Permission policies
Set each tool to allow, ask, or deny.
terminal
files
secrets
Herm provides secure infrastructure for customer-facing and internal agents: MCP, memory, tools, skills, sandboxes, permissions, and observability out of the box.
Quick start with an agent
01 / PRODUCT INTERFACE
Stop harness-engineering. Bring your system prompt, skills, tools, and connectors, then get infrastructure, orchestration, memory, self learning, and more out of the box. Then connect over SSE or use directly in Slack.
Reusable versioned configuration
Read docsDurable threads and runs
Read docsTokens and tool calls over SSE
Read docsUsage and events for your logs
Read docsLearns every user
Read docsScheduled background runs
Read docsMarkdown playbooks on demand
Read docsWeb, files, and shell built in
Read docsYour tools, open protocol
Read docsDMs and channel mentions
Read docsA persistent workspace
Read docsCredentials, never in the sandbox
Read docsSend /goal and keep going
Read docsIsolated per agent and subject
Read docsImproves between sessions
Read docsGate tool calls by policy
Read docs02 / HARNESS ENGINEERING
A custom harness turns sessions, memory, files, sandboxes, credentials, automations, and streaming into your roadmap. Herm keeps that plumbing off your plate so your team can focus on the prompt, data, tools, and UX that make the agent worth using.
Create a versioned agent, start subject-scoped sessions, and stream the runtime events your product needs.
Get an API key03 / OPERATING SURFACE
Build the agent once, deploy it to each customer, and keep every run visible from the same operating surface.

04 / ACCESS CONTROLS
Set each tool to allow, ask, or deny.
terminal
files
secrets
Start sessions with the right access level.
Pause sensitive actions before they run.
Attach vault access only where it belongs.
05 / QUESTIONS
Everything you need to know about Herm, the API, pricing, and what you can build.
Contact supportHerm is an API for deploying user-facing AI agents built on the open-source Hermes harness. Create a reusable agent with your system prompt, skills, tools, and connectors, then create a subject-scoped session for each user and chat with it over SSE. We run the containers, the harness, and everything in between.
No. One POST /v1/agents call creates your agent, and Herm runs its sessions in isolated containers with a persistent filesystem and credential management. There's no harness to build, no Docker to wrangle, and no EC2 instance to babysit.
Bring your system prompt, MCP servers, configured Markdown skills, and tools to POST /v1/agents. The API returns an agent ID; create a session with POST /v1/sessions, then wire its SSE events endpoint into your chat UI. Your users get memory, automations, self-learning, and image & video input without you building any of it.
Anything Hermes can do: browse the web, search, manage files, run your tools, follow your skills, and schedule recurring work. A user can say “every week, look at our top-performing video from last week and make five variations” and the agent handles it in the background.
Every agent has a persistent filesystem. Files, memory, skills, and automations survive across sessions, so the agent picks up exactly where it left off — even days later.
Yes. Every user's agent runs in its own isolated container. Secrets are managed through credential references rather than raw tokens, and Herm does not train on your data.
Yes. Book a call to discuss private and hybrid deployment options.
06 / DEPLOYMENT