Hermai MCP server
io.github.hermai-ai/hermai-mcp·v1.0.0Dedicated Hermai MCP server for schema lookup, request intake, and workflow classification.
0 stars
Reviews
Write oneNobody has reviewed Hermai yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Hermai tools (5, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_schema_request_statusCheck the status of a previously submitted Hermai schema request. Read-only.
classify_browser_workflowClassify a prose workflow as direct API, hidden endpoint, browser-only, or needs owner/auth. Read-only and local.
list_public_schemasList public schemas in the Hermai registry with optional filters. Read-only.
lookup_schemaSearch Hermai for a schema by domain, task, category, or verification state. Read-only.
submit_schema_requestwrite actionSubmit the six-field intake for a missing or brittle browser workflow. Never include cookies, API keys, or private session data.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan4 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 45 days ago12/15
- Maintainer identityregistry namespace matches repository owner7/10
How Hermai compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 86/100
- higher than 72% of 48,255 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 20%
- typical: 0%. Fewer write tools means less an agent can break
What its tools let an agent do: 4 read · 1 change
Install Hermai in Claude Code, Cursor or VS Code
Runs npx -y hermai-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hermai-mcp -- npx -y hermai-mcp
What the publisher says
From the Hermai repository's README, as published. We do not edit it. Read it on GitHub
Hermai MCP
Dedicated Model Context Protocol server for Hermai.
Use this package when an agent runtime supports MCP and should call Hermai as native tools. The Hermai CLI is a separate human/operator tool and is not required for MCP.
Install
Run directly with npx:
npx -y hermai-mcpOr install globally:
npm install -g hermai-mcp
hermai-mcpMCP Client Config
{
"mcpServers": {
"hermai": {
"command": "npx",
"args": ["-y", "hermai-mcp"]
}
}
}Optional environment variables:
- HERMAIAPIBASE or HERMAIPLATFORMURL: API base URL. Defaults to https://api.hermai.ai.
- HERMAIAPIKEY or HERMAIPLATFORMKEY: API key for authenticated Hermai APIs. Public schema lookup and schema-request intake work without a key. Setting a key also unlocks the fetch_schema execution tool (see below).
- HERMAIFETCHTIMEOUTMS: request timeout for fetchschema. Defaults to 120000 (hosted fetch lanes can run tens of seconds).
Claude Code workflow
Use the local MCP server when you want Claude Code to discover a schema, inspect the available workflow, and make an authenticated read request. Hermai MCP is a local stdio server. It is not a remote Claude connector.
Install Claude Code, then add Hermai to your personal Claude Code configuration:
export HERMAI_API_KEY='hm_sk_...'
claude mcp add --scope user hermai -e HERMAI_API_KEY="$HERMAI_API_KEY" -- npx -y hermai-mcp
unset HERMAI_API_KEYThe key is saved in your local Claude Code configuration. Do not put this command in a repository, shared shell history, or a project scoped MCP configuration.
Confirm that Claude Code can see the server:
claude mcp listThen start Claude Code and use this two step request:
Use lookup_schema to find a verified public Hermai schema for [the source and task].
Before making a fetch, show me the site, endpoint, required parameters, and whether
the result can be retrieved with fetch_schema.After you approve the selected workflow:
Use fetch_schema with the site, endpoint, and parameters we selected. Return a short
summary of the records, then show credits_used, credits_remaining, and cached from
the response metadata.lookupschema is safe to use without a key. fetchschema appears only when the key is configured. It reads data through Hermai Cloud and consumes credits for a successful request. Do not give the server browser cookies, bearer tokens, or a request that changes data on another service.
For a full verification checklist and the expected failure paths, see the Claude Code guide.
Tools
Always available (no key required):
- lookup_schema — search Hermai schemas by domain, task, category, or verification state.
- listpublicschemas — page through public schemas.
- submitschemarequest — submit the six-field intake for a brittle browser/API workflow.
- classifybrowserworkflow — locally classify whether a workflow maps to direct API, hidden endpoint, browser-only, or owner/auth work.
- checkschemarequest_status — check a schema request status.
Available only when HERMAIAPIKEY (or HERMAIPLATFORMKEY) is set:
- fetchschema — execute a registered schema through hosted /v1/fetch and return live data. Read-only data retrieval, and it consumes Hermai credits: a standard call costs 1 credit and some higher cost sites cost 5; only successful calls are billed. Inputs: site, endpoint (resolve both with lookupschema first; endpoint is case-sensitive), and optional params. The result includes the upstream data plus a meta summary (creditsused, creditsremaining, latencyms, cached); failures surface the API code and message, plus upgradeto and upgrade_url when a credit 402 offers an upgrade path. Use it for read workflows only — write/owner-approved workflows go through the Hermai CLI's signed-write path, not this tool.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Hermai: common questions
- Is Hermai MCP server safe?
- Yes, by our scan: it is graded A (86/100). Read the Hermai safety report
- How do I install Hermai?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Hermai need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Hermai maintained?
- The last commit was 83 days ago (2026-08-13). The latest release is v1.0.0.
- How does Hermai compare with other MCP servers?
- safety score 86/100 (higher than 72% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.