😡Stop pasting API keys into your Hermes Agent’s chat.🚀 If an agent needs a credential, use a secure credential-entry flow instead: → Agent requests the credential → You enter it through a masked input → The secret is stored securely → The agent gets a reference/receipt — not the... raw secret Your agent needs permission to use the secret.!! It doesn’t need permission to see the secret.!! Ask your Hermes Agent to Build one 👇show more

Use the below prompt if you want to build yours. Implement a secure credential-entry system so users never need to paste API keys, tokens, passwords, or other secrets into agent chat. Required flow 1. When the agent needs a secret, it requests a credential by name/type — never asks the user to paste the value into chat. 2. Open a separate masked credential-entry UI. 3. Store the secret using the operating system's secure credential/keychain mechanism or an encrypted secret store. 4. Return only an opaque credential reference/ID to the agent. 5. When a tool needs the credential, resolve and inject it only at execution time. 6. Never expose the raw secret to: chat/context model prompts tool output logs traces memory error messages 7. Support credential update, revocation, deletion, and per-profile isolation. 8. Redact secrets if they accidentally appear in output. Security rule : The model may request and use a credential through an authorized tool, but it should never receive the plaintext secret itself. Prove it works: Create an end-to-end test with a dummy credential and show evidence that: -the secret never appears in model context -the secret never appears in logs -the agent can successfully perform an authenticated action -revoking the credential causes the next authenticated action to fail Do not claim completion until all four checks pass.

Another thing that you can do instead of pasting your API keys into the chat or making it open up a some type of document where you will paste in your API key. You can instead copy the API key, hold it into your clipboard, and then just ask Hermes to view your clipboard and pull it from there. @Teknium @NousResearch

@NousResearch This is handy when you love to stay inside Hermes Desktop App only and don’t want to touch anything .

@NousResearch This, or personally I host my own vaultwarden and configured with an Agents only folder for credentials.

@NousResearch Either way we just need to make sure our agents are doing the right thing.

@NousResearch Hahaha. Absolutely.

@NousResearch get that one password set up, One of the greatest apps I ever use. With credentials.

@NousResearch It’s not about saving passwords. It about securely entering them without your agent holding your secrets.

@NousResearch My agent is the administrator. Those are OUR api keys, comrade.

@NousResearch We just need to make sure we are safe🫡

@NousResearch Just use @1Password

@NousResearch @1Password Hmm this is not saving passwords but to enter keys and secrets into agents without letting them expose.

@NousResearch @1Password Yup. You create a 1password service account for the agent, give it access to a separate vault and have your credentials there for easy access. Hermes supports this natively I believe cc @Teknium

@NousResearch This is how I do it with Hermes. It sends me a private one time Tailscale link through Telegram. I enter the credential on my phone. Reusable ones go to macOS Keychain. Temporary tokens or API keys are used once and deleted. Hermes only gets confirmation that it worked

@NousResearch That’s a good start.

@NousResearch this is a must, especially for people who aren't very tech savvy and feel like it's safe to just post it in chat, but you never really know what can happen. but security is just as important!

@NousResearch and interesting part is that when this is on and someone tries to take screenshot or screen record it wont allow the computer to do that. More secured.

@NousResearch that's amazing! because sometimes i've read the model's thoughts and seen it mention things that it's not supposed to reveal because they're a secret, but the pop-up box that lets the user know they need to put that information there is much safer and convenient.

@NousResearch Mine tries to tempt me, says casually to paste them in. I tell him that's not secure and he says oh right...Ask him for a terminal command and paste it there.

@NousResearch Hmm it should be strict with secrets.

@NousResearch Oh this is awesome. Grok had this, I didn’t know Hermes’ can build it. Awesome bro!

@NousResearch Thank you bro.

@NousResearch Hermes already has BWS built-in though.

@NousResearch I tired to make my safer one 😝

@NousResearch Damn, been doing it wrong all along..

@NousResearch Let’s make it right now

@NousResearch I don’t care about my api keys. Most of them are free plans or rewards 😂

@NousResearch But still a guardrail is always cherry on top

@NousResearch Just ask to him to give you the command to add it in the terminal and that's it...

@NousResearch either way is to secure our secrets. i am glad you are doing that.

@NousResearch What app is this?

@jeremiahmarylan @NousResearch It’s just a plugin but helps a lot. You can ask you Hermes agent to build one . Prompt is in comment.

@NousResearch @grok what app is in the video they use

@NousResearch Ohhhh. I always give her my APIs. Damn

@NousResearch hmm it took it without objecting.

@NousResearch It's these little things that make a big difference. This would be a great addition to Hermes. Have you thought about creating a PR?

@NousResearch Raised.

@0xvantag3 @NousResearch Hermes Bitwarden integration isn't very good. It exposes the secrets too permissively by default. It's not a config issue, it's a bug IMHO

@0xvantag3 @NousResearch That’s why this helps