AI brokers are shifting past easy command-line instruments into techniques that may plan, schedule, name instruments, and run automated workflows. Nous Analysis’s Hermes Agent framework provides a self-hosted runtime for constructing superior brokers with state administration, instrument integration, and safe execution.
It helps multi-step planning, background activity management, and real-world automation past single-purpose coding assistants. On this article, we discover Hermes Agent’s structure, setup, safety mannequin, and sensible examples for constructing dependable AI agent workflows.
What’s Hermes Agent and How is it Constructed?
Hermes isn’t just a immediate wrapper: it’s an open-source agent runtime with a number of entry factors, together with a CLI, API server, and messaging gateway. It combines browser automation, terminal execution, file operations, reminiscence, expertise, and scheduling to assist a variety of real-world automation workflows.
Its layered structure separates issues and retains the system manageable. Person requests enter by the CLI or API, then transfer into the agent core, which generates prompts, calls the language mannequin, runs instruments, handles retries, and might fall again to alternate fashions when wanted. This makes Hermes extra resilient to charge limits, server errors, and authentication points.
The diagram beneath combines the official structure, agent loop, session storage, and instruments runtime documentation.

The Agent Loop and State Administration
Hermes reveals its power contained in the agent flip loop. It runs one name per instrument, however when the mannequin requests a number of instruments, Hermes executes them in parallel by a thread pool, dashing up advanced workflows. It additionally manages the mannequin context window by compressing conversations as soon as they exceed 50% of the accessible context, whereas preserving current messages and grouping associated instrument calls and outcomes logically.
State administration is dealt with by an area SQLite database with full-text search, permitting the agent to revisit previous periods and retrieve related context. Lengthy-term reminiscence is saved in two Markdown information: MEMORY.md for normal details and USER.md for user-specific preferences. Hermes additionally helps expertise as procedural reminiscence, letting brokers create, replace, and take away workflows over time.
Since Hermes is evolving shortly, instrument counts and particulars might fluctuate throughout documentation pages. For critical use, pin the Hermes model to maintain outcomes repeatable and keep away from breaking configurations.
Set up and Surroundings Setup
Hermes provides a clear, single-line installer. Word, native Home windows shouldn’t be supported. Use WSL2 for Home windows customers. All that’s required is the software program Git. The proper variations of Python, Node.js and different essential command-line instruments are routinely put in.
# Linux / macOS / WSL2 / Android (Termux)
curl -fsSL https://uncooked.githubusercontent.com/NousResearch/hermes-agent/primary/scripts/set up.sh | bash

# Reload your shell
supply ~/.bashrc # or supply ~/.zshrc
# Select your mannequin/supplier interactively
hermes mannequin

On this weblog we are going to arrange Ollama native mannequin contained in the hermes agent
- Go to “Customized Endpoint” within the mannequin suppliers
- Put http://127.0.0.1:11434/v1 in API base URL
Ensure you have Ollama put in and operating within the background - We don’t have to offer any API key so press Enter
- Then Choose from the fashions you’ve on Ollama whether or not it’s native or cloud mannequin

# Diagnose setup if wanted
hermes physician
Let’s take a look at the agent kind the next in terminal
hermes chat

Among the best design selections made in Hermes is in regard to configuration administration. It makes use of two completely different information. Secrets and techniques, equivalent to API keys, are positioned inside ./.hermes/.env. Non-secret settings are saved in ~/.hermes/config.yaml. This separation is a finest follow in securing. Values are routinely inserted within the correct file by the hermes config set command.
Creating Profile
Use a conservative profile to make sure a protected and repeatable setup. The next setup could possibly be used to permit handbook approval of delicate actions, execute terminal instructions in a container with sandboxing, and stop use of personal community addresses.
If you wish to arrange LLM from one other supplier, first create the secrets and techniques file. This allows the API server and configures API keys in your chosen LLM supplier and a cloud browser service.
# Secrets and techniques and repair toggles in ~/.hermes/.env
cat > ~/.hermes/.env
Then, a primary configuration file is created. The next instance relies on a Docker backend for the terminal that can permit code to be executed in a safe and separated setting. It’s the advisable answer for any critical self-hosted automation.
# Important settings in ~/.hermes/config.yaml
mannequin: anthropic/claude-3-5-sonnet-20240620 # Change along with your supplier/mannequin
terminal:
backend: docker
docker_image: "nikolaik/python-nodejs:python3.11-nodejs20"
container_persistent: true
browser:
inactivity_timeout: 120
reminiscence:
memory_enabled: true
user_profile_enabled: true
approvals:
mode: handbook
safety:
allow_private_urls: false
show:
streaming: true
Hermes is model-agnostic. Use an API from an API supplier equivalent to Anthropic or OpenAI, or connect with an API routing service equivalent to OpenRouter or a self-hosted API that’s OpenAI-compatible. For the needs of this text we’re utilizing a particular mannequin and you will need to observe that this may be prolonged to any supplier mannequin you want to use.
Palms-on Tutorials: From Automation to Analysis
Now, let’s discover the sensible capabilities of the Hermes Agent. These tutorials exhibit core options that allow advanced, autonomous workflows.
Process Automation with Cron
Hermes features a actual cron subsystem for scheduled duties. You’ll be able to create recurring jobs utilizing plain language. These jobs can run scripts, summarize information, or carry out different actions. Outcomes will be delivered to your chat, saved to a file, or despatched to different platforms. The agent manages these jobs by its cronjob instrument.
For instance, you can begin a chat session and provides it a scheduled activity.
Enter: “Each weekday at 08:30, learn ~/studies/daily_sales.csv, summarise anomalies, and ship the end result to my house channel.”
Hermes will create a job and schedule its subsequent run. You’ll be able to then examine and handle your jobs from the command line.

# Examine and handle jobs from the CLI
hermes cron checklist
hermes cron standing
hermes cron run
hermes cron pause

To forestall runaway loops, Hermes enforces an vital security constraint. A session began by a cron job can not create new cron jobs. For those who strive, the agent will block the motion. This demonstrates the framework’s give attention to steady, dependable automation.
Net Looking and Device Use
The browser tooling in Hermes is highly effective. It helps cloud browser suppliers like Browserbase and may also management an area Chrome or Chromium occasion. As a substitute of simply fetching uncooked HTML, Hermes represents internet pages as accessibility bushes. This structured format makes it simpler for a language mannequin to navigate and work together with web page components.
Let’s strive a easy analysis activity. This immediate asks the agent to navigate a web site, discover data, and summarize an article.
Enter: “Open https://information.ycombinator.com, checklist the highest 5 tales, click on the primary one, then summarise the article’s core declare and any apparent caveats.”

This activity showcases the agent’s potential to carry out multi-step internet interactions. It additionally supplies a possibility to check its safety features. If by default, the configuration blocks entry to non-public URLs. For those who ask the agent to open an area tackle like http://localhost:3000, it ought to refuse the request.
Failure Mode Enter: “Open http://localhost:3000 and take a screenshot of the dashboard.”
With allow_private_urls set to false, Hermes will block this motion to forestall a possible Server-Aspect Request Forgery (SSRF) assault. Nevertheless, Hermes has a wise answer for builders who have to work with each public websites and native purposes. It may be configured to routinely route non-public URLs to an area browser whereas sending public URLs to the cloud supplier. This can be a robust manufacturing function that balances safety and comfort.
Reminiscence and Session Search
Hermes makes use of its reminiscence information, MEMORY.md and USER.md, to retain data throughout periods. These information are injected into the system immediate when a brand new session begins. This provides the agent constant context about your preferences and ongoing tasks. It’s a Self Enhancing agent it saves the consumer preferences and enhance it over time.
Right here is an easy dialog to check its reminiscence.
Flip 1: “Do not forget that I would like CSV outputs, British English, and concise government summaries.”
Flip 2: “Additionally keep in mind that my default undertaking language is Python.”

After these turns, begin a totally new session and ask a query to examine its recall.
Recent Session Enter: “What output format, English variant, and language do I choose?”

The agent ought to accurately retrieve the preferences you saved. Reminiscence is injected firstly of a session, so a contemporary session is the cleanest method to take a look at this function. The agent additionally rejects duplicate recollections, so asking it to retailer the identical truth twice is one other easy method to see its inner logic at work.
Multi-step Planning and Programmatic Device Calls
For really advanced duties, Hermes provides superior multi-step planning instruments. These embrace persistent objectives, sub-agent delegation, and programmatic instrument calls.
- Targets: You’ll be able to set a persistent purpose with the
/purposecommand. The agent will proceed engaged on this purpose throughout a number of turns till a decide mannequin determines it’s full otherwise you pause it.

- Delegation: You’ll be able to ask the agent to delegate duties to sub-agents. These baby brokers run with remoted contexts and a restricted set of instruments. That is helpful for breaking a big downside into smaller, parallelizable components.

- Code Execution: The
execute_codeinstrument is probably essentially the most highly effective function. It permits the mannequin to write down and run a Python script that calls different Hermes instruments. The script communicates with the agent over an area RPC bridge. That is extremely environment friendly, as it could collapse an extended, token-heavy sequence of instrument calls right into a single mannequin flip.

Take into account a analysis activity that includes looking the online, fetching a number of pages, and summarizing them. A typical agent may do that with a dozen back-and-forth turns with the mannequin. With execute_code, the mannequin can write one script to do all of it.
# Instance script for execute_code
from hermes_tools import web_search, web_extract
import json
outcomes = web_search("Rust async runtime comparability 2025", restrict=5)
summaries = []
for r in outcomes["data"]["web"]:
web page = web_extract([r["url"]])
for p in web page.get("outcomes", []):
if p.get("content material"):
summaries.append({
"title": r["title"],
"url": r["url"],
"excerpt": p["content"][:500],
})
print(json.dumps(summaries, indent=2))
This function is designed for heavy lifting. It has configurable limits on execution time and output measurement. If a script occasions out, the agent receives a timeout standing and might resolve the best way to proceed. This makes the agent operations layer extra strong and predictable.
Integrations, Comparisons, and Operational Economics
Hermes is designed to be built-in with different techniques. It has an API server that allows any entrance finish that helps chat-completions to combine with it. The Python library permits you to combine the agent into different purposes. Even it’s attainable to make Hermes accessible as a Mannequin Context Protocol (MCP) server, for different brokers to make use of its instruments.
When evaluating Hermes to different instruments, give attention to positioning.
- Hermes Agent: A normal automation, analysis and multi-surface deployment agent runtime with a large scope.
- OpenHands: An open platform for enterprise software program growth and customized coding-agent platforms.
- Claude Code / Codex CLI: Developer centered coding assistants for terminal & IDE workflows.
Hermes shouldn’t be payment primarily based, however operational. The first expense is the mannequin inference, cloud browser periods, sandbox compute. These prices will be managed by Hermes utilizing supplier routing insurance policies which will be optimized for worth or latency. Additionally, don’t overlook to plan for benchmark runs; these will be useful resource intensive.
Conclusion
Hermes Agent stands out as a result of it combines the core items wanted for real-world AI brokers: state, routing, tooling, reminiscence, scheduling, and analysis hooks in a single bundle. For self-hosted automation fans, that makes it greater than a coding assistant; it turns into a critical operations layer for constructing helpful automations.
Use it with self-discipline. Pin setting variations, grant solely essential privileges, and take a look at each profitable workflows and failure modes. Maintain official benchmarks separate from private outcomes. Used rigorously, Hermes can assist subtle, dependable AI-powered techniques.
Steadily Requested Questions
A. Sure, Hermes Agent is open supply underneath the MIT license. You might solely have to pay for LLM inference, cloud instruments, browsers, or internet hosting.
A. Sure, Hermes Agent can run on Home windows by WSL2, since it isn’t accessible as a local Home windows working system utility.
A. Hermes provides CLI, API, gateway, reminiscence, scheduling, and safety controls, making it broader than coding brokers tied to an IDE or CLI.
Login to proceed studying and luxuriate in expert-curated content material.