good to know before installing
Runs a separate sidecar process (Rust, built on whatsapp-rust) that the user starts or installs as a systemd/launchd user service; the binary is downloaded from this repo's GitHub release, built and attested by its release workflow, and checked against checksums pinned in the repo (plus the build attestation when the gh CLI is present). The sidecar becomes an extra linked device of the bot's WhatsApp number through an unofficial protocol, stores that session in the plugin's data directory, and answers only the owner's number. During calls it streams audio to generativelanguage.googleapis.com with GOOGLE_API_KEY or GEMINI_API_KEY (read via get_secret), along with the persona briefing, the outgoing call's reason and ask_hermes results as text. It calls the local api_server with API_SERVER_KEY for ask_hermes (a full Hermes turn with the owner's tools), the persona briefing (at startup and after each call) and the post-call summary, a run that may write to Hermes memory and whose result is sent to the owner on WhatsApp. The dashboard tab's backend saves only this plugin's settings (through hermes config set), starts and stops pairing, places test calls to the owner, and restarts the si
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-whatsapp-voice
Said no? Turn it on later:
hermes plugins enable hermes-whatsapp-voice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Telesec
Community
Telegram Business secretary: transcribes voice notes, round videos, and speech attachments right in the chat, with Settings and per-chat controls in Telegram's Manage Bot panel, plus opt-in text history (with import…
Telegram Business secretary: transcribes voice notes, round videos, and speech attachments right in the chat, with Settings and per-chat controls in Telegram's Manage Bot panel, plus opt-in text history (with import from a Telegram export), correspondence stats, and contact dossiers.
Good to know before installing
Audio goes to the STT backend Hermes is configured with (local or external); transcript cleanup sends chat text through the host ctx.llm; opt-in dossiers send chat text through the Hermes model task telesec_dossier (default Vercel AI Gateway to Google with zero data retention; an optional message check on the same gateway and optional Cloudflare fact extraction are off by default); an owner-sent /dossier posts that contact's stored dossier (without the owner note, but written with it) into the Business chat for the contact to read; runs local ffprobe/ffmpeg (argument lists, no shell) on attached audio; opt-in dossiers run a gateway background thread; modes, opt-in history, and dossiers are stored 0600 under HERMES_HOME/data/telesec; reads only the numeric bot id prefix of TELEGRAM_BOT_TOKEN; no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install telesec
Said no? Turn it on later:
hermes plugins enable telesec
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Pidgeon
Community
Email for Hermes through Pidgeon: mail to your agent's own address starts a conversation, one per email thread, and the agent's answer goes back as a reply in that thread.
Email for Hermes through Pidgeon: mail to your agent's own address starts a conversation, one per email thread, and the agent's answer goes back as a reply in that thread. The agent reads Pidgeon Firewall's clean text, mail flagged as prompt injection is held before it reaches the agent, mail whose From fails DMARC never reaches it, and the agent can only reply, never write to a new recipient. Standard library only.
Good to know before installing
While the gateway runs it polls pidgeon.ai (or `PIDGEON_BASE_URL`) every five seconds with `PIDGEON_API_KEY` and sends the agent's answers as email replies through Pidgeon; mail from senders in `PIDGEON_ALLOWED_USERS` that passes DMARC becomes agent turns with the agent's full toolset (Firewall-flagged mail is held by default; setting `PIDGEON_ALLOW_UNAUTHENTICATED=true` also admits mail whose From is not authenticated, so anyone who knows an allowed address could instruct the agent), and a cursor/message-id state file is kept under `<HERMES_HOME>/pidgeon/`.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs PIDGEON_API_KEY), then asks whether to turn it on.
hermes plugins install pidgeon
Said no? Turn it on later:
hermes plugins enable pidgeon
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Speech
Community
Give your agent the voice it deserves. Guided TTS and STT setup for Hermes, with voice search and previews, model switching, testing, and native spoken replies across supported providers.
Give your agent the voice it deserves. Guided TTS and STT setup for Hermes, with voice search and previews, model switching, testing, and native spoken replies across supported providers. Access 80+ speech models through a single API key with the AllModels router.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-speech
Said no? Turn it on later:
hermes plugins enable hermes-speech
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
MAX messenger gateway with polling/webhook, streaming, interactive questions, native attachments, Core voice transcription, optional PNG tables and a Desktop sessions sidebar.
Good to know before installing
Sends the bot token and message/file content to the MAX Bot API (platform-api2.max.ru) and MAX upload hosts (*.max.ru, *.oneme.ru, *.okcdn.ru). Inbound attachments are downloaded only for allowlisted senders, with SSRF protection, and cached under HERMES_HOME. The bundled Russian Trusted Root CA is trusted only by the MAX API/upload clients, not attachment downloads. Its platform hint lets the agent attach local host files to MAX replies via MEDIA paths, and a public output hook adds a filename caption to file-only MAX replies. Webhook mode opens a listener (default 0.0.0.0:8646) that requires a secret and public HTTPS. Polling startup deletes all of the bot's webhook subscriptions. Optional table rendering launches Playwright/Chromium; with MAX_AUTO_INSTALL_PLAYWRIGHT=true it pip-installs playwright==1.62.0 and downloads Chromium (~115 MB). The MAX allowlist does not honour Hermes pairing approvals. No telemetry or self-update.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs MAX_BOT_TOKEN), then asks whether to turn it on.
hermes plugins install max-platform
Said no? Turn it on later:
hermes plugins enable max-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Privacy-first agent email inboxes and workspace automation through hosted Mermail MCP. Portable Agent Plugins v1 package (mcp.json + skills/, seventeen skills bundled); authenticate with OAuth via `hermes mcp login mermail`. No credentials are stored in mcp.json.
Good to know before installing
The bundled skills also expose Mermail's paybox wallet tools over the hosted MCP (x402 payments, xStocks trading, standing grants); the skills allow the agent to move funds without a same-turn confirmation when your message already states exact terms, so spending controls live on your Mermail account, not in Hermes.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install mermail
Said no? Turn it on later:
hermes plugins enable mermail
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Use Hermes Agent from Inline work-chat DMs, chats, and reply threads.
Good to know before installing
The setup wizard can, on explicit opt-in, download https://inline.chat/cli/install.sh and pipe it to sh without a checksum, then run the vendor inline CLI login; on connect the adapter publishes your Hermes slash-command list and the names and descriptions of installed skills to the Inline server (INLINE_SYNC_COMMANDS=false disables); error telemetry is off unless a Sentry DSN is set.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs INLINE_TOKEN), then asks whether to turn it on.
hermes plugins install inline-platform
Said no? Turn it on later:
hermes plugins enable inline-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Draft enhancement, reusable prompt libraries, undo/redo, and owner-bound full-duplex voice for Hermes Desktop.
Good to know before installing
Derived from hermes-live-voice by Synero (itself derived from hermes-talk) and prompt-enhance by apoapostolov (both MIT; notices preserved). Starting voice captures microphone audio. The Codex-subscription lane spawns the official codex app-server CLI under its own login with a minimal environment; through it the captured profile's SOUL.md (up to 4,000 chars), the list of installed skills and enabled tools, and Hermes task results go to OpenAI. The API lane runs only when COMPOSER_REALTIME_OFFER_URL is set: it posts the SDP offer to that https URL with COMPOSER_OPENAI_API_KEY, or the profile's OPENAI_API_KEY, as a Bearer token (redirects refused). A user-configured wss:// bridge receives microphone audio, chat/profile identifiers and task results. Spoken requests the voice model delegates run as Hermes agent turns with tools in the chat where voice started; runs that need approval are stopped, not approved. Settings and usage totals are stored under HERMES_HOME/plugin-data/enchanted-composer/. No telemetry, no self-updater, no Codex OAuth-file reads.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install enchanted-composer
Said no? Turn it on later:
hermes plugins enable enchanted-composer
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
The official Speechify text-to-speech provider (tts.provider: speechify), maintained by Speechify. Simba 3.5 voices in 48 languages with low-latency streaming in voice mode, Opus voice notes for messaging platforms, and a hermes speechify command to list voices and hear a test line.
Good to know before installing
Sends the text being spoken, the chosen voice and model, the plugin's name and version (Speechify-Caller attribution headers), and your SPEECHIFY_API_KEY to api.speechify.ai (or the base_url / SPEECHIFY_BASE_URL you configure); synthesis is billed to your Speechify workspace; generated audio is written to Hermes's audio cache; no tools, hooks or middleware; no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SPEECHIFY_API_KEY), then asks whether to turn it on.
hermes plugins install speechify
Said no? Turn it on later:
hermes plugins enable speechify
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Give your agent someone to talk to. Index is the social layer between personal agents. It makes it possible to find the others who share your flavor of weird, no searching or posting needed. You're already telling your agent what you're interested in, and what you're secretly tinkering on. We give personal agents the coordination protocol to socialize their humans' intents. They structure mutual intents into opportunities, negotiate on fit, learn from each turn, and surface connections between people who otherwise might've just missed each other.
Good to know before installing
Login (browser or `hermes index login`) writes INDEX_SESSION_TOKEN and INDEX_API_URL to the Hermes env. When this install is the selected negotiator (under the gateway, Desktop's backend or the dashboard), a Bun child (INDEX_BUN, else PATH) runs the pinned bundle with an allowlisted environment (PATH, HOME, TMPDIR, LANG, LC_ALL, TZ plus names in INDEX_NEGOTIATOR_ENV_PASSTHROUGH; never the session token, no .env files) and drives your Hermes model over a loopback bridge; only with plugins.entries.index-network.settings.custom_negotiator set to true (default off) does the bundle import $HERMES_HOME/index/negotiator.ts, when it exists, and run it on each turn before the built-in negotiator (code in that file runs with the negotiator's Index API key and model bridge); the plugin mints INDEX_API_KEY from the session if it is missing, saves it to the Hermes env and registers the Index MCP server in config.yaml. API traffic goes to protocol.index.network. If INDEX_EARLY_NETWORK_ID is set, confirming onboarding joins that Index network. Negotiation turns are saved as Hermes sessions in a Negotiations project. The 08:00 "Index morning" cron job is off until turned on; when on it wakes the n
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs INDEX_SESSION_TOKEN), then asks whether to turn it on.
hermes plugins install index-network
Said no? Turn it on later:
hermes plugins enable index-network
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Realtime voice for Hermes through terminal, Discord, dashboard and Desktop. Live voice mode (TALK_VOICE_MODE=live, TALK_LIVE_AUTH=subscription) connects with your own Codex OAuth session to the undocumented chatgpt.com/backend-api/codex/realtime/calls endpoint, which is outside the vendor's published API terms and may change or stop working without notice.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-talk
Said no? Turn it on later:
hermes plugins enable hermes-talk
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Vector Platform
Community
Vector (vectorapp.io) messaging platform plugin: Hermes becomes a first-class Nostr-based Vector bot (its own nsec/npub identity), relaying DMs through a local Rust sidecar that wraps vector-sdk.
Vector (vectorapp.io) messaging platform plugin: Hermes becomes a first-class Nostr-based Vector bot (its own nsec/npub identity), relaying DMs through a local Rust sidecar that wraps vector-sdk. First run needs `hermes gateway setup`, which provisions the bot identity (create or import).
Good to know before installing
`hermes gateway setup` downloads a prebuilt vector-bridge binary from github.com/BonesGit/hermes-vector-platform/releases (tag v<version>, sha256 checked against that release's SHA256SUMS; set vector.prebuilt.download: false to build from the bundled Rust source), merges `vector:` settings into ~/.hermes/config.yaml, writes VECTOR_* to ~/.hermes/.env, and publishes a public bot profile (kind-0, bot: true) to Nostr discovery relays.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs VECTOR_NPUB), then asks whether to turn it on.
hermes plugins install vector-platform
Said no? Turn it on later:
hermes plugins enable vector-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Minecraft gateway adapter for Hermes Agent. Spawns a Mineflayer bot that joins a Minecraft server, wanders around, and relays chat messages between players and the Hermes agent. Supports offline and Microsoft-authenticated accounts.
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install minecraft-platform
Said no? Turn it on later:
hermes plugins enable minecraft-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Live Voice
Community
Full-duplex Live Voice for Hermes Desktop — GPT-Live-1 on the ChatGPT/Codex subscription via the local Codex app-server, with live transcript, voice tool calls and task delegation to the user chat.
Full-duplex Live Voice for Hermes Desktop — GPT-Live-1 on the ChatGPT/Codex subscription via the local Codex app-server, with live transcript, voice tool calls and task delegation to the user chat.
Good to know before installing
Subscription voice uses your Hermes openai-codex sign-in through Hermes-signed requests (requires_auth; the plugin never holds or refreshes the token) to mint OpenAI Realtime client secrets, and the usage panel reads Hermes's own account-usage fetcher; the gpt-live-1 lane runs the local codex app-server on the Codex CLI's own login, and the dashboard can run codex login --device-auth, copying ~/.codex/auth.json (or $CODEX_HOME) to a backup before that login, restoring the backup if the login is cancelled, and reading the file read-only for sign-in status; with TALK_OPENAI_API_KEY or OPENAI_API_KEY set it uses that key instead; if hermes-talk is installed it loads that plugin's modules from ~/.hermes/plugins/hermes-talk and substitutes its own talk_auth; voice audio goes to OpenAI over WebRTC, and spoken tasks are submitted as messages in your focused chat.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-live-voice
Said no? Turn it on later:
hermes plugins enable hermes-live-voice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Zalo Platform
Community
Zalo Bot Platform gateway adapter for Hermes Agent — relays messages between Zalo DMs/groups and the agent over the official Bot API (bot-api.zaloplatforms.com), long-polling or webhook mode.
Zalo Bot Platform gateway adapter for Hermes Agent — relays messages between Zalo DMs/groups and the agent over the official Bot API (bot-api.zaloplatforms.com), long-polling or webhook mode. Adds slash commands and moderation. Zero extra dependencies (uses httpx, already a Hermes dependency). Production-tested on multiple Vietnamese deployments.
Good to know before installing
Connects to the third-party Zalo Bot API (bot-api.zaloplatforms.com) with your bot token; long-polling by default, or opt-in webhook mode with a listener on 127.0.0.1 by default that checks the X-Bot-Api-Secret-Token header; the setup wizard writes ZALO_* values to ~/.hermes/.env; group chat history is stored locally under <HERMES_HOME>/zalo-history.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs ZALO_BOT_TOKEN), then asks whether to turn it on.
hermes plugins install zalo-platform
Said no? Turn it on later:
hermes plugins enable zalo-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Pre-release Microsoft 365 Graph tools for Outlook, SharePoint, OneDrive, Calendar, Teams, To Do, and Planner.
How to install
Install it. Hermes asks for any API keys it needs (this one needs MICROSOFT365_CLIENT_SECRET), then asks whether to turn it on.
hermes plugins install microsoft365
Said no? Turn it on later:
hermes plugins enable microsoft365
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Stt Vocab
Community
Puts the names a speech-to-text model mis-hears into the transcription prompt Hermes sends with each voice message: terms you list (globally or per surface) and names found in this profile's memories/USER.md and…
Puts the names a speech-to-text model mis-hears into the transcription prompt Hermes sends with each voice message: terms you list (globally or per surface) and names found in this profile's memories/USER.md and MEMORY.md, most important last, within the 896 characters Hermes keeps for Whisper-family backends; your stt.prompt stays in front. Notes written in German, Spanish, French, Italian, Dutch, Portuguese or Turkish can be named in the languages setting.
Good to know before installing
Register() adds one pre_transcription hook that returns a new prompt string; memory-derived names go only to local backends (faster-whisper, local_command) unless allow_remote is set, and the memory files are not read otherwise; reads at most 256 KB per memory file; no tools, network access, subprocesses or writes; Hermes uploads the prompt with the audio to the configured STT provider.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install stt-vocab
Said no? Turn it on later:
hermes plugins enable stt-vocab
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Mobile Adapter
Community
WebSocket platform for your own mobile, desktop or web app: it talks to the agent directly — text, voice, images, video and documents in both directions, approval/clarify/slash cards answered from the app, streaming…
WebSocket platform for your own mobile, desktop or web app: it talks to the agent directly — text, voice, images, video and documents in both directions, approval/clarify/slash cards answered from the app, streaming edits, typing and avatar state events, cron delivery to a chosen device. On request it also answers command-catalog and model-list frames (commands from the agent's own registry, models from its model inventory) so a client renders command and model pickers from the agent's data instead of bundling a snapshot; auto-push after ready is off by default (MOBILE_CATALOG_AFTER_READY=1). Ships TypeScript and Python SDKs, platform guides and an acceptance checklist.
Good to know before installing
Opens a listening WebSocket server (plain ws://, no built-in TLS; 127.0.0.1:8787 by default, the wildcard address only when set, behind a wss proxy) guarded by MOBILE_TOKEN plus optional per-device tokens; anyone holding an unbound token can chat with the agent, run slash commands and answer the approval and clarify cards of the device id they connect as; device_id=token entries bind a token to one device. deliver frames are accepted only from loopback peers or MOBILE_DELIVER_TOKENS. Inbound media is written under $HERMES_HOME/mobile-media; secrets are read through Hermes's profile-scoped route; approvals resolve through Hermes's own resolvers; no telemetry, no third-party network calls, no self-update.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs MOBILE_TOKEN), then asks whether to turn it on.
hermes plugins install hermes-mobile
Said no? Turn it on later:
hermes plugins enable hermes-mobile
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Voice Ledger
Community
Local ledger of the voice messages and recordings Hermes transcribes (voice messages from messaging platforms, CLI voice mode): /voice-log shows how many recordings there were, how much audio in total and typically…
Local ledger of the voice messages and recordings Hermes transcribes (voice messages from messaging platforms, CLI voice mode): /voice-log shows how many recordings there were, how much audio in total and typically, and how long ago the last one was, per speech-to-text provider, model, source, language or day, for the last 24 hours, any number of hours or days or everything recorded; /voice-log recent lists the newest recordings (ten, or up to 100 with /voice-log recent 50).
Good to know before installing
Writes recording metadata (source, provider, model, language, file size read from the file system; no audio, file path, prompt or transcript) to plugin-data/voice-ledger/voice.jsonl, trimmed to 5,000 rows past 2 MB; observer only, always returns None so the transcription request is unchanged; no network
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install voice-ledger
Said no? Turn it on later:
hermes plugins enable voice-ledger
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
WhatsApp Agent Platform
Community
Community platform plugin (not affiliated with Meta or Nous Research) connecting a WhatsApp Agent to Hermes through Meta's WhatsApp Agent Platform API (/agent/v1): long-poll inbound (no public URL), text and media.
Community platform plugin (not affiliated with Meta or Nous Research) connecting a WhatsApp Agent to Hermes through Meta's WhatsApp Agent Platform API (/agent/v1): long-poll inbound (no public URL), text and media.
Good to know before installing
Sends the API key and message content, files included, only to Meta: api.whatsapp.com, plus lookaside.fbsbx.com for downloads (per WhatsApp's Third-Party Agents Terms, agent chats are not end-to-end encrypted); stores the poll cursor, recent message ids and the creator's id under HERMES_HOME; no other network egress, no telemetry, no self-update. Exception: Hermes fetches image URLs in replies (SSRF-guarded, no key), revealing the server's IP to that host. Files go only to the creator; Meta keeps uploads up to 30 days. Received files are cached under HERMES_HOME (deleted after ~24 h while the gateway runs) and may reach the configured model, vision or speech-to-text provider. WHATSAPP_AGENT_PLATFORM_MEDIA_ENABLED=false disables media. By default only the agent's creator (verified through Meta's API) can message Hermes; WHATSAPP_AGENT_PLATFORM_ALLOWED_USERS or WHATSAPP_AGENT_PLATFORM_ALLOW_ALL_USERS widens that explicitly. The agent API key is saved to the Hermes .env; the state file under HERMES_HOME is 0600 and never contains the key.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs WHATSAPP_AGENT_PLATFORM_API_KEY), then asks whether to turn it on.
hermes plugins install whatsapp-agent-platform
Said no? Turn it on later:
hermes plugins enable whatsapp-agent-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Kokoro TTS (local, Apple Silicon)
Community
Local Kokoro-82M text-to-speech on Apple Silicon: adds the kokoro-mlx speech provider (tts.provider: kokoro-mlx) with sentence-by-sentence PCM streaming for voice mode, read-aloud and text_to_speech, 54 voices in nine…
Local Kokoro-82M text-to-speech on Apple Silicon: adds the kokoro-mlx speech provider (tts.provider: kokoro-mlx) with sentence-by-sentence PCM streaming for voice mode, read-aloud and text_to_speech, 54 voices in nine languages, an optional voice per language that switches per sentence between Portuguese and English, and an optional dictionary of English words a non-English voice pronounces in English without changing voice; plus hermes kokoro install, status, restart, voices, say, words and uninstall.
Good to know before installing
Hermes kokoro install creates a separate Python 3.11 environment with uv (about 1.1 GB from PyPI, plus spaCy's en_core_web_sm wheel from its GitHub release, pinned by SHA-256), downloads mlx-community/Kokoro-82M-bf16 at a pinned revision from Hugging Face (about 340 MB), and installs a launchd agent (dev.hermes.kokoro-tts) that keeps a local server running in the background. The server listens only on 127.0.0.1 (it refuses other addresses), runs offline, and does not log the text; the text to speak goes only to that local server, bypassing any proxy settings. Writes the environment, model cache and log under ~/Library/Application Support/hermes-kokoro-tts, the requested audio files, and the profile's config.yaml only when you run hermes kokoro words add or remove. No API keys, no telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install kokoro-tts
Said no? Turn it on later:
hermes plugins enable kokoro-tts
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
AgentChat — peer-to-peer messaging for AI agents. Owns its own WebSocket; pokes the agent on inbound; the agent decides whether to reply. Send is a tool call, never automatic. Bundles the etiquette skill.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install agentchat
Said no? Turn it on later:
hermes plugins enable agentchat
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Gemini Live Bridge
Community
Realtime duplex voice chat with the Gemini Live API — a status-bar minibar for the Hermes desktop app (transcript, model catalog, thinking level, session token meter, auto-redial via session resumption).
Realtime duplex voice chat with the Gemini Live API — a status-bar minibar for the Hermes desktop app (transcript, model catalog, thinking level, session token meter, auto-redial via session resumption). Full-proxy architecture: the plugin backend owns the upstream Live WebSocket and the user's key (requires_env GOOGLE_API_KEY); the desktop UI only talks to localhost and receives single-use ephemeral tokens. No agent tools; desktop-focused, dashboard tab hidden.
Good to know before installing
Pressing Start captures microphone audio and streams it through the local backend to generativelanguage.googleapis.com using GOOGLE_API_KEY (or GEMINI_API_KEY) from the environment; input/output transcripts are held in backend memory for the session, and a Gemini session-resumption handle is written to .resume.json inside the plugin's install directory.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs GOOGLE_API_KEY), then asks whether to turn it on.
hermes plugins install gemini-live-bridge
Said no? Turn it on later:
hermes plugins enable gemini-live-bridge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
rply gateway platform: talk to Hermes from the rply inbox on your phone and laptop, with web push. Messages and files both ways, seen/working/done with a live activity note, clarify questions and command approvals as tappable questions, cron delivery, a pinned table of scheduled jobs, a dashboard app with run/pause/resume, and an rply_request_secret tool that saves API keys to the profile's .env without the value passing through the chat. Each profile joins the channel as its own agent.
Good to know before installing
Keeps a long-polling connection to the configured rply server only (RPLY_SERVER, default https://app.rply.sh; self-hostable, AGPL server); messages the channel's members send reach Hermes as user instructions and members answer its approval and clarify prompts; the dashboard sends the server Hermes' cron job list, the titles and previews of the 10 most recent sessions from every platform, token and cost totals and the default model, and runs, pauses or resumes jobs when its buttons are pressed; stores the agent token in the profile's .env, an X25519 keypair in <profile>/rply/secret-key.json (0600) and secrets the human provides in the profile's .env under a variable name the agent picks (core's env denylist applies; the .env path is sent to the server with the request); the secret tool waits up to 15 minutes for the human and refuses under cron; adds a `hermes rply` setup command; credentials read through Hermes' profile-scoped route; no shell commands, no telemetry, no self-update.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install rply-platform
Said no? Turn it on later:
hermes plugins enable rply-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Voicestudio
Community
Client for the local VoiceStudio text-to-speech app (debpalash/VoiceStudio): speak short text, design or clone voices, browse voices, render chaptered long-form audio, dub videos, and check server status.
Client for the local VoiceStudio text-to-speech app (debpalash/VoiceStudio): speak short text, design or clone voices, browse voices, render chaptered long-form audio, dub videos, and check server status. Six tools with mirrored slash commands plus a bundled skill.
Good to know before installing
Sends the text, script files, videos and voice samples you point it at to the VoiceStudio server you configure (default http://127.0.0.1:3900, plain HTTP) and saves the returned audio under HERMES_HOME/plugin-data/voicestudio; no credentials, no telemetry, no self-update.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install voicestudio
Said no? Turn it on later:
hermes plugins enable voicestudio
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rocket.Chat gateway adapter for Hermes Agent. Connects to a self-hosted Rocket.Chat instance via the REST API v1 for outbound traffic and the Realtime (DDP) WebSocket for inbound messages. Uses aiohttp (already a Hermes dependency) — no extra packages needed.
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install rocketchat-platform
Said no? Turn it on later:
hermes plugins enable rocketchat-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Realtime duplex voice with the Gemini Live API, built around handing real work to Hermes. A single control in the composer (not a floating panel): tap, speak, hear the model, and when the ask needs files, a terminal, the web or memory the voice model delegates the job to the api server and keeps talking, reading the outcome aloud when it lands. Three verbs rather than thirty schemas — hermes_task starts, hermes_tasks reads the call's task board, and hermes_task_update denies, steers or stops a task. A task that stops to ask permission reaches the user as a spoken prompt and a "Hermes needs you" indicator with Approve and Deny buttons; only the user's press approves it, never the voice model. Multi-task is one Live session plus a board, not a session per task. Mute drops the uplink without hanging up, and the call survives composer remounts, so opening a session mid-sentence does not kill it. Full-proxy architecture: the plugin backend owns the upstream Live socket and the key, and the renderer is never given either, because the Live API carries the credential in the socket URL. Ships no Python dependencies of its own, which keeps it out of the uv workspace and lets one clone serve several profiles. Tested model behaviour is published in the README, including that gemini-3.8-live-extended-thinking accepts a function declaration and then delegates only about 2 times in 5, which is why gemini-3.8-live is the default.
Good to know before installing
Pressing Start captures microphone audio and streams it through the local backend to generativelanguage.googleapis.com using GEMINI_API_KEY from the Hermes home's .env; delegated work runs as a Hermes run in the serving profile's own memory with the profile's full toolset via the local api_server and API_SERVER_KEY, and those runs' results (up to 4000 characters each), the task board and approval prompts are sent back to Gemini as text. Nothing is sent anywhere else and no telemetry is emitted.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs GEMINI_API_KEY), then asks whether to turn it on.
hermes plugins install hermes-gemini-live
Said no? Turn it on later:
hermes plugins enable hermes-gemini-live
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Signed Nextcloud Talk bot webhooks and text replies for Hermes, with JSON/XML OCS support.
Good to know before installing
Runs an HTTP webhook listener (default 0.0.0.0:8788, HMAC-verified with the bot secret) and sends messages and optional Basic-auth room lookups to your Nextcloud server; registers the `nextcloud_talk` gateway platform.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs NC_TALK_BASE_URL, NC_TALK_BOT_SECRET), then asks whether to turn it on.
hermes plugins install nextcloud-talk
Said no? Turn it on later:
hermes plugins enable nextcloud-talk
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
TTS Buddy
Community
Native TTS Buddy speech provider using the existing TTS Buddy CLI, with offline voice selection, MP3 generation, Hermes voice-message conversion and exact-job recovery, plus terminal-only account deletion through CLI…
Native TTS Buddy speech provider using the existing TTS Buddy CLI, with offline voice selection, MP3 generation, Hermes voice-message conversion and exact-job recovery, plus terminal-only account deletion through CLI 0.16.0+.
Good to know before installing
Runs the user-installed `ttsbuddy` CLI (argument array, speech text on stdin), which sends the text and voice settings to TTS Buddy, downloads the hosted audio and uses the account's quota. Credentials come from the profile's `TTSBUDDY_API_KEY` secret or, when the user selects `cli_config_dir`, from that CLI profile's own saved login, which the CLI may read and update. The model-callable `ttsbuddy_recover` tool downloads an existing job to a new MP3 path the model chooses (never overwrites). The terminal command `hermes ttsbuddy account delete` can permanently delete the TTS Buddy account, its hosted files and identity, and cancel subscriptions, after `--yes` and a fresh email code entered at a hidden prompt or protected stdin.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install ttsbuddy
Said no? Turn it on later:
hermes plugins enable ttsbuddy
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Telegram Client
Community
Telegram client pane for Hermes Desktop: dialogs, message history with image previews and per-post image reload, forum topics, and reviewed send/reply/save/delete/mark-as-read actions via a dedicated Telethon user…
Telegram client pane for Hermes Desktop: dialogs, message history with image previews and per-post image reload, forum topics, and reviewed send/reply/save/delete/mark-as-read actions via a dedicated Telethon user session (separate from the core gateway bot token). All history is sanitized before rendering.
Good to know before installing
The profile dashboard backend reads dialogs and message history and downloads media for in-page previews (page byte-budgeted and cached in memory); TELEGRAM_API_ID/TELEGRAM_API_HASH come from the profile's Hermes secrets; login challenges stay in process memory; the dedicated Telethon session lives in HERMES_HOME/telegram-plugin-auth/ (directory 0700, .session and its -wal/-shm sidecars 0600), and anyone holding that session file controls the Telegram account; delete removes the selected message for everyone; mutations go prepare -> exact preview -> confirm -> commit -> readback, and the pane's "Confirm actions" switch (on by default) can turn the preview step off; message links open in the system browser (http and https only).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install telegram-client
Said no? Turn it on later:
hermes plugins enable telegram-client
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
The xAI API surfaces core does not cover, nothing it already ships (provider, x_search, web search, TTS, STT and Imagine stay in core). Voice module: full-duplex Grok Voice (grok-voice-latest) in the Desktop composer, built like core's GPT-Live mode; the voice model hands real work to Hermes as a normal turn on the open chat (surface voice-live) and reads the result aloud; the backend mints a 300 s xAI client secret so XAI_API_KEY never reaches the renderer. Collections module: one read-only tool, xai_collections_search, over documents the user already indexed in xAI Collections (GET /v1/collections, POST /v1/documents/search).
Good to know before installing
The voice button captures microphone audio and streams it to api.x.ai over a WebSocket; the backend calls api.x.ai once per call with XAI_API_KEY (read through agent.secret_scope) to mint the secret; delegated requests run as normal Hermes turns with the profile's full toolset and approvals, and their final text (up to 3000 characters) plus the last spoken turns are sent back to xAI. Each xai_collections_search call sends the query to api.x.ai with XAI_API_KEY and returns passages into the conversation. Nothing is uploaded, stored or deleted and no telemetry is emitted; xAI bills on the user's key.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs XAI_API_KEY), then asks whether to turn it on.
hermes plugins install hermes-xai
Said no? Turn it on later:
hermes plugins enable hermes-xai
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Huddo — group chat where people and AI agents talk in the same room. Join by invite link, read and reply, edit or unsend your own messages, react, whisper to one member, pair with your human, wait for new messages, and read or update room apps (shared mini-apps such as task lists that a room owner publishes). Portable Agent Plugins v1 package (mcp.json + skills/).
Good to know before installing
Runs the Huddo MCP server locally over stdio (npx -y huddoai@0.9.11, pinned, npm provenance to this commit; Node 20+); sends and receives room messages via api.huddo.ai, readable by every room member except one-to-one encrypted whispers; when you ask it to create a room, huddo_new tells the agent to post a short summary of your conversation there; huddo_app_submit changes a room app's shared state, which every member sees (app code runs only in members' browsers, never on this machine), and app guides written by the room owner reach the agent as untrusted text; huddo_send can attach any local file the agent names and upload it to the room, huddo_transfer (and huddo_leave with to) hands room ownership to another member, and huddo_update_name/huddo_update_avatar with operator: true change your paired human's display name or avatar; Hermes does not ask before huddo_send/huddo_whisper/huddo_react/huddo_edit/huddo_unsend/huddo_app_submit/huddo_download/huddo_transfer/huddo_leave/huddo_update_name/huddo_update_avatar/huddo_rename run (the package does not set trust: untrusted); the server tells the agent to keep calling huddo_wait (up to 50 s per call) for as long as it is in a room, and
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install huddo
Said no? Turn it on later:
hermes plugins enable huddo
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install omnivoice
Said no? Turn it on later:
hermes plugins enable omnivoice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Fluxer gateway adapter for Hermes Agent. Native Fluxer integration using Fluxer's bot REST API for outbound messages, Gateway WebSocket events for inbound dispatches, message edits, agent-requested reactions, pins, reply references, media delivery, and channel-directory enumeration. Component button
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install fluxer-platform
Said no? Turn it on later:
hermes plugins enable fluxer-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
OpenRouter speech-to-text and text-to-speech providers for Hermes Agent (stt.provider / tts.provider = openrouter).
How to install
Install it. Hermes asks for any API keys it needs (this one needs OPENROUTER_API_KEY), then asks whether to turn it on.
hermes plugins install openrouter-voice
Said no? Turn it on later:
hermes plugins enable openrouter-voice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-only iMessage platform plugin backed by a launchd-supervised OpenBubbles RustPush sidecar over a same-user Unix socket.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-rustpush-imessage
Said no? Turn it on later:
hermes plugins enable hermes-rustpush-imessage
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Communication boards, explicit speech, switch scanning and reviewed AI proposals for Hermes Desktop.
Good to know before installing
Desktop-only page; Speak sends your message text through the Hermes gateway to the TTS provider configured in Hermes (cloud providers receive it) and the audio plays on the gateway host, which may be remote; the AI helpers open a separate Hermes chat session per request and send your topic or message as a normal agent turn on your model provider; saved phrases and approved boards are kept in plaintext in the plugin's Desktop storage.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-aac
Said no? Turn it on later:
hermes plugins enable hermes-aac
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Chatto Platform
Community
Chatto gateway adapter for Hermes Agent. Connects to a Chatto server (self-hosted team chat) and relays messages between rooms/DMs and the Hermes agent.
Chatto gateway adapter for Hermes Agent. Connects to a Chatto server (self-hosted team chat) and relays messages between rooms/DMs and the Hermes agent. Uses the Chatto ConnectRPC API (JSON over HTTP) for outbound messages and the Chatto realtime WebSocket protocol (binary protobuf) for inbound eve
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install chatto-platform
Said no? Turn it on later:
hermes plugins enable chatto-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Soniox
Community
Native BYOK Soniox text-to-speech and asynchronous speech-to-text providers with configurable languages and voices, automatic STT language detection, and Hermes voice-bubble support.
Native BYOK Soniox text-to-speech and asynchronous speech-to-text providers with configurable languages and voices, automatic STT language detection, and Hermes voice-bubble support.
Good to know before installing
TTS sends reply text and synthesis settings to tts-rt.soniox.com; STT uploads audio, optional language hints, and optional prompt context to api.soniox.com, then best-effort deletes the remote transcription and uploaded file. SONIOX_API_KEY is resolved through Hermes' active-profile secret scope. No telemetry, shell commands, background processes, or stored credentials.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SONIOX_API_KEY), then asks whether to turn it on.
hermes plugins install hermes-soniox
Said no? Turn it on later:
hermes plugins enable hermes-soniox
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Bunny Space gateway adapter for Hermes Agent. Connects a Hermes profile (the bot brain) to the Bunny Space relay so the bot joins private rooms, answers its owner, and handles @bot:<slug> mentions in posts and comments. Outbound pull transport; no external dependencies.
Good to know before installing
Replies are prompted to be in Spanish; @bot mention tasks and assistance tasks are dispatched to Hermes under the fixed sender id "owner" (BUNNY_SPACE_ALLOWED_USERS must contain "owner"), and the plugin refuses to dispatch third-party content unless platform_toolsets.bunny_space is restricted to read-only tools (the platform's effective toolset, including MCP and plugin toolsets; add no_mcp when MCP servers are enabled); the private assistance worker is opt-in via BUNNY_SPACE_ASSISTANCE=1 (the relay cannot enable it); setting BUNNY_SPACE_ALLOW_ALL_USERS makes the connector refuse to connect; the relay sets the poll interval and may hand the connector a WebSocket "wake" URL it then connects to (wake signals only, no message content).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs BUNNY_SPACE_BOT_KEY, BUNNY_SPACE_SLUG), then asks whether to turn it on.
hermes plugins install bunny_space-platform
Said no? Turn it on later:
hermes plugins enable bunny_space-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Hermes Stt Enhance
Community
Local speech-to-text (provider stt_enhance) with faster-whisper or opt-in sherpa-onnx Parakeet V3 and long-audio chunking, plus an optional bounded LLM pass that enhances the transcript using a custom skill, an inline…
Local speech-to-text (provider stt_enhance) with faster-whisper or opt-in sherpa-onnx Parakeet V3 and long-audio chunking, plus an optional bounded LLM pass that enhances the transcript using a custom skill, an inline prompt or the default, and keeps the raw transcript on failure.
Good to know before installing
Audio is decoded locally. Post-processing is on by default and sends the transcript text to the LLM Hermes routes the stt_enhance auxiliary task to (your main, usually remote, provider unless you point it at a local endpoint or set post_processing.enabled: false). It reads the body of the SKILL.md you configure (never executed) and runs ffmpeg/ffprobe. The opt-in Parakeet backend reads a local model export and, on first use and only when your config.yaml explicitly sets security.allow_lazy_installs: true, installs pinned sherpa-onnx and numpy from PyPI into ~/.hermes/plugin-runtimes/hermes-stt-enhance/ (shared by all profiles). No tools, hooks, background processes, telemetry or stored credentials.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-stt-enhance
Said no? Turn it on later:
hermes plugins enable hermes-stt-enhance
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Outbound WhatsApp tools through GOWA: registers GOWA's native MCP server and adds device listing, pairing, and removal. Setup can connect an existing server or explicitly install pinned GOWA v9.5.0 as a loopback-only authenticated native user service on Linux x86_64, macOS x86_64/arm64, or Windows x86_64.
Good to know before installing
Agents can send messages and mutate WhatsApp state through the linked account; session databases grant account access. The plugin does not ingest incoming messages or configure webhooks.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install go-whatsapp
Said no? Turn it on later:
hermes plugins enable go-whatsapp
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Wyoming Voice Bridge
Community
Wyoming speech-to-text and text-to-speech for a Wyoming server you run (stt/tts provider `wyoming`), plus a wyoming_voice_status tool that lists the server's models and voices.
Wyoming speech-to-text and text-to-speech for a Wyoming server you run (stt/tts provider `wyoming`), plus a wyoming_voice_status tool that lists the server's models and voices.
Good to know before installing
Audio and text to speak go to the WYOMING_* host:port you set over cleartext, unauthenticated TCP (public addresses accepted). Once selected, the providers send speech in every session, including cron and webhooks. Non-WAV audio is converted with your local ffmpeg. wyoming_voice_status asks for approval on each call and refuses under cron, yolo, approvals off, -q and unattended platforms; answering "always" leaves a command_allowlist line in config.yaml. It calls internal Hermes approval, config and write-guard helpers, so a Hermes update can disable the status tool or speech file writes (both fail closed).
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install wyoming-voice-bridge
Said no? Turn it on later:
hermes plugins enable wyoming-voice-bridge
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Nextcloud Talk Platform
Community
Nextcloud Talk platform adapter for Hermes Agent, in two modes behind one plugin: a webhook bot (Nextcloud Talk Bot API, HMAC-SHA256 signed, with an explicit body-size cap and a nonce-replay cache ahead of payload…
Nextcloud Talk platform adapter for Hermes Agent, in two modes behind one plugin: a webhook bot (Nextcloud Talk Bot API, HMAC-SHA256 signed, with an explicit body-size cap and a nonce-replay cache ahead of payload parsing) and a real Nextcloud user account (app password, long-polling the Chat REST API, with federation-invite support, per-room mention/watch/free modes, and an agent-to-agent loop guard plus active-listening context for multi-agent rooms). Mode is picked automatically by which credential is configured. No extra SDKs -- aiohttp for bot mode, httpx for user mode, both already Hermes dependencies.
Good to know before installing
Connects to your Nextcloud server either as a Talk bot (HMAC-verified webhook listener, 127.0.0.1:18797 by default) or as a real Nextcloud user with an app password (long-polls the Chat API and auto-accepts federation invites only from NEXTCLOUD_TALK_ALLOWED_INVITERS); in user mode, unanswered room messages from allowed senders (up to 40 per room by default) and, for rooms listed in NEXTCLOUD_TALK_ROOM_MODES or with room_rules_all_rooms on, the room description are added to the agent's next turn in that room.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install nextcloud-talk-platform
Said no? Turn it on later:
hermes plugins enable nextcloud-talk-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Local-first OpenWhispr dictation history and shared notes for Hermes agents: find what the user said, search notes, transcribe local audio. Free local desktop bridge by default, paid cloud opt-in only. Skill-carrier plugin, no tools or hooks registered.
Good to know before installing
Skill only: the agent runs the external OpenWhispr CLI (installed with an unpinned `npm install -g @openwhispr/cli`) through the terminal tool to read your dictation history and notes over the OpenWhispr desktop app's authenticated loopback bridge, and, with your consent each time, to create, update or delete notes, transcriptions and dictionary entries and to transcribe local audio files; OpenWhispr Cloud (api.openwhispr.com, including an email-code sign-in that mints an API key kept in the CLI's own config) is used only when you opt in; the agent never opens credential files itself.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install hermes-openwhispr
Said no? Turn it on later:
hermes plugins enable hermes-openwhispr
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Rooms where AI agents of any vendor talk to each other. A room is a URL; agents join, read and post over plain HTTP, with no accounts and no sign-in. Portable Agent Plugins v1 package: the parlor skill plus the hosted parlor MCP server (Streamable HTTP, no authentication, 8 tools).
Good to know before installing
Hosted unauthenticated MCP connector at parlor.sh/mcp (tool set is server-controlled, not pinned) plus a curl fallback; messages the agent writes go to parlor.sh or the server in a given room URL and rooms are public to anyone with the link; room tokens are stored under ~/.local/state/parlor; the skill may keep background wait loops running.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install parlor
Said no? Turn it on later:
hermes plugins enable parlor
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
Salesforce Chatter
Community
Talk to Hermes from Salesforce Chatter: @mention the bot user in a post or comment, it Likes the message as an acknowledgement and replies in the same thread, keeping the thread as one session.
Talk to Hermes from Salesforce Chatter: @mention the bot user in a post or comment, it Likes the message as an acknowledgement and replies in the same thread, keeping the thread as one session. Images and files on the post are passed to the model; MEDIA files are attached back. Community plugin, not affiliated with Salesforce.
Good to know before installing
Authenticates as a dedicated bot user with the OAuth 2.0 JWT bearer flow, reading the private key file at SF_CHATTER_PRIVATE_KEY_PATH; talks to the configured Salesforce login host and the org instance (attachment downloads follow Salesforce redirects); image URLs in the agent's replies are fetched from the gateway host over HTTPS (any public host; private, loopback and metadata addresses are refused) and uploaded to Chatter; polls the To Me feed every 60 s and, for allowlisted groups, runs a SOQL probe every 5 s by default (counts against the org API quota); writes Likes, comments, files in the bot user's Files and optional home-channel posts; keeps its ledger in plugin-data/salesforce-chatter/inbox.sqlite. dry_run defaults to true (no Salesforce writes, no outbound image fetch); with SF_CHATTER_ALLOWED_USERS unset nobody is answered. Optional, off by default: html_preview renders model-generated HTML to PNG with Chromium in a network-isolated Docker container (digest-pinned image, pulled if missing). No telemetry.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs SF_CHATTER_LOGIN_URL, SF_CHATTER_CLIENT_ID, SF_CHATTER_USERNAME, SF_CHATTER_PRIVATE_KEY_PATH, SF_CHATTER_BOT_USER_ID), then asks whether to turn it on.
hermes plugins install salesforce-chatter
Said no? Turn it on later:
hermes plugins enable salesforce-chatter
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Deepgram Aura text-to-speech and Nova speech-to-text providers for Hermes Agent.
How to install
Install it. Hermes asks for any API keys it needs (this one needs DEEPGRAM_API_KEY), then asks whether to turn it on.
hermes plugins install deepgram-voice
Said no? Turn it on later:
hermes plugins enable deepgram-voice
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Sendblue iMessage / SMS integration. Provides typing indicators, async daemon routing, and Active LLM Tools for SMS dispatch.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install sendblue
Said no? Turn it on later:
hermes plugins enable sendblue
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
VK Messenger gateway with community Long Poll, media attachments, allowlists, and project-lane routing.
How to install
Install it. Hermes asks for any API keys it needs (this one needs VK_GROUP_TOKEN, VK_GROUP_ID), then asks whether to turn it on.
hermes plugins install vk-platform
Said no? Turn it on later:
hermes plugins enable vk-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Watchline delivery adapter for Hermes Agent. Polls a Watchline pull channel and forwards matched events into the Hermes gateway as inbound messages.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install watchline
Said no? Turn it on later:
hermes plugins enable watchline
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Generic JSON-file-based bridge adapter. Bridges self-register via a registry/ manifest (presence = registered, rm = unregistered). Polls inbox/ for incoming messages, writes outgoing to outbox/. External services (imsg, Matrix, Telegram, ...) write/read JSON files in a shared directory.
How to install
Install it. Hermes asks for any API keys it needs (this one needs BRIDGE_DIR), then asks whether to turn it on.
hermes plugins install bridge-adapter
Said no? Turn it on later:
hermes plugins enable bridge-adapter
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
fmsg platform adapter for Hermes Agent. Real-time inbound over the fmsg-webapi WebSocket (/fmsg/ws), outbound via its JSON REST routes. Authenticates with an fmsg API key (fmsgk_...) exchanged for a short-lived JWT — run the agent as a derived sub-account such as @alice_hermes@example.com. Only http
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install fmsg-platform
Said no? Turn it on later:
hermes plugins enable fmsg-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Connect a Hermes agent through an existing Ando invitation and receive authorized messages.
Good to know before installing
Connects outbound to Ando (mcp.ando.so, api.ando.so, realtime.ando.so) with an agent API key stored at $HERMES_HOME/ando/connection.json (mode 600); Ando messages from the connecting member (or members the operator explicitly allowlists) start Hermes turns and the final reply, with any files it attaches, is posted back to Ando; message attachments are uploaded and downloaded through short-lived single-use links Ando issues (up to 20 MB each; received files are cached in the profile's Hermes cache); hermes ando connect edits gateway.platforms.ando in config.yaml.
From the plugin's catalog listing.
How to install
Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install ando-platform
Said no? Turn it on later:
hermes plugins enable ando-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Carbon Voice gateway adapter for Hermes Agent. Connects via Socket.IO (primary) with REST polling fallback — no public webhook or tunnel required. Persists a cursor to disk so messages received while Hermes is offline are processed on the next startup. Replies via POST /v3/messages/start, so the Her
How to install
Install it. Hermes asks for any API keys it needs (this one needs name), then asks whether to turn it on.
hermes plugins install carbonvoice-platform
Said no? Turn it on later:
hermes plugins enable carbonvoice-platform
Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide↗ (opens in a new tab).
Full setup steps, settings and screenshots are on the plugin's official catalog page from Nous Research.
No plugins match that search.
Read before you install
Plugins run code inside your agent. Official plugins come from Nous Research's own repo. Community plugins are independent projects, so check the source, the permissions they ask for and any API keys they need. New to plugins? Start with skills vs plugins vs MCP.
