🚨 𝗛𝗘𝗥𝗠𝗘𝗦 𝗠𝗢𝗕𝗜𝗟𝗘 𝗕𝗘𝗧𝗔 — 𝗦𝗘𝗟𝗙-𝗛𝗢𝗦𝗧𝗘𝗗 𝗦𝗘𝗧𝗨𝗣 𝗚𝗨𝗜𝗗𝗘! 📱🔥
I've spent over a DECADE in systems engineering, and somehow getting the new Hermes Mobile Beta connected to my own self-hosted @NousResearch Hermes Agent still gave me a little trouble! 😂
So here's a quick guide to save everyone else the headache!
━━━━━━━━━━━━━━━━━━━━
🖥️ 𝗦𝗧𝗘𝗣 𝟭 — 𝗦𝗧𝗔𝗥𝗧 𝗧𝗛𝗘 𝗗𝗔𝗦𝗛𝗕𝗢𝗔𝗥𝗗
On the machine running Hermes:
hermes dashboard --host 0.0.0.0 --port 9119 --no-open
On first interactive setup, Hermes can prompt you to create a username and password. SAVE THOSE!
🔒 𝗣𝗥𝗘𝗙𝗘𝗥 𝗧𝗔𝗜𝗟𝗦𝗖𝗔𝗟𝗘? (Recommended)
Bind directly to your machine's Tailscale IP instead:
hermes dashboard --host 100.x.x.x --port 9119 --no-open
━━━━━━━━━━━━━━━━━━━━
📱 𝗦𝗧𝗘𝗣 𝟮 — 𝗚𝗥𝗔𝗕 𝗧𝗛𝗘 𝗕𝗘𝗧𝗔
⚙️ 𝗦𝗧𝗘𝗣 𝟯 — 𝗦𝗘𝗟𝗘𝗖𝗧 𝗦𝗘𝗟𝗙-𝗛𝗢𝗦𝗧𝗘𝗗
NOT Nous Portal! You're connecting to your OWN Hermes instance.
🌐 𝗦𝗧𝗘𝗣 𝟰 — 𝗘𝗡𝗧𝗘𝗥 𝗬𝗢𝗨𝗥 𝗚𝗔𝗧𝗘𝗪𝗔𝗬 𝗨𝗥𝗟
🏠 Home Wi-Fi:
http://192.168.x.x:9119
🔐 Tailscale:
http://100.x.x.x:9119
Replace the example IP with your Hermes machine's actual address.
🔑 𝗦𝗧𝗘𝗣 𝟱 — 𝗘𝗡𝗧𝗘𝗥 𝗬𝗢𝗨𝗥 𝗖𝗥𝗘𝗗𝗘𝗡𝗧𝗜𝗔𝗟𝗦
Use the dashboard username and password you configured earlier.
✅ 𝗦𝗧𝗘𝗣 𝟲 — 𝗧𝗔𝗣 𝗖𝗢𝗡𝗡𝗘𝗖𝗧!
That's it. Your self-hosted Hermes Agent, accessible from your phone! 🙌
━━━━━━━━━━━━━━━━━━━━
💡 𝗧𝗪𝗢 𝗜𝗠𝗣𝗢𝗥𝗧𝗔𝗡𝗧 𝗧𝗜𝗣𝗦:
• Your phone must be on the same reachable network or connected through Tailscale.
• Never expose port 9119 directly to the public internet with basic password authentication. I recommend Tailscale!
Hopefully this saves someone else the troubleshooting session I went through! 😂
Enjoy Hermes Mobile! 📱💚
This thing packs a punch and even connects to your Hermes desktop sessions, something I’ve been in DESPERATE need of!! 🔥
Closing out #php2shell: a universal black-box PoC for PHP's session upload-progress bug. One pure-HTTP chain - arm the allocator, spray fake refs, leak the heap, beat ASLR, turn a destructor into system(). Verified blind on Debian 13 PHP 8.4.24, x86-64 + arm64: RCE as www-data.
well guess this is a good time to reshare some of my fave fics that aren’t on ao3 in case y’all are already slowly suffering withdrawals and need that fic fix
i reverse engineered my Wi-Fi router with Claude and found a f*cking scary privacy problem...
my provider could see every website I looked up. in plain text.
so I built an open-source app where AI agents guard my network: Claude, ChatGPT or Grok.
→
it runs on your Claude or ChatGPT subscription. Mac & Windows
here’s the build step by step:
• step 1 → open Claude Code on Opus 5.5 in an empty folder, paste the prompt below
• step 2 → stack: one Electron codebase for macOS and Windows. Node does the network checks, no admin rights needed
• step 3 → Opus split the build across 9 parallel agents.
one built the router scanner, one the Wi-Fi + speed test, one the AI agents, one the device list, one the installers
every agent got a reviewer. every reviewer got a fixer. 27 agents before I saw the first screen
• step 4 → the scanner checks 12 doors: provider remote control (TR-069, port 7547), UPnP port-forwards, Telnet, SSH, plain-HTTP admin page, unencrypted DNS, Wi-Fi security, location-map opt-out
• step 5 → first real scan of my network:
provider sees all my DNS lookups, SSH open on the router, UPnP on, 22 neighbour networks fighting for my channel. score 77/100
• step 6 → the AI agents. they read the scan and answer “what should I fix first?” or “is anything on my network suspicious?”
before anything leaves my PC, Bastion strips MAC addresses, device names, Wi-Fi names and the last part of my IP
watch mode re-checks the network every 5–60 min and only wakes the agent when something changed
• step 7 → no API key. Bastion talks to Claude through Claude Code and to ChatGPT through Codex, using the login I already had
• step 8 → a separate security agent attacked every line of it and found 11 holes. all fixed:
the CLIs run with zero tools, read-only, in an empty folder. my question goes in through stdin, so nothing can be injected into a command. it refuses to start if Codex’s shell tool is on
• step 9 → real bugs only real hardware shows:
my Windows is in Russian, so Opus taught the parser Russian netsh labels. Windows 11 hides Wi-Fi info until you allow Location. Cloudflare rate-limited the speed test (HTTP 429), so Opus switched to fewer, bigger requests. next run: works
• step 10 → before the repo went public, Opus checked that none of my IPs, MAC addresses or network names were in the code
one evening. zero lines written by me. that’s it...
agents suggest, you decide. Bastion never logs in to your router, never tries a password and never changes a setting on its own
Find the GitHub repo and the full prompt below ↓
Then read the article on how to reverse engineer anything with Opus 5.5 ↓
IF YOU USE REA, SAVE THIS REVERSE-ENGINEERING WORKBENCH: 20 REPOS, 5 JOBS.
“What does this app actually do?” needs different tools depending on whether you're looking at an APK, a native binary, a .NET assembly or a network capture.
I grouped 20 repository links into five tool families. Keep the map beside the REA course and choose the part your investigation needs.
01 / AGENT + NATIVE ANALYSIS
REA — agent-facing analysis workflows and evidence.
Ghidra — a software reverse-engineering framework.
GhidraMCP — an MCP bridge for Ghidra.
ida-pro-mcp — connect an existing IDA Pro setup to an agent; IDA needs its own license.
02 / ANDROID + .NET
jadx — DEX-to-Java decompilation.
Apktool — Android resources and APK packaging.
ILSpy — inspect and decompile .NET assemblies.
dnSpyEx — .NET debugging and assembly editing.
03 / OBSERVE RUNTIME BEHAVIOR
Frida — dynamic instrumentation for an authorized target.
x64dbg — Windows user-mode debugging.
RAD Debugger — native graphical debugging.
mitmproxy — inspect HTTP traffic in a controlled test setup.
04 / THE BINARY WORKBENCH
radare2 — command-line reverse-engineering tools.
Rizin — a binary-analysis framework.
Cutter — a graphical interface powered by Rizin.
ImHex — inspect bytes and structured binary data.
05 / STRUCTURE + EVIDENCE
angr — symbolic execution and binary analysis.
capa — identify executable capabilities with rules.
LIEF — parse and inspect executable formats programmatically.
Wireshark — packet analysis; this GitHub repo mirrors the upstream project.
The useful starting point is one target and one question: follow an export, explain a file format, compare a changed feature or test a reconstruction.
Pick the tool for that question. Record the evidence. Turn observed behavior into a spec. Check your implementation against it.
These are documentation-checked options, not a claim that all twenty integrate with REA or were benchmarked together. Model access, providers and commercial dependencies have their own requirements.
Use software you're allowed to inspect. A decompiler doesn't grant access to a private backend or permission to bypass a paid feature.
The quoted REA course covers the setup. This map helps you choose the next tool instead of installing the whole workshop.
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how:
REA is most dangerous thing on the internet right now...
It lets your AI agent reverse engineer any app, down to the binary
If you use it correctly, you can rebuild any feature you pay for, for FREE
In this article, I show you how:
Hermes merged 86 PRs on October 24
The ones worth knowing:
• Desktop plugins can now render the media their own tools produce, right inside the app
• Windows desktop users can finally connect to Windows SSH remotes
• Streamed replies with markdown images now show actual pictures, and half-streamed media paths no longer leak into drafts
• Plain audio files on Discord and similar platforms arrive as attachments instead of being forced into voice notes
• MCP servers returning results or tool lists over 1 MiB no longer break on Streamable HTTP
• Untrusted MCP write approvals now show the exact arguments being sent, with secrets masked
• Per-job MCP allowlists in cron can no longer quietly widen to every enabled server
• /review and /refine work on idle chats and sessions without needing a message first
• One-shot runs can author skills again, and the prompt no longer tells the model not to
• Plugin skills get clean names like blender:blender and load even when written with a plugin: prefix
• Onboarding setup now survives reloads, /new and slash commands
• New providers in the catalog: CoreWeave Inference, Together AI, RuAPI, plus opt-in Adaptive Inference routing and an official Tavily MCP
Here is the full list:
DESKTOP IMPROVEMENTS (3 PRs)
• Desktop plugins can render the media their own tools produce
• fix(desktop): connect to Windows SSH remotes from a Windows desktop
• fix(desktop): serialize writers of the desktop-plugins root (ENOTEMPTY on boot, wrong profile copy)
VOICE & REAL-TIME (3 PRs)
• fix(gateway): send plain audio as an attachment, not a voice note (Discord + siblings)
• fix(gateway): markdown images in a streamed reply arrive as pictures
• fix(gateway): keep half-streamed MEDIA: paths out of draft frames
DEVELOPER TOOLS & PLUGINS (60 PRs)
• plugin-catalog: re-pin claude-subscription-directsdk to 20048e6 (memory/email kept out of the first turn)
• chore(catalog): land alans-way-computer re-pin + actvox 0.1.1 (maintainer copy)
• feat(plugin-catalog): add FlashData MCP and 15 task skills
• catalog: update freshdesk to 0.2.0
• chore(plugin-catalog): point the hermes-windows-* entries at one repository
• docs(catalog): add Token Lens cover image
• Meshy catalog entry re-pinned to 0.5.0 (downloads never overwrite viewed or edited files)
• chore(catalog): re-pin openviking to e855796c (v0.5.1, plugin 2.1.2)
• chore(catalog): Blender plugin 0.4.1 finds Blender installed from the Microsoft Store
• feat(plugin-catalog): add crontab-ref
• fix(oneshot): one-shot runs keep skill_manage so they can author skills
• chore(catalog): Blender plugin 0.4.0 installs Blender itself instead of refusing the plugin
• fix(prompt): one-shot runs no longer tell the model not to create skills
• chore(catalog): git-review v0.1.27 (README revamp, theme fixes, screenshot gallery)
• chore(catalog): bump usage-guard to v0.4.1 and add screenshot gallery
• chore(catalog): Blender plugin 0.3.0 opens Blender itself and installs the add-on on one yes
• catalog: bump live-time to 1.0.1 (timezone resolution fix)
• feat(plugin-catalog): add genesispay-catalog
• plugin-catalog: update commandcode-oauth to 0.1.4
• plugin-catalog: bump hermes-experientiallabs to 0.4.0 (0d26c3e)
• fix(catalog): update hermes-resetwatch to 0.2.25
• fix(catalog): update hermes-nous-prices to 0.1.3
• fix(catalog): update hermes-tailscale to 0.0.8
• fix(catalog): update hermes-pantheon to 0.4.0
• fix(catalog): update hermes-kemet to 0.2.0
• fix(catalog): update hermes-asgard to 0.2.0
• chore(plugin-catalog): pay and pay-cli tier verified
• catalog(offpeak-bekci): pin 0.1.8, heading-form queue items counted, queue-consumer warning
• catalog: limbic 0.9.1 @ e7a3cd3, memory-quality fixes
• plugin-catalog: add hermes-osint-map
• chore(catalog): update YouTube Dock to stable v1.1.0
• chore(catalog): re-pin hermes-guide to v0.8.10
• feat(plugin-catalog): add yandex-disk entry
• plugin-catalog: update operations to 0.3.5
• chore(catalog): update Model Router to v0.4.7
• fix(plugins): portable plugin skills are named after the plugin (blender:blender, not agent-plugin-blender-5a80e4ba:blender)
• plugin-catalog: add session-find 1.0.0
• fix(skills): plugin skills load when the agent writes plugin: in front of the name
• fix(plugin-catalog): update vet402 to 04c7fdd
• chore(plugin-catalog): bump pstack entry sha to 0.3.1
• Add modernisation-engine to the plugin catalog (tools, community tier, v0.0.1)
• feat(plugin-catalog): add csharp-game-editor
• feat(plugin-catalog): add game-editor
• chore(plugins): update Hardlight UI to v0.2.0
• feat(catalog): add airlock
• chore(catalog): update Hermes Quota to 3.0.0
• plugin-catalog: add mock-review
• Update Vornik companion catalogue to 0.22.1
• feat(plugin-catalog): bump ha-sidebar-navigator to 0.8.2
• Add refusal plugin
• plugin-catalog: add s2docs (Source 2 docs + mod pipeline for CS2/Deadlock)
• feat(plugin-catalog): add codex-theme plugin (v1.0.0)
• plugin-catalog(gadget): re-pin to ce68113 (0.3.0: Opus audio, translated device text, profile switching, dashboard hooks)
• feat(plugin-catalog): add pidgeon
• catalog: update AgentPlaybooks Memory 0.3.0 and Tools 0.2.0
• feat(plugin-catalog): add bot-activity
• catalog: ppq-provider, PayPerQ relay provider v0.3.0 (ZDR opt-in, 3-layer pins)
• feat(plugin-catalog): add precleared
• feat(plugin-catalog): add skill-lineage
• feat(plugin-catalog): add hermes-jev-routing
SECURITY & SECRETS (3 PRs)
• fix(mcp): untrusted MCP write approvals show the call's arguments, secrets masked
• fix(agent): redact Context7 API keys by their vendor prefix
• fix(cron): a per-job MCP allowlist must not widen into every enabled server
INTEGRATIONS & CHAT (11 PRs)
• fix(gateway): a process a subagent hands to its parent completes into a parent turn, not a subagent one
• Bare /refine runs again when automatic reviews are disabled
• Messaging /refine works on a chat left idle, no message needed first
• fix(gateway): /review works on a session left idle, no message needed first
• MCP results and tool lists over 1 MiB no longer fail on Streamable HTTP
• fix: a chat whose launch API key changed says so and names /new, not /retry
• feat(catalog): add CoreWeave Inference provider
• feat(catalog): add opt-in Adaptive Inference routing plugin
• plugin-catalog: add ruapi (RuAPI model providers)
• docs(providers): add Together AI model-provider plugin to catalog
• feat(plugin-catalog): add official Tavily MCP integration and skills
STABILITY & FIXES (6 PRs)
• fix(gateway): control socket falls back to a private temp dir when the home refuses sockets (Docker Desktop errno 95)
• fix(gateway): stamp the planned-restart marker from the CLI restart
• fix(pm): remove abandoned Windows leases without dropping the lock
• fix(gateway): retry forced launchd install after drain
• fix(onboarding): setup survives reloads, /new and slash commands
• fix(cli): a hermes chat started from an agent's terminal runs in its launch directory
86 new features and fixes
Hermes merged 122 PRs on October 23
The ones worth knowing:
• Browser automation now runs only on browser_exec. agent-browser and the built-in browser tools are gone, and Camofox moves to a plugin
• MCP trust prompts finally stick: Allow for this session and Always are remembered per tool, and YOLO mode stops asking about untrusted MCP writes (spend limits still ask)
• Every Nous sign-in is now the plain device login, and your free-tier guest session hands over to your account after you sign in
• Desktop plugins get a lot more room: their own folder plus folders you grant, right-click rows in the composer, Kanban card badges, and posting into their own chat
• Desktop plugins can only script the preview Browser with a declared capability and your per-site consent
• The plugin catalog now enforces requires_hermes at install and update, so incompatible plugins stop sneaking in
• /delegation settings now save for your next session, and --now rebuilds the current session's tools
• Named custom providers keep their identity through persistence, session info and resume
• browser_vault can ask you for codes and logins right inside Desktop chats
• Windows: hermes update keeps a real hermes.exe after a Python repin, and cold-cache desktop builds compile again
• Quick Setup offers to keep a model you imported from another agent
• Dozens of new catalog plugins and bumps, including Windows port and event-log tools, a Hebrew language pack, a Reka provider and a Godot game studio
Here is the full list:
DESKTOP IMPROVEMENTS (10 PRs)
• Desktop plugin cards can post into their own chat, not the active one
• feat(desktop): plugins can use their own folder and user-granted folders (ctx.files)
• fix(desktop): the sign-in result shows where you signed in and refreshes connectors
• Desktop plugins can add rows to the composer's right-click menu and teach the spell checker a word (app-owned slot)
• feat(desktop): app-owned Kanban card badge slot in the plugin SDK
• feat(desktop): sign-in result shows who signed in and what moved
• Desktop: allow opening canonical Bot Chats in new tabs
• fix(desktop): keep native audio/video overflow menus open
• Windows x64 MSIX smoke launches the app again, and says why when a launch dies
• Windows desktop builds compile cold-cache sdists again (short uv path, no MAX_PATH LNK1104)
VOICE & REAL-TIME (3 PRs)
• plugin-catalog: bump speechify to 0.1.2
• feat(plugin-catalog): add hermes-soniox
• plugin-catalog: add walkie-talkie
DEVELOPER TOOLS & PLUGINS (67 PRs)
• docs(tools): every tool's catalog line says what it does: image_generate no longer hides edit + reference images
• feat(tools): terminal backends can declare that file tools go through the sandbox
• chore(plugin-catalog): re-pin bubblewrap to da8d324 (1.2.1)
• chore(plugin-catalog): re-pin bubblewrap to 35d24e4 (1.2.0)
• plugin-catalog: re-pin langfuse to e1f1614 (reasoning tokens, served model, opt-in user attribution)
• chore(plugin-catalog): re-pin bubblewrap to 24d49a4 (1.1.0)
• catalog: land five reviewed entries from push-refused forks (sweep 1023)
• chore(plugin-catalog): update hermes-lang-ko to 0.2.4
• chore(catalog): bump git-tasks to 5b427c3
• catalog: pin hermes-subscription-meter to 0.7.0
• feat(plugins): enforce the catalog's requires_hermes at install and update
• catalog: re-pin advanced-delegation to e404b68 (manifest requires_hermes >=0.22.5)
• catalog: re-pin advanced-delegation to f78b39e (official)
• Add ChorePilot to the plugin catalog
• plugin-catalog: bump hermes-cron to 1.5.2 (Hermes 0.22.4/0.22.5: self-set pauses, headless tick skips, settled deliveries)
• feat(delegation): /delegation saves for the next session; --now rebuilds this session's tools
• plugin-catalog: bump hermes-lcm-x to 0.28.1
• feat(plugin-catalog): add adkit plugin
• fix(plugin-catalog): show Magi cover banner
• catalog: pin storm-fusion-research 0.5.0
• feat(plugin-catalog): add nord-theme plugin
• plugin-catalog: bump nachos to 0.5.4
• plugin-catalog: update hermes-seo to 0.1.2
• plugin-catalog: add profile-switcher
• feat(plugin-catalog): add traceverse-hermes-otel
• feat(catalog): add pinned Remesher image-to-GLB plugin
• catalog: pin git-review to 0.1.24 (81269b9)
• chore(catalog): bump hermes-context-overview to 1.2.5
• plugin-catalog: bump hermetic to 1.2.0
• plugin-catalog: add athletedata
• catalog: update Kinprove genealogy research recipes to 1.6.1
• feat(plugin-catalog): pin hermes-tripo to 0.4.0
• feat(plugin-catalog): add preview-text-size
• Add office-3d to the plugin catalog
• chore(catalog): re-pin hermes-guide to v0.8.9
• feat(plugin-catalog): add stacktree
• feat(plugin-catalog): add ld-workbench (Debate Workbench) plugin
• plugin-catalog: bump hermes-lang-it-full to 21f3c05
• plugin-catalog: update operations to 0.3.3
• feat(plugin-catalog): add HYPD AI (hypd-ai-ads)
• plugin-catalog: repoint wicked-memory to WickedAPI org
• plugin-catalog: bump Stack memory provider to 0.2.0
• plugin-catalog: add hermes-lang-he (Hebrew language pack)
• chore(plugin-catalog): bump Promoat to 1.1.3 and rename to promoat-ai-video-clone
• plugin-catalog: add surp-hermes-x402-llm v0.5.0 (approval-gated spend, operator + terms pages)
• feat(plugin-catalog): add jwt-ref
• chore(plugin-catalog): bump OrcaSlicer to 0.5.1
• plugin-catalog: add Hardlight UI 0.1.0
• chore(plugin-catalog): update letsfg to 1.1.2
• feat(catalog): add YouTube Dock desktop plugin
• feat(plugin-catalog): add lightkeeper
• plugin-catalog: bump hermes-dreaming to 3.3.2 (broken state set aside, split, negations in RU/EN/ZH, corroboration a person actually gave, an optional cloud judge, unreadable data no longer read as empty)
• plugin-catalog: bump holographic to 0.17.9 (wrong settings turn memory off, chit-chat recalls nothing, "your instructions" in 18 languages)
• plugin-catalog: repin hermes-pets-all to v0.1.1 (pagination fix)
• catalog: limbic 0.7.1, supersession, calibration, Windows support
• feat(plugin-catalog): add hermes-windows-ports (who holds this port on Windows, with PID and image name)
• feat(plugin-catalog): add hermes-windows-eventlog (Windows crash forensics: crash causes, bugchecks, event-log queries)
• fix(plugin-catalog): update jp-edinet to 06171c8
• fix(plugin-catalog): update jp-reinfolib to cfb1776
• fix(plugin-catalog): update author-feed to cf5321d
• catalog: tabella 2.0.2, Windows support
• feat(plugin-catalog): add timestamp-ref
• plugin-catalog: huddo 0.9.11
• plugin-catalog: bump memtomem to v0.6.9
• chore(plugin-catalog): crew 0.10.0, re-pin to 9205333
• feat(plugin-catalog): add viajante
• feat(catalog): add godot-studio: headless Godot 4 workflows for the agent game studio
SECURITY & SECRETS (11 PRs)
• YOLO and approvals.mode off no longer prompt for untrusted MCP write calls; spend limits still ask
• MCP trust prompts: Allow for this session / Always now stick per tool; one-shot prompts offer only Once / Deny
• Desktop plugins can script the preview Browser only with a declared capability and per-origin consent
• fix(auth): a token refresh no longer replaces a guest in the shared Nous store
• One profile's website blocklist is no longer skipped after another profile's disabled policy
• catalog: add Agent Vault retrieval plugin
• chore(catalog): pin scamgate to v0.3.1
• fix(gateway): let browser_vault ask for codes and logins in Desktop chats
• fix(catalog): bump greyridge-token-safety to the workers.dev-fixed revision
• catalog: add telesec
• Add hermes-vpn to the plugin catalog (community)
INTEGRATIONS & CHAT (19 PRs)
• Catalog: Claude subscription provider shows reasoning again and streams; Memory Wiki gets its Desktop page (re-pin to official 54afaf5)
• fix(gateway): keep a named custom provider's identity through persistence, session info and resume
• chore(catalog): re-pin claude-subscription-directsdk to the stall fix
• refactor(auth): trim the guest handoff to the paths sign-in uses
• catalog: bump antigravity-subscription-directsdk pin to v1.0.21
• Camofox browser backend listed in the plugin catalog (official plugin)
• feat(plugin-catalog): add reka-provider
• chore(catalog): update Model Router to v0.4.6
• catalog: update MrScraper to three direct API tools
• feat(connectors): no guest on page open, connector sign-in offer
• feat(auth): every Nous sign-in is the plain device login
• feat(auth): hand the free-tier guest to the account after sign-in
• Browser automation runs on browser_exec only; agent-browser and the built-in browser tools are gone (Camofox moves to a plugin)
• chore(plugin-catalog): bump cursor-provider to v0.4.1
• plugin-catalog: add chat-length (long-chat notice with session_search opener)
• plugin-catalog: update provider-usage to v0.3.1
• feat(plugin-catalog): bump provider-status to 1.6.4
• Add hermes-model-switcher (community, v0.3.0): cross-profile model switcher Dashboard tab
• feat(plugin-catalog): add ai-subscriptions plugin
STABILITY & FIXES (12 PRs)
• fix(image_gen): local source paths work for FAL edits on the local backend
• fix(plugins): a refused install names the missing app instead of printing missing_app
• Unmapped-gateway readiness tests no longer flake on a just-spawned child's empty argv
• fix(tui): inputs queued in the same millisecond on two sessions keep their order after a resume
• chore(deps): bump Python dependencies to latest minor/patch releases
• fix(plugins): say restart for plugin deps a running gateway can't import; keep the tool store out of PM generations
• Windows: hermes update keeps a real hermes.exe after a Python repin
• fix(nix): self-contained dev-shell python, one pm-pinned tool list, darwin shell builds
• PM survival test stops failing on a rebuilt fixture wheel's hash
• nix flake check evaluates again after the uv revision-5 relock
• fix(setup): Quick Setup offers to keep a model imported from another agent
• Desktop reconnect E2E: the intermittent Stop-flash red now records its own timeline
122 new features and fixes
Hermes merged 122 PRs on October 23
The ones worth knowing:
• Browser automation now runs only on browser_exec. agent-browser and the built-in browser tools are gone, and Camofox moves to a plugin
• MCP trust prompts finally stick: Allow for this session and Always are remembered per tool, and YOLO mode stops asking about untrusted MCP writes (spend limits still ask)
• Every Nous sign-in is now the plain device login, and your free-tier guest session hands over to your account after you sign in
• Desktop plugins get a lot more room: their own folder plus folders you grant, right-click rows in the composer, Kanban card badges, and posting into their own chat
• Desktop plugins can only script the preview Browser with a declared capability and your per-site consent
• The plugin catalog now enforces requires_hermes at install and update, so incompatible plugins stop sneaking in
• /delegation settings now save for your next session, and --now rebuilds the current session's tools
• Named custom providers keep their identity through persistence, session info and resume
• browser_vault can ask you for codes and logins right inside Desktop chats
• Windows: hermes update keeps a real hermes.exe after a Python repin, and cold-cache desktop builds compile again
• Quick Setup offers to keep a model you imported from another agent
• Dozens of new catalog plugins and bumps, including Windows port and event-log tools, a Hebrew language pack, a Reka provider and a Godot game studio
Here is the full list:
DESKTOP IMPROVEMENTS (10 PRs)
• Desktop plugin cards can post into their own chat, not the active one
• feat(desktop): plugins can use their own folder and user-granted folders (ctx.files)
• fix(desktop): the sign-in result shows where you signed in and refreshes connectors
• Desktop plugins can add rows to the composer's right-click menu and teach the spell checker a word (app-owned slot)
• feat(desktop): app-owned Kanban card badge slot in the plugin SDK
• feat(desktop): sign-in result shows who signed in and what moved
• Desktop: allow opening canonical Bot Chats in new tabs
• fix(desktop): keep native audio/video overflow menus open
• Windows x64 MSIX smoke launches the app again, and says why when a launch dies
• Windows desktop builds compile cold-cache sdists again (short uv path, no MAX_PATH LNK1104)
VOICE & REAL-TIME (3 PRs)
• plugin-catalog: bump speechify to 0.1.2
• feat(plugin-catalog): add hermes-soniox
• plugin-catalog: add walkie-talkie
DEVELOPER TOOLS & PLUGINS (67 PRs)
• docs(tools): every tool's catalog line says what it does: image_generate no longer hides edit + reference images
• feat(tools): terminal backends can declare that file tools go through the sandbox
• chore(plugin-catalog): re-pin bubblewrap to da8d324 (1.2.1)
• chore(plugin-catalog): re-pin bubblewrap to 35d24e4 (1.2.0)
• plugin-catalog: re-pin langfuse to e1f1614 (reasoning tokens, served model, opt-in user attribution)
• chore(plugin-catalog): re-pin bubblewrap to 24d49a4 (1.1.0)
• catalog: land five reviewed entries from push-refused forks (sweep 1023)
• chore(plugin-catalog): update hermes-lang-ko to 0.2.4
• chore(catalog): bump git-tasks to 5b427c3
• catalog: pin hermes-subscription-meter to 0.7.0
• feat(plugins): enforce the catalog's requires_hermes at install and update
• catalog: re-pin advanced-delegation to e404b68 (manifest requires_hermes >=0.22.5)
• catalog: re-pin advanced-delegation to f78b39e (official)
• Add ChorePilot to the plugin catalog
• plugin-catalog: bump hermes-cron to 1.5.2 (Hermes 0.22.4/0.22.5: self-set pauses, headless tick skips, settled deliveries)
• feat(delegation): /delegation saves for the next session; --now rebuilds this session's tools
• plugin-catalog: bump hermes-lcm-x to 0.28.1
• feat(plugin-catalog): add adkit plugin
• fix(plugin-catalog): show Magi cover banner
• catalog: pin storm-fusion-research 0.5.0
• feat(plugin-catalog): add nord-theme plugin
• plugin-catalog: bump nachos to 0.5.4
• plugin-catalog: update hermes-seo to 0.1.2
• plugin-catalog: add profile-switcher
• feat(plugin-catalog): add traceverse-hermes-otel
• feat(catalog): add pinned Remesher image-to-GLB plugin
• catalog: pin git-review to 0.1.24 (81269b9)
• chore(catalog): bump hermes-context-overview to 1.2.5
• plugin-catalog: bump hermetic to 1.2.0
• plugin-catalog: add athletedata
• catalog: update Kinprove genealogy research recipes to 1.6.1
• feat(plugin-catalog): pin hermes-tripo to 0.4.0
• feat(plugin-catalog): add preview-text-size
• Add office-3d to the plugin catalog
• chore(catalog): re-pin hermes-guide to v0.8.9
• feat(plugin-catalog): add stacktree
• feat(plugin-catalog): add ld-workbench (Debate Workbench) plugin
• plugin-catalog: bump hermes-lang-it-full to 21f3c05
• plugin-catalog: update operations to 0.3.3
• feat(plugin-catalog): add HYPD AI (hypd-ai-ads)
• plugin-catalog: repoint wicked-memory to WickedAPI org
• plugin-catalog: bump Stack memory provider to 0.2.0
• plugin-catalog: add hermes-lang-he (Hebrew language pack)
• chore(plugin-catalog): bump Promoat to 1.1.3 and rename to promoat-ai-video-clone
• plugin-catalog: add surp-hermes-x402-llm v0.5.0 (approval-gated spend, operator + terms pages)
• feat(plugin-catalog): add jwt-ref
• chore(plugin-catalog): bump OrcaSlicer to 0.5.1
• plugin-catalog: add Hardlight UI 0.1.0
• chore(plugin-catalog): update letsfg to 1.1.2
• feat(catalog): add YouTube Dock desktop plugin
• feat(plugin-catalog): add lightkeeper
• plugin-catalog: bump hermes-dreaming to 3.3.2 (broken state set aside, split, negations in RU/EN/ZH, corroboration a person actually gave, an optional cloud judge, unreadable data no longer read as empty)
• plugin-catalog: bump holographic to 0.17.9 (wrong settings turn memory off, chit-chat recalls nothing, "your instructions" in 18 languages)
• plugin-catalog: repin hermes-pets-all to v0.1.1 (pagination fix)
• catalog: limbic 0.7.1, supersession, calibration, Windows support
• feat(plugin-catalog): add hermes-windows-ports (who holds this port on Windows, with PID and image name)
• feat(plugin-catalog): add hermes-windows-eventlog (Windows crash forensics: crash causes, bugchecks, event-log queries)
• fix(plugin-catalog): update jp-edinet to 06171c8
• fix(plugin-catalog): update jp-reinfolib to cfb1776
• fix(plugin-catalog): update author-feed to cf5321d
• catalog: tabella 2.0.2, Windows support
• feat(plugin-catalog): add timestamp-ref
• plugin-catalog: huddo 0.9.11
• plugin-catalog: bump memtomem to v0.6.9
• chore(plugin-catalog): crew 0.10.0, re-pin to 9205333
• feat(plugin-catalog): add viajante
• feat(catalog): add godot-studio: headless Godot 4 workflows for the agent game studio
SECURITY & SECRETS (11 PRs)
• YOLO and approvals.mode off no longer prompt for untrusted MCP write calls; spend limits still ask
• MCP trust prompts: Allow for this session / Always now stick per tool; one-shot prompts offer only Once / Deny
• Desktop plugins can script the preview Browser only with a declared capability and per-origin consent
• fix(auth): a token refresh no longer replaces a guest in the shared Nous store
• One profile's website blocklist is no longer skipped after another profile's disabled policy
• catalog: add Agent Vault retrieval plugin
• chore(catalog): pin scamgate to v0.3.1
• fix(gateway): let browser_vault ask for codes and logins in Desktop chats
• fix(catalog): bump greyridge-token-safety to the workers.dev-fixed revision
• catalog: add telesec
• Add hermes-vpn to the plugin catalog (community)
INTEGRATIONS & CHAT (19 PRs)
• Catalog: Claude subscription provider shows reasoning again and streams; Memory Wiki gets its Desktop page (re-pin to official 54afaf5)
• fix(gateway): keep a named custom provider's identity through persistence, session info and resume
• chore(catalog): re-pin claude-subscription-directsdk to the stall fix
• refactor(auth): trim the guest handoff to the paths sign-in uses
• catalog: bump antigravity-subscription-directsdk pin to v1.0.21
• Camofox browser backend listed in the plugin catalog (official plugin)
• feat(plugin-catalog): add reka-provider
• chore(catalog): update Model Router to v0.4.6
• catalog: update MrScraper to three direct API tools
• feat(connectors): no guest on page open, connector sign-in offer
• feat(auth): every Nous sign-in is the plain device login
• feat(auth): hand the free-tier guest to the account after sign-in
• Browser automation runs on browser_exec only; agent-browser and the built-in browser tools are gone (Camofox moves to a plugin)
• chore(plugin-catalog): bump cursor-provider to v0.4.1
• plugin-catalog: add chat-length (long-chat notice with session_search opener)
• plugin-catalog: update provider-usage to v0.3.1
• feat(plugin-catalog): bump provider-status to 1.6.4
• Add hermes-model-switcher (community, v0.3.0): cross-profile model switcher Dashboard tab
• feat(plugin-catalog): add ai-subscriptions plugin
STABILITY & FIXES (12 PRs)
• fix(image_gen): local source paths work for FAL edits on the local backend
• fix(plugins): a refused install names the missing app instead of printing missing_app
• Unmapped-gateway readiness tests no longer flake on a just-spawned child's empty argv
• fix(tui): inputs queued in the same millisecond on two sessions keep their order after a resume
• chore(deps): bump Python dependencies to latest minor/patch releases
• fix(plugins): say restart for plugin deps a running gateway can't import; keep the tool store out of PM generations
• Windows: hermes update keeps a real hermes.exe after a Python repin
• fix(nix): self-contained dev-shell python, one pm-pinned tool list, darwin shell builds
• PM survival test stops failing on a rebuilt fixture wheel's hash
• nix flake check evaluates again after the uv revision-5 relock
• fix(setup): Quick Setup offers to keep a model imported from another agent
• Desktop reconnect E2E: the intermittent Stop-flash red now records its own timeline
122 new features and fixes
just open sourced a gateway for herdr: an HTTP API + task queue for running coding agents on your own VPS.
i’m a big herdr fan, and wanted to automate coding tasks from apps, scripts, or other agents, not just from my terminal.
send a repo + prompt, and it:
- queues the task
- creates a dedicated git worktree + branch
- opens a herdr tab and starts claude code or pi
- reports progress through polling or webhooks
you can send follow ups to the same agent with its context intact, or jump into its terminal and take over.
use it to trigger bug fixes from your app, investigate failing tests from CI, or let one agent delegate coding work to another.
how i built it: a small node.js + express service wrapping the herdr CLI. FIFO queue with configurable concurrency, state persisted to disk, and automatic cleanup of old sessions and worktrees. no redis or database required.
herdr handles the terminals and agents. the gateway makes them accessible over HTTP.
🛠 DevOps Tool of the Week: Kubeshark
Kubernetes logs can show which service failed, but
They don't always explain what happened between services.
To find the answer, you switch between pod logs and traces.
That's where Kubeshark helps.
Kubeshark is like Wireshark for Kubernetes. It captures cluster-wide network traffic using eBPF and displays it with Kubernetes context.
Here is what it does 👇
• Shows API requests and responses between services.
• Supports HTTP, gRPC, GraphQL, Redis, Kafka, DNS, and more.
• Decrypts TLS traffic using eBPF, without sidecars or proxies.
• Filters traffic by Pod, namespace, node, IP, or API details.
• Visualizes service communication and captures PCAP snapshots.
• Exposes traffic data through MCP for AI tools like Claude.
𝗦𝘁𝗮𝗿𝘁 𝗵𝗲𝗿𝗲:
#devopstools
honeypot-data — Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt analyses.
Madness that your coding agent still can't file a ticket
Claude Code starts at $20 a month. every server below gives it hands outside the terminal. tickets, workflows, diagrams, live web. no more copy-paste.
Microsoft shipped the stable MCP C# SDK 2.0 this week on the new stateless HTTP spec.
10 GitHub repos giving your coding agent hands:
01 github-mcp-server → official GitHub server in Go. reads repos, runs issues, PRs and Actions so you stop switching tabs for a single ticket
02 servers → 7 reference servers, 13 archived and 10 SDKs in one place. start here before building your own
03 fastmcp → ships your own Python MCP server in a few lines. a million downloads a day. runs behind 70% of MCP servers
04 n8n-mcp → feeds the agent 3,143 n8n node docs and 2,352 workflow templates. it builds automations instead of you reading the docs by hand
05 next-ai-draw-io → the agent draws and edits diagrams from the chat. 25 model providers, runs as web, desktop or MCP server
06 gitlab-mcp → 278 GitLab tools, 40 on by default at 12,671 tokens. the full set burns 71,420. keep it lean or context explodes
07 mcp-atlassian → 98 tools for Jira and Confluence. your agent reads tickets, updates boards and pulls wiki pages. no more tab switching
08 tavily-mcp → search, extract, map and crawl the live web. your agent pulls fresh data instead of guessing from stale training knowledge
09 exa-mcp-server → web search and full-page fetch in one connection. two tools by default, two optional, two skills for deeper research
10 mcphub → self-hosted gateway for every server above. control panel on port 3000, five-minute setup, one entry point instead of ten
Start with one. wire the ticket server into your session and file an issue from the terminal.
agent asks → gateway routes the call → ticket server reads issues → workflow server builds the flow → search pulls live context → diagram server draws the result
Every server is open source and free to install. running them still uses your plan's tokens and any third-party API keys the server needs.
Open your config and add one server entry tonight.
Spent this year on HTTP request smuggling. Four mechanisms, ten products. All of them reuse a connection whose previous request was never finished. Turning reuse off takes the crossings to zero and fixes nothing. Reuse isn't the defect.
Maple now has Uptime Monitoring, including HTTP Checks, TCP, DNS monitoring as well as Hearbeats.
Generous amount of Monitors included in the base plan and of course is build ontop of OTEL and can be linked to any of your services.
