Security for
Hermes
Agent
Hermes Agent gives your AI access to terminals, browsers, databases, and 40+ live tools. SupraWall wraps every tool call with a deterministic ALLOW/DENY gate, PII scrubber, and credential vault — all from a single plugin install. Your agent can't exfiltrate data, blow your budget, or go rogue without you knowing.
| What | Answer |
|---|---|
| What is it? | A runtime security plugin for Hermes Agent (by Nous Research). |
| Integration method | Native Hermes plugin via pre_tool_call and post_tool_call hooks. |
| Install command | pip install suprawall-hermes |
| Fail mode | Fail-closed by default. Blocks all tool calls if SupraWall is unreachable. |
| Setup time | Under 2 minutes. One environment variable required. |
One-Command Install
Works on any Hermes Agent v0.3.0+ deployment
# 1. Install the plugin
pip install suprawall-hermes
# 2. Enable in ~/.hermes/config.yaml
plugins:
enabled:
- suprawall-security
# 3. Set your key and restart
export SUPRAWALL_API_KEY=sw_your_key_here
Hook Architecture
SupraWall registers two hooks directly into the Hermes plugin system. Every tool call passes through pre_tool_call before execution and post_tool_call after.
Pre-Execution Gate
Every tool call is evaluated against your ALLOW/DENY policies before any compute is consumed.
Terminal & Browser Tools
Blocks destructive shell commands and credential-exfiltration attempts before they execute.
Credential Vault
Hermes calls suprawall_vault_get to retrieve secrets. API keys never appear in tool arguments.
PII Scrubbing
Emails, SSNs, and credit card numbers are redacted locally from tool results before reaching the LLM.
Integration Surface
| Capability | Integration Method | Status |
|---|---|---|
| Pre-execution ALLOW/DENY | pre_tool_call hook | ✅ Live |
| Audit trails | post_tool_call hook → JSONL | ✅ Live |
| PII scrubbing | post_tool_call result wrapper | ✅ Live |
| Vault credential injection | suprawall_vault_get tool | ✅ Live |
| Budget caps | BudgetTracker + post_tool_call | ✅ Live |
| HITL approvals | /suprawall command + dashboard | ✅ Live |
| Bundled security skill | suprawall:security-policy | ✅ Live |
| Full inline interception | Pre-execution hook (issue #7344) | 🔜 Upstream |
Slash Commands
# Check shield status
/suprawall status
→ Shield: ACTIVE | Budget: $0.42/$5.00 | Audited: 38 tool calls
# View last 10 tool calls
/suprawall audit
# Check current spend
/suprawall budget