Hermes Action Bridge MCP server
io.github.TheBlueHouse75/hermes-action-bridge·v0.6.3·7 starsDelegate real-world actions from Claude Code, Codex, and other agents to Hermes Agent.
7 stars92 downloads/wk
Reviews
Write oneNobody has reviewed Hermes Action Bridge yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Hermes Action Bridge tools (12, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
hermes_approveAsk the MCP client for interactive human confirmation, then consume a prepared approval ID exactly once and submit the unchanged request for execution. This can cause external side effects.
hermes_cancelwrite actionIdempotently cancel a queued or running asynchronous Hermes job.
hermes_capabilitiesInspect bridge status, configured presets, skills, toolsets, providers, models, and policy before deciding whether Hermes owns the requested capability.
hermes_job_statusRead lifecycle metadata for an asynchronous Hermes job without returning its output.
hermes_planAsk Hermes to inspect its configured capabilities in plan mode. Hermes may access open-world tools, so review the response before taking or approving an external action.
hermes_preparewrite actionCreate a local, non-executing preview and short-lived one-shot approval ID without invoking Hermes or its tools. The caller must show preview.action to the human before approval.
hermes_presetsList configured bridge presets and their declarative Hermes skills and toolsets.
hermes_rejectConsume a prepared approval ID without executing the external action.
hermes_resultRead the bounded stdout/stderr result of a completed asynchronous Hermes job.
hermes_runwrite actionUse Hermes-owned skills, connected services, browser workflows, messaging, schedules, or external automation through bridge policy. Effective execute requests require interactive client confirmation. Do not use for ordinary local code edits.
hermes_statusCheck whether the configured Hermes CLI runtime is available without running a provider request.
hermes_submitwrite actionStart a long Hermes plan, draft, or approval-preview job and return immediately. Direct execute requests are converted to request-approval; use hermes_prepare and hermes_approve for execution.
Public scan report
scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it
- Code scan64 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 32 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Hermes Action Bridge compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 80% of 4,460 AI and agents servers
- Tools
- 12
- the typical AI and agents server has 6
- Tools that change things
- 33%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 7
- more than 81% of 2,711 AI and agents servers
- Downloads a week
- 92
- more than 62% of 1,538 AI and agents servers with a package
What its tools let an agent do: 8 read · 4 change
Install Hermes Action Bridge in Claude Code, Cursor or VS Code
Runs npx -y hermes-action-bridge on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hermes-action-bridge -- npx -y hermes-action-bridge
What the publisher says
From the Hermes Action Bridge repository's README, as published. We do not edit it. Read it on GitHub
Hermes Action Bridge
A configurable bridge that lets external agents delegate real-world actions to Hermes Agent without reimplementing Hermes skills, tools, platform integrations, browser automation, cron jobs, or messaging flows.
Use it from Claude Code, Codex, Cursor, CI jobs, shell scripts, or another MCP-capable client. MCP execution requires interactive form elicitation and fails closed in non-interactive clients; plan, draft, dry-run, and direct CLI workflows remain available to automation.
external agent -> hermes-action -> Hermes Agent -> skills/tools/integrationsWhy this exists
Coding agents are good at understanding a repository. They should not duplicate your automation stack.
If an agent needs to do something outside its local coding session — research, schedule a job, open a browser workflow, send a message, prepare a social post, use a Hermes skill, or coordinate with a messaging gateway — it can delegate that request to Hermes through this bridge.
Features
- Generic hermes-action run command for one-shot delegation.
- Configurable presets for skills, toolsets, provider/model, source, and max turns.
- Deterministic, language-agnostic safety policy: downgrades execute to request-approval by default, with per-preset trust overrides.
- Explicit --yolo mode for users who intentionally want to bypass bridge-level policy.
- Context file injection with a per-file cap and a configurable aggregate budget (clear error instead of a cryptic E2BIG).
- Automatic large-context delivery: an oversized prompt is handed to Hermes through a secure temp file instead of overflowing the command line.
- Per-run timeouts (configurable, with per-mode defaults) that always reap the Hermes child process.
- Dry-run mode for debugging the exact Hermes command, prompt, and computed prompt size.
- Complete Codex and Claude Code installer: managed skill plus verified global MCP registration.
- MCP capability discovery, cancellable asynchronous jobs, and one-shot two-phase approvals gated on interactive form elicitation, with a privacy-preserving local audit log.
- Local stdio transport plus an opt-in, authenticated Streamable HTTP transport for Tailscale-restricted hosts.
- No project-specific assumptions. All behavior is configured through YAML and CLI flags.
Requirements
- Node.js 20 or newer.
- Hermes Agent installed and available as hermes, or configured with a custom command path.
Check Hermes:
hermes --versionInstallation
Install from npm:
npm install -g hermes-action-bridgeInstall the skill and MCP registration for Codex and Claude Code, then verify the complete setup:
hermes-action --version
hermes-action install all
hermes-action doctorGlobal installation is all-or-nothing for the requested agents. If Codex or Claude Code is unavailable, conflicting, or cannot verify its user-scoped stdio MCP entry, the command exits non-zero without installing the requested skills. Use --project for an explicit skill-only setup.
Other distribution channels
Choose the channel that matches the agent surface. Hermes Agent must always be installed and configured on the same computer as the local bridge.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Hermes Action Bridge: common questions
- Is Hermes Action Bridge MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Hermes Action Bridge safety report
- How do I install Hermes Action Bridge?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Hermes Action Bridge need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Hermes Action Bridge maintained?
- The last commit was 36 days ago (2026-09-29). The latest release is v0.6.3.
- What can I use instead of Hermes Action Bridge?
- Servers from other publishers that do the same job: Decionis MCP server, Agent-Native Chat MCP server and SuperCompress MCP server.
- How does Hermes Action Bridge compare with other AI and agents MCP servers?
- safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 12 (the typical AI and agents server has 6); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Hermes Action Bridge
Same job from other publishers: the closest match first, then the best rated.
- DecionisAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- SuperCompressCompress coding-agent context ~64%. Hosted Neural Keep MCP for Cursor/Claude/Codex.not reviewedEstablishedB
World Model MCPPersistent 3D/2D spatial world model for AI agents with dynamic velocity and entity tracking.not reviewedEstablishedA- OpenWorkProofVerifiable agent evidence; opt-in Codex guard and reference SOC alert review.not reviewedEstablishedA