FRENES

Personal assistants · AI agent

Hermes Agent: review, pricing, security and alternatives

Hermes Agent is an open-source AI agent published by Nous Research, in the personal assistants family. A personal agent that uses tools, retains memory, and develops reusable skills while carrying out user tasks. Its repository has 256,731 stars and its last commit is from October 24, 2026.

Open sourceSelf-hostableActively maintainedHigh risk

What Hermes Agent does

Hermes Agent belongs to the personal assistants family: general-purpose agents, often self-hosted and driven from a messaging app, that act for you on your files, accounts and services. On our grid it ranks #2 of the 46 projects of this family listed in the directory.

You use it from: terminal (CLI) and messaging (Telegram, Slack, WhatsApp…). Usable models: Claude (Anthropic), GPT (OpenAI), OpenRouter, and local models (Ollama, llama.cpp, vLLM…). It can run on your own machine or server.

Who is Hermes Agent for?

It targets individuals and freelancers who want an assistant able to act for them day to day, often from a messaging app. Typical tasks people give it:

  • sort e-mail and draft replies
  • manage a calendar and reminders
  • look up information and summarise it
  • run small recurring tasks

It is a good candidate if you want to talk to it from your usual messaging app, without opening another app, you are comfortable in a terminal, your data must stay on your machines, and you want the option of a local model, with no API fees.

Access and human control

According to its documentation, Hermes Agent can:

  • run commands in a terminal
  • read and edit files
  • drive a web browser
  • call online services and APIs
  • read and send messages

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

Run commands in a terminalRun commands in a terminal : 22 %22 %Read and edit filesRead and edit files : 28 %28 %Drive a web browserDrive a web browser : 26 %26 %Call online services and APIsCall online services and APIs : 17 %17 %Read and send messagesRead and send messages : 35 %35 %Make paymentsMake payments : 2 %2 %Control the screen, keyboard and mControl the screen, keyboard and m : 15 %15 %
Share of the 46 agents in the family that have each access, according to their documentation. In orange, Hermes Agent's access.

Hermes Agent pricing

The code is free, under the MIT licence.

Getting started with Hermes Agent

  1. Install it: the project ships as a Python package (install with pip or uv). The exact command is in the repository README.
  2. Pick the model: an API key from a provider, or a local model if your machine has enough graphics memory (the VRAM calculator tells you).
  3. Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
  4. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

A personal assistant often combines access to private data, reading outside content and sending messages: the combination that enables data leaks through prompt injection.

Points found for Hermes Agent:

  • Sensitive access: it can run commands in a terminal, with no established default human approval.
  • Trifecta: access to private data, reading outside content and sending messages. That combination makes data leaks through prompt injection possible.

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Project activity and releases

Created on July 22, 2025, the NousResearch/hermes-agent repository has 256,731 stars, 56,144 forks and 16,968 open issues, with 58,278 commits in total. It received changes this month.

44 releases in total; 30 in the last twelve months. Latest release: v0.22.5, on October 23, 2026.

v2026.8.13 · Aug 13, 2026v2026.8.13Aug 13, 2026v2026.8.16 · Aug 16, 2026v2026.8.16.2 · Aug 17, 2026v2026.8.18 · Aug 18, 2026v2026.8.19 · Aug 21, 2026v2026.8.27 · Aug 27, 2026v2026.8.31 · Aug 31, 2026v2026.9.7 · Sep 7, 2026v2026.9.11 · Sep 11, 2026v2026.9.14 · Sep 14, 2026v2026.9.21 · Sep 21, 2026v2026.9.24 · Sep 24, 2026v0.21.6 · Oct 8, 2026v0.21.7 · Oct 12, 2026v0.22.1 · Oct 14, 2026v0.22.0 · Oct 14, 2026v0.22.2 · Oct 15, 2026v0.22.4 · Oct 21, 2026v0.22.3 · Oct 21, 2026v0.22.5 · Oct 23, 2026v0.22.5Oct 23, 2026
The latest 20 releases published on GitHub (hover a point for details).

Hermes Agent vs other personal assistants

GitHub stars of the best-rated open-source projects in the personal assistants family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.

OpenClawOpenClaw : 392.9K392.9KHermes AgentHermes Agent : 256.7K256.7Knanobotnanobot : 49.3K49.3KCowAgentCowAgent : 47.6K47.6KQwenPawQwenPaw : 36K36KZeroClawZeroClaw : 33K33KOpenHumanOpenHuman : 42.3K42.3KNanoClawNanoClaw : 31K31K
Log scale; Hermes Agent in orange. Checked October 25, 2026.

Hermes Agent and other personal assistants at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

Quick comparison: personal assistants
AgentModelScoreStars or entry priceSelf-hostableHuman approval
Hermes Agentopen source90256.7K ★yes–
OpenClawopen source95392.9K ★yes–
nanobotopen source8749.3K ★yes–
CowAgentopen source8747.6K ★yes–
QwenPawopen source8636K ★yes–
ZeroClawopen source8533K ★yes–
OpenHumanopen source8242.3K ★yes–
NanoClawopen source8031K ★yes–

How we rated it

Score: 90/100, computed only from public, verifiable data, with no subjective testing or partnership:

  • Adoption 40/40: 256,731 stars on a log scale (40 points from about 200,000).
  • Activity 25/30: last commit less than a month ago, 30 releases in six months.
  • Framework 25/30: licence, default human approval, self-hosting, model choice and documentation site.

The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.

Verdict

Hermes Agent is one of the most solid projects in its family: followed, active and well framed.

Strengths

  • Widely followed: 256.7K stars
  • Very active development
  • Frequent releases (30 in a year)
  • Can run on your side: data under control
  • Free choice of model

Limitations

  • Broad access without default approval
  • 16,968 open issues

Avoid if…

  • You cannot isolate it (container, virtual machine)
  • It would access personal or bank accounts unattended

Frequently asked questions

Is Hermes Agent free?

The software is free (MIT licence). You still pay for the model calls, unless you use a local model.

Is Hermes Agent safe?

Our risk level: high. Points found: sensitive access and trifecta. Give it minimum rights and approve irreversible actions.

Which models does Hermes Agent use?

According to its documentation: Claude (Anthropic), GPT (OpenAI), OpenRouter, and local models (Ollama, llama.cpp, vLLM…).

Can Hermes Agent be installed on your own server?

Yes, from the NousResearch/hermes-agent repository. Data then stays with you, but security and updates are your job.

What are the alternatives to Hermes Agent?

In the same family: OpenClaw, nanobot, CowAgent, and QwenPaw.

Hermes Agent or OpenClaw: what is the difference?

Both belong to the personal assistants family. Hermes Agent has 256.7K stars against 392.9K for OpenClaw. The right choice mostly depends on the access you are willing to give it.

Related articles

Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score