Loading the catalogue…
Other · Nous Research · US
hermes-agent
US CLOUD Act exposureOpen sourceMIT
USAGE ON STAV · LAST 12 WEEKS
Where hermes-agent shows up on Stav.
Live usage rolls up every five minutes. We surface the 12-week trend once enough requests have flowed through this app.
STAV REVIEW · LAST REVIEWED 06/26/2026
“MIT-licensed, self-hosted autonomous agent with zero CVEs and no vendor data relay — but the agentic OS-level execution model demands explicit governance before you deploy.”
Good for
- Teams that want a provider-agnostic agentic CLI deployable entirely on their own infrastructure, with Inference pointing at any endpoint including Stav
- Engineers who need Docker, PyPI, or native desktop distribution with no mandatory vendor relay in the data path
- Organisations comfortable carrying their own compliance posture and willing to audit an MIT-licensed codebase directly
- High-velocity teams that value active maintenance: a 6.6-day release cadence, 25 contributors, and 100+ commits per 90 days
Watch out for
- The agentic execution model grants broad OS-level and code-execution access; sandboxing and explicit admin approval policies are required before any team deployment
- No SOC 2, ISO 27001, DPA, SLA, or bug-bounty programme exists — all formal compliance obligations fall entirely on the deploying team
- Vendor privacy policy has returned HTTP 404 across every curator run; the no-telemetry claim is inferred from documentation inspection, not a source-code audit
- Nous Research is a US entity subject to CLOUD Act jurisdiction, and desktop binaries (macOS DMG, Windows EXE) are distributed with unconfirmed code-signing status
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
MODEL REQUIREMENTS
What hermes-agent needs from a model.
Required
- Tool calling
Recommended
- Long context (≥128k)
- Native code execution
- Structured output
Known issues5 open
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
2026-06-30
lowUpstream change on hermes-agent-nousresearch: github_last_push '2026-06-23T03:22:28Z' → '2026-06-30T06:10:10Z'
other · open
Source ↗2026-06-23
lowUpstream change on hermes-agent-nousresearch: github_release 'v2026.6.5' → 'v2026.6.19', github_last_push '2026-06-16T06:10:54Z' → '2026-06-23T03:22:28Z'
other · open
Source ↗2026-06-16
lowUpstream change on hermes-agent-nousresearch: github_last_push '2026-06-09T06:22:32Z' → '2026-06-16T06:10:54Z'
other · open
Source ↗2026-06-09
lowUpstream change on hermes-agent-nousresearch: github_release 'v2026.5.29.2' → 'v2026.6.5', github_last_push '2026-06-02T05:12:53Z' → '2026-06-09T06:22:32Z'
other · open
Source ↗2026-06-02
lowUpstream change on hermes-agent-nousresearch: github_release None → 'v2026.5.29.2', github_last_push None → '2026-06-02T05:12:53Z', cve_count None → 0