Hermes Dashboard banner
chrisryugj chrisryugj

Hermes Dashboard

AI community

Description

Web dashboard for Hermes Agent gateway — full config, MCP, cron, model management without CLI

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Hermes Dashboard

Web-based admin dashboard for [Hermes Agent](https://github.com/NousResearch/hermes-agent) gateway. Full configuration and control without CLI.

![Dashboard](https://img.shields.io/badge/hermes-dashboard-5e6ad2?style=flat-square) ![License](https://img.shields.io/badge/license-MIT-green?style=flat-square)

Features

Category Capabilities
Overview Gateway status, model info, platform connections, MCP servers, cron summary, auth status, disk usage
Model Switch LLM model + provider with one click (auto-restart)
MCP Add / edit / delete MCP servers. Paste Config: import Claude Desktop / Cursor / VS Code MCP JSON directly
Cron Create / edit / delete / pause / resume / run-now cron jobs. Delivery target management
Skills Browse 95+ skills by category. Search. View SKILL.md detail
Config Edit config.yaml with full JSON editor
Env Edit .env variables. Secrets auto-masked. Add new variables
Soul Edit SOUL.md persona
Logs View gateway logs in real-time. Clear logs
Sessions Browse and delete sessions
System Gateway restart with health polling. Restart-needed banner on config changes

Design

  • Linear-inspired dark theme (#08090a canvas, Inter font, cv01 + ss03 OpenType features)
  • All dialogs are dark-themed custom modals (no native prompt()/confirm())
  • Single HTML file, no build step, no dependencies

Security

  • Path traversal prevention on all file operations
  • Atomic file writes (temp file + os.replace)
  • XSS protection (HTML entity + single-quote escaping)
  • Secret auto-masking (TOKEN/KEY/SECRET/PASSWORD patterns)
  • Input validation on all endpoints (regex-based)
  • Referrer policy (no-referrer) to prevent API key leakage
  • All /api/dashboard/* routes require API_SERVER_KEY (Bearer token, constant-time compare). Without the key set, they return 503 and serve nothing.