yilsem/aiturk-hermes-ide
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 4 Wiki Activity

Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

Browse Source
This commit is contained in:
yilsem
2026-09-05 13:26:46 +03:00
commit 03634b1ca3
11340 changed files with 3442369 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
optional-mcps/airtable/manifest.yaml
+31
View File
@@ -0,0 +1,31 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: airtable
description: >-
Bases, tables, and records from your Airtable workspace.
source: https://support.airtable.com/articles/9897799762-using-the-airtable-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.airtable.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- airtable
hosts:
- airtable.com
post_install: |
On first connection Hermes opens a browser to authorize with
Airtable (or run `hermes mcp login airtable`). Approve access,
then restart the session so tools load.
optional-mcps/algolia/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: algolia
description: 'Algolia search: indices, analytics, and settings (read-only).'
source: https://www.algolia.com/doc/guides/model-context-protocol/productivity-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.algolia.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- algolia
hosts:
- algolia.com
post_install: |
On first connection Hermes opens a browser to authorize with
Algolia (or run `hermes mcp login algolia`). Approve access,
then restart the session so tools load.
optional-mcps/alltrails/manifest.yaml
+36
View File
@@ -0,0 +1,36 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: alltrails
description: 'AllTrails: find hikes and trails with reviews and ratings.'
source: https://www.alltrails.com/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://www.alltrails.com/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- hiking
- trail
- alltrails
hosts:
- alltrails.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
Heads-up: only 5 tools, but their schemas are unusually verbose (~24K
tokens total). If you only browse trails occasionally, consider leaving
this server disabled and enabling it on demand, or prune tools with:
hermes mcp configure alltrails
optional-mcps/amplitude/manifest.yaml
+35
View File
@@ -0,0 +1,35 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: amplitude
description: 'Amplitude analytics: charts, dashboards, experiments, flags.'
source: https://amplitude.com/docs/amplitude-ai/amplitude-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.amplitude.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- amplitude
hosts:
- amplitude.com
post_install: |
On first connection Hermes opens a browser to authorize with
Amplitude (or run `hermes mcp login amplitude`). Approve access,
then restart the session so tools load.
EU-resident orgs: change mcp_servers.amplitude.url to
https://mcp.eu.amplitude.com/mcp in config.yaml.
optional-mcps/asana/manifest.yaml
+31
View File
@@ -0,0 +1,31 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: asana
description: >-
Tasks, projects, and goals from your Asana workspace.
source: https://developers.asana.com/docs/using-asanas-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.asana.com/sse
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- asana
hosts:
- asana.com
post_install: |
On first connection Hermes opens a browser to authorize with
Asana (or run `hermes mcp login asana`). Approve access,
then restart the session so tools load.
optional-mcps/atlassian/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: atlassian
description: >-
Jira issues and Confluence pages via Atlassian's hosted remote MCP.
source: https://support.atlassian.com/rovo/docs/getting-started-with-the-atlassian-remote-mcp-server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
# /v1/sse was deprecated by Atlassian after June 30, 2026 (404s since the
# cutover — OAuth succeeded but every handshake failed; issue #91538).
# /v1/mcp/authv2 is the endpoint Atlassian's docs recommend for custom
# clients (Streamable HTTP, native OAuth 2.1 + DCR — verified live).
url: https://mcp.atlassian.com/v1/mcp/authv2
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- jira
- confluence
- atlassian
- bitbucket
hosts:
- atlassian.net
- atlassian.com
- jira.com
post_install: |
On first connection Hermes opens a browser to authorize with
Atlassian (or run `hermes mcp login atlassian`). Approve access,
then restart the session so tools load.
optional-mcps/attio/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: attio
description: CRM records, lists, and notes in Attio.
source: https://attio.com/help/apps/other-apps/using-the-attio-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.attio.com/mcp
auth:
type: oauth
# Excluded: trivial identity probe; query-particle-sql is a plan-gated
# generic SQL escape hatch.
tools:
default_excluded:
- whoami
- query-particle-sql
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- attio
- crm
hosts:
- attio.com
post_install: |
On first connection Hermes opens a browser to authorize with
Attio (or run `hermes mcp login attio`). Approve access,
then restart the session so tools load.
optional-mcps/aws-knowledge/manifest.yaml
+38
View File
@@ -0,0 +1,38 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: aws-knowledge
description: Authoritative AWS docs, API references, and best practices.
source: https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://knowledge-mcp.global.api.aws
auth:
type: none
# aws___retrieve_skill fetches vendor-authored SKILL.md workflow files — a
# vendor skill/discovery layer. Hermes's own skills and tool_search are the
# only instruction/deferral layers we ship (verified live via tools/list).
tools:
default_excluded:
- aws___retrieve_skill
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- aws docs
- aws knowledge
hosts:
- aws.amazon.com
- docs.aws.amazon.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
optional-mcps/betterstack/manifest.yaml
+63
View File
@@ -0,0 +1,63 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: betterstack
description: 'Better Stack: logs, uptime monitors, incidents, and status pages.'
source: https://betterstack.com/docs/getting-started/integrations/mcp/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.betterstack.com
auth:
type: oauth
# Curated exclude list (~106-tool surface). Excluded: vendor-docs search;
# the instruction-fetcher pseudo-tools (static how-to text as tools);
# Execute query / Create cloud connection (raw ClickHouse-SQL escape hatch +
# direct-DB credential minting); team-membership management (account access
# changes). NOTE: Better Stack's docs list display labels while the wire
# uses snake_case (their own header examples show `remove_dashboard`); the
# server is OAuth-gated so names could not be enumerated pre-auth. Entries
# below cover BOTH shapes — glob patterns for the snake_case wire names plus
# the display-label literals; unmatched entries no-op harmlessly.
# ~85+ product tools stay enabled; re-check with
# `hermes mcp configure betterstack` after first login.
tools:
default_excluded:
- search_documentation
- Search documentation
- "*instructions*"
- execute_query
- Execute query
- create_cloud_connection
- Create cloud connection
- "*team_member*"
- "*team member*"
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- better stack
- betterstack
- uptime monitor
hosts:
- betterstack.com
post_install: |
On first connection Hermes opens a browser to authorize with
Better Stack (or run `hermes mcp login betterstack`). Approve access,
then restart the session so tools load.
Heads-up: this server exposes a LARGE tool surface (~106 tools as of
Aug 2026). Hermes applies a curated exclude list automatically at install
(docs search, instruction pseudo-tools, the raw-SQL query hatch, cloud
credential minting, and team-membership tools); everything else stays
enabled. Review or change the selection any time with:
hermes mcp configure betterstack
optional-mcps/buildkite/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: buildkite
description: CI/CD pipelines, builds, and test results from Buildkite.
source: https://buildkite.com/docs/apis/mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.buildkite.com/mcp
auth:
type: oauth
# Excluded: access_token (token self-probe) and get_job_env (can expose
# secrets from CI env vars into model context).
tools:
default_excluded:
- access_token
- get_job_env
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- buildkite
- ci
hosts:
- buildkite.com
post_install: |
On first connection Hermes opens a browser to authorize with
Buildkite (or run `hermes mcp login buildkite`). Approve access,
then restart the session so tools load.
optional-mcps/calendly/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: calendly
description: Scheduling links, events, and invitees from Calendly.
source: https://developer.calendly.com/calendly-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.calendly.com
auth:
type: oauth
# Excluded: vendor skill-discovery pair (instruction-loading indirection —
# Hermes skills/tool_search cover this).
tools:
default_excluded:
- list_calendly_skills
- load_calendly_skill
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- calendly
- scheduling
hosts:
- calendly.com
post_install: |
On first connection Hermes opens a browser to authorize with
Calendly (or run `hermes mcp login calendly`). Approve access,
then restart the session so tools load.
optional-mcps/canva/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: canva
description: Create, search, and manage Canva designs.
source: https://www.canva.dev/docs/mcp/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.canva.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- canva
- design
hosts:
- canva.com
post_install: |
On first connection Hermes opens a browser to authorize with
Canva (or run `hermes mcp login canva`). Approve access,
then restart the session so tools load.
optional-mcps/circleci/manifest.yaml
+38
View File
@@ -0,0 +1,38 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: circleci
description: 'CircleCI: diagnose build failures, read logs, rerun workflows.'
source: https://circleci.com/docs/guides/toolkit/circleci-mcp-overview/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.circleci.com/v1/mcp
auth:
type: oauth
# Excluded: connectivity ping and billing-CSV power-user probe.
tools:
default_excluded:
- hello
- download_usage_data
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- circleci
hosts:
- circleci.com
post_install: |
On first connection Hermes opens a browser to authorize with
CircleCI (or run `hermes mcp login circleci`). Approve access,
then restart the session so tools load.
optional-mcps/clickup/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: clickup
description: Tasks, docs, and workspaces in ClickUp.
source: https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.clickup.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- clickup
- task
hosts:
- clickup.com
post_install: |
On first connection Hermes opens a browser to authorize with
ClickUp (or run `hermes mcp login clickup`). Approve access,
then restart the session so tools load.
optional-mcps/close/manifest.yaml
+54
View File
@@ -0,0 +1,54 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: close
description: 'Sales CRM: leads, opportunities, calls, and emails.'
source: https://help.close.com/docs/mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.close.com/mcp
auth:
type: oauth
# Excluded (107-tool surface): product-help search; generic search/fetch/
# paginate layer duplicating lead_search/activity_search; AI field
# enrichment; and the entire voice-agent cluster — schedule_voice_agent_call
# places REAL outbound AI phone calls to contacts. Re-enable any with
# `hermes mcp configure close`.
tools:
default_excluded:
- close_product_knowledge_search
- customized_builtin_labels
- search
- fetch
- paginate_search
- enrich_field
- schedule_voice_agent_call
- apply_voice_agent_update
- propose_voice_agent_update
- find_voice_agents
- find_agent_configs
- get_voice_agents
- get_voice_agent_overview_report
- get_voice_agent_performance_report
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- close crm
hosts:
- close.com
post_install: |
On first connection Hermes opens a browser to authorize with
Close (or run `hermes mcp login close`). Approve access,
then restart the session so tools load.
optional-mcps/cloudflare/manifest.yaml
+147
View File
@@ -0,0 +1,147 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: cloudflare
description: Full Cloudflare API access via the official remote MCP.
source: https://developers.cloudflare.com/agents/model-context-protocol/cloudflare/servers-for-cloudflare/
# Cloudflare's official API MCP server (github.com/cloudflare/mcp) is a
# managed remote server — nothing to install locally. It fronts the entire
# Cloudflare API: DNS, Workers, R2, KV, D1, Zero Trust, WAF, Pages, Queues,
# and everything else in the OpenAPI spec.
#
# We pin `?codemode=false` deliberately. The server's default mode fronts
# the API through its own search()/execute() indirection ("Code Mode"),
# where the model must query a spec index and then write JavaScript that
# runs in a provider-side sandbox. Hermes already has progressive tool
# disclosure (tool_search) — stacking a second, server-side search layer
# on top of it would mean two search hops before any real call, and our
# tool_search would only ever see 2 opaque meta-tools instead of the real
# surface. With codemode=false the server registers each API endpoint as
# its own tool (~3,300 as of July 2026) with a real JSON Schema derived
# from the endpoint's path/query/body parameters. Hermes's tool_search
# then defers the whole surface behind its bridge tools and searches the
# FULL catalog with complete schemas — one disclosure layer, ours, with
# total information. Calls go straight to the Cloudflare API; no sandbox
# indirection.
transport:
type: http
url: https://mcp.cloudflare.com/mcp?codemode=false
auth:
type: oauth
# Native MCP OAuth 2.1 (case 1) — the server publishes AS metadata with
# Dynamic Client Registration at https://mcp.cloudflare.com/register.
# Hermes's MCP client + mcp_oauth_manager handle discovery, DCR, PKCE,
# token exchange, and refresh. During authorization Cloudflare lets you
# scope exactly which account permissions the agent gets.
# Tool selection at install time:
# The surface is ~3,300 endpoint tools. Rather than a manual checklist (or
# a frozen include list that would block future endpoints), we ship a
# curated exclude list of glob patterns targeting product families that are
# enterprise-contract, org-fleet, or read-only-analytics surfaces — dead
# weight for the personal/dev accounts the catalog serves. Everything else
# (~1,900 tools: DNS, Workers, R2, KV, D1, Queues, Pages, WAF, rulesets,
# tunnels, Access, Stream, Images, AI, Vectorize, ...) stays enabled,
# including endpoints Cloudflare adds later. Users can re-enable any family
# by deleting its pattern from mcp_servers.cloudflare.tools.exclude.
tools:
default_excluded:
# The server's built-in Cloudflare-docs search tool (not an API
# endpoint) — redundant with the agent's own web tools.
- docs
# Radar: public read-only internet trend analytics (~275 tools).
# Cloudflare ships a dedicated Radar MCP for this.
- "*_radar_*"
# Enterprise networking: Magic Transit/WAN, network monitoring,
# interconnects, WAN teamnet. (cloudflared tunnels are NOT excluded.)
- "*_accounts_magic_*"
- "*_accounts_mnm_*"
- "*_accounts_cni_*"
- "*_accounts_teamnet_*"
# Cloudforce One threat-intel analyst platform (enterprise SOC).
- "*_accounts_cloudforceone_*"
# Zero Trust org-fleet suite: DLP, managed devices, DEX, data-security
# posture, email security, SCIM provisioning, SWG gateway policy.
# Access (login policies for your own apps) stays enabled.
- "*_accounts_dlp_*"
- "*_accounts_devices*"
- "*_accounts_dex_*"
- "*_accounts_datasecurity_*"
- "*_accounts_emailsecurity_*"
- "*_accounts_scim_*"
- "*_accounts_gateway*"
- "*_accounts_zerotrust_*"
- "*_accounts_one_*"
# Security-intel research products: brand protection, threat intel,
# URL scanner, CVE scanner, security center.
- "*_accounts_brandprotection_*"
- "*_accounts_intel_*"
- "*_accounts_urlscanner_*"
- "*_accounts_vuln_scanner_*"
- "*_zones_securitycenter_*"
- "*_accounts_securitycenter_*"
# Enterprise API Shield cluster + waiting rooms + BYOIP + data shares.
- "*_zones_api_gateway_*"
- "*_zones_schema_validation*"
- "*_zones_token_validation*"
- "*_zones_waiting_rooms*"
- "*_accounts_addressing_*"
- "*_accounts_shares*"
# Legacy / migration / niche: S3-migration slurper, Web3 gateways,
# secondary-DNS peering, legacy per-user load balancers.
- "*_accounts_slurper_*"
- "*_zones_web3_*"
- "*_accounts_flagship_*"
- "*_zones_secondary_dns_*"
- "*_accounts_secondary_dns_*"
- "*_user_load_balancers*"
post_install: |
On first connection, Hermes opens a browser to authorize with Cloudflare.
You pick the account and the permissions to grant — scope the token to
what you want the agent to touch. After auth, restart your Hermes session
so the Cloudflare tools are loaded.
This entry exposes each Cloudflare API endpoint as an individual tool.
A curated exclude list ships in the manifest (enterprise-contract,
org-fleet, and read-only-analytics product families are disabled —
~1,400 tools), leaving ~1,900 tools for the products people actually
drive from an agent: DNS, Workers, R2, KV, D1, Queues, Pages, WAF,
rulesets, tunnels, Access, Stream, Images, AI, Vectorize. Hermes's
tool_search defers them all, so your context is not flooded — the agent
discovers the right endpoint on demand with full schemas.
Run a Zero Trust org or want Radar/Magic/API-Shield surfaces back?
Delete their patterns from mcp_servers.cloudflare.tools.exclude in
~/.hermes/config.yaml.
Headless / CI alternative: instead of OAuth, create a Cloudflare API token
at https://dash.cloudflare.com/profile/api-tokens and configure the server
with a bearer header in ~/.hermes/config.yaml:
mcp_servers:
cloudflare:
url: "https://mcp.cloudflare.com/mcp?codemode=false"
headers:
Authorization: "Bearer ${CLOUDFLARE_API_TOKEN}"
Prefer the provider-side Code Mode surface instead (2 search/execute
meta-tools, ~1k-token schema, sandboxed JS composition)? Drop the
`?codemode=false` from the url. Not recommended together with Hermes
tool_search — you'd be stacking two tool-discovery layers.
Cloudflare also runs product-specific MCP servers (same OAuth flow, add
manually via `hermes mcp add <name> --url <url>` if you want a narrower
surface): docs search (https://docs.mcp.cloudflare.com/mcp, no auth),
Workers observability (https://observability.mcp.cloudflare.com/mcp),
Browser Rendering (https://browser.mcp.cloudflare.com/mcp), Radar
(https://radar.mcp.cloudflare.com/mcp), GraphQL analytics
(https://graphql.mcp.cloudflare.com/mcp), audit logs
(https://auditlogs.mcp.cloudflare.com/mcp), and more — full list at the
source URL above.
Re-run the tool checklist any time with:
hermes mcp configure cloudflare
optional-mcps/cloudinary/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: cloudinary
description: Upload, search, and transform media assets in Cloudinary.
source: https://cloudinary.com/documentation/cloudinary_llm_mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://asset-management.mcp.cloudinary.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- cloudinary
- media assets
hosts:
- cloudinary.com
post_install: |
On first connection Hermes opens a browser to authorize with
Cloudinary (or run `hermes mcp login cloudinary`). Approve access,
then restart the session so tools load.
optional-mcps/comfy-cloud/manifest.yaml
+82
View File
@@ -0,0 +1,82 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: comfy-cloud
description: Generate images, video, audio, and 3D on Comfy Cloud.
source: https://docs.comfy.org/agent-tools/cloud
# Comfy Cloud ships a hosted remote MCP server (Streamable HTTP) with native
# MCP OAuth 2.1 + Dynamic Client Registration — same shape as the linear
# entry. Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE,
# token exchange, and refresh — nothing to install locally.
transport:
type: http
url: https://cloud.comfy.org/mcp
auth:
type: oauth
# No `provider:` — native MCP OAuth (case 1), not a third-party provider
# like Google. The MCP client triggers the browser flow on the first
# probe / first connect.
# Tool selection at install time:
# The server exposes ~37 tools (public beta — surface may grow). At Hermes's
# measured ~600 tokens/tool schema average, all 37 would add ~16-22k tokens
# to EVERY API call while enabled — larger than the entire Hermes core
# toolset. The curated default below (20 tools) keeps the surface to what an
# agent needs to discover, generate, and fetch results (~9-12k tokens).
#
# Deliberately excluded from the default (opt back in any time with
# `hermes mcp configure comfy-cloud`):
# - cql, get_server_info — power-user / debug probes
# - submit_batch, get_batch_status, get_batch_output, wait_for_batch
# — batch variants of the job lifecycle
# - list_saved_workflows, get_saved_workflow, save_workflow,
# update_workflow, run_saved_workflow, share_workflow,
# import_shared_workflow — saved/shared workflow management
# - create_app, get_app_mode_url — Comfy App Mode product features
# - submit_feedback — beta survey link
# - report_session_summary — outbound telemetry; excluded per
# Hermes policy (no telemetry without explicit user opt-in)
tools:
default_enabled:
# Discovery
- search_templates
- get_template
- get_template_schema
- search_models
- search_nodes
- get_node
- get_prompting_guide
# Generation
- run_template
- submit_workflow
- partner_generate
- upload_file
- apply_slots
# Job lifecycle
- get_job_status
- wait_for_job
- get_output
- use_previous_output
- cancel_job
- get_queue
# Account / handoff
- get_billing_status
- get_workflow_canvas_url
post_install: |
On first connection, Hermes will open a browser to authenticate with your
Comfy account. After auth, restart your Hermes session so the Comfy Cloud
tools are loaded.
Discovery tools (search_templates / search_models / search_nodes) work with
any Comfy account. Generation tools run on Comfy Cloud and consume credits,
so they need a subscription or credit balance — see
https://www.comfy.org/cloud for plans.
A curated 20-tool subset is enabled by default (discovery, generation, job
lifecycle, billing). Batch jobs, saved/shared workflow management, and App
Mode tools are available but unchecked — enable them any time with:
hermes mcp configure comfy-cloud
optional-mcps/context7/manifest.yaml
+34
View File
@@ -0,0 +1,34 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: context7
description: Up-to-date, version-specific library docs and code examples.
source: https://context7.com/docs/resources/all-clients
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://mcp.context7.com/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- context7
- library docs
hosts:
- context7.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
Works anonymously with rate limits; for higher limits create an API key
at context7.com/dashboard and add it as a Bearer header via
mcp_servers.context7.headers in config.yaml.
optional-mcps/craft/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: craft
description: 'Craft: structured docs, tasks, and personal knowledge base.'
source: https://support.craft.do/hc/en-us/articles/29455875123101
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.craft.do/my/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- craft docs
hosts:
- craft.do
post_install: |
On first connection Hermes opens a browser to authorize with
Craft (or run `hermes mcp login craft`). Approve access,
then restart the session so tools load.
optional-mcps/datadog/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: datadog
description: >-
Logs, monitors, dashboards, and incidents from Datadog.
source: https://docs.datadoghq.com/bits_ai/mcp_server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.datadoghq.com/api/unstable/mcp-server/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- datadog
- apm
hosts:
- datadoghq.com
- datadoghq.eu
post_install: |
On first connection Hermes opens a browser to authorize with
Datadog (or run `hermes mcp login datadog`). Approve access,
then restart the session so tools load.
optional-mcps/deepwiki/manifest.yaml
+30
View File
@@ -0,0 +1,30 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: deepwiki
description: Ask questions about any public GitHub repo (Devin's DeepWiki).
source: https://docs.devin.ai/work-with-devin/deepwiki-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://mcp.deepwiki.com/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- deepwiki
- repo wiki
hosts:
- deepwiki.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
optional-mcps/dropbox/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: dropbox
description: Search, read, and manage files in Dropbox.
source: https://help.dropbox.com/integrations/connect-dropbox-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.dropbox.com/mcp
auth:
type: oauth
# Excluded: account quota probe and the niche file-request feature trio.
tools:
default_excluded:
- GetUsageAndQuota
- CreateFileRequest
- GetFileRequest
- ListFileRequests
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- dropbox
hosts:
- dropbox.com
post_install: |
On first connection Hermes opens a browser to authorize with
Dropbox (or run `hermes mcp login dropbox`). Approve access,
then restart the session so tools load.
optional-mcps/figma/manifest.yaml
+48
View File
@@ -0,0 +1,48 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: figma
description: >-
Official Figma remote MCP — design context, Code Connect, and
write-to-canvas via https://mcp.figma.com/mcp (OAuth).
source: https://developers.figma.com/docs/figma-mcp-server/remote-server-installation/
# Figma's hosted endpoint requires OAuth 2.1 + DCR. Their registration
# endpoint allowlists *exact* client_name strings (not arbitrary clients):
# "Claude Code" and "Codex" succeed; "Hermes Agent" 403s. Hermes's MCP
# OAuth layer auto-sets client_name to "Claude Code" for this host (see
# tools/mcp_oauth.apply_oauth_provider_defaults) so the browser flow can
# start. Users can override via oauth.client_name if they want Codex
# instead. Scope defaults to mcp:connect.
transport:
type: http
url: https://mcp.figma.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- figma
- mockup
- wireframe
hosts:
- figma.com
post_install: |
On first connection Hermes opens a browser to authorize with Figma
(or run `hermes mcp login figma`). Approve access, then restart the
session so tools load.
Figma walks OAuth DCR by exact client_name. Hermes registers as
"Claude Code" automatically so registration is not 403'd — you do not
need to paste a client_id.
Prompt with a frame/file link:
implement this design: https://www.figma.com/design/<fileKey>/...
Desktop alternative (no OAuth, local only): enable Dev Mode MCP in the
Figma desktop app (Shift+D → Inspect → Enable desktop MCP server) and
point url at http://127.0.0.1:3845/mcp instead.
optional-mcps/fireflies/manifest.yaml
+41
View File
@@ -0,0 +1,41 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: fireflies
description: Meeting transcripts, summaries, and action items.
source: https://docs.fireflies.ai/getting-started/mcp-configuration
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://api.fireflies.ai/mcp
auth:
type: oauth
# Excluded: experimental ChatGPT-connector search/fetch shims duplicating
# fireflies_get_transcripts / fireflies_get_transcript + get_summary.
tools:
default_excluded:
- fireflies_search
- fireflies_fetch
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- fireflies
- meeting notes
- transcript
hosts:
- fireflies.ai
post_install: |
On first connection Hermes opens a browser to authorize with
Fireflies (or run `hermes mcp login fireflies`). Approve access,
then restart the session so tools load.
optional-mcps/gamma/manifest.yaml
+41
View File
@@ -0,0 +1,41 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: gamma
description: 'Gamma: generate and edit AI presentations, docs, and sites.'
source: https://developers.gamma.app/docs/gamma-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.gamma.app/mcp
auth:
type: oauth
# Excluded: per-person viewer tracking (incl. emails) — privacy-sensitive
# telemetry-grade analytics; get_gamma_analytics covers the useful case.
tools:
default_excluded:
- get_gamma_viewer_analytics
- get_gamma_viewer_detail_analytics
- get_gamma_card_analytics
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- gamma
- presentation
hosts:
- gamma.app
post_install: |
On first connection Hermes opens a browser to authorize with
Gamma (or run `hermes mcp login gamma`). Approve access,
then restart the session so tools load.
optional-mcps/gitlab/manifest.yaml
+42
View File
@@ -0,0 +1,42 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: gitlab
description: 'GitLab: issues, merge requests, pipelines, and repo context.'
source: https://docs.gitlab.com/user/model_context_protocol/mcp_server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://gitlab.com/api/v4/mcp
auth:
type: oauth
# Excluded: version probe and Duo-product session listing.
tools:
default_excluded:
- get_mcp_server_version
- list_duo_sessions
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- gitlab
- merge request
hosts:
- gitlab.com
post_install: |
On first connection Hermes opens a browser to authorize with
GitLab (or run `hermes mcp login gitlab`). Approve access,
then restart the session so tools load.
Covers gitlab.com. Self-managed GitLab (18.6+): point
mcp_servers.gitlab.url at https://<your-host>/api/v4/mcp.
optional-mcps/globalping/manifest.yaml
+41
View File
@@ -0,0 +1,41 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: globalping
description: Ping, traceroute, DNS, and HTTP tests from global probes.
source: https://github.com/jsdelivr/globalping-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.globalping.dev/mcp
auth:
type: oauth
# Excluded: in-band documentation/usage-guide/rate-limit probes.
tools:
default_excluded:
- help
- compareLocations
- limits
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- globalping
- traceroute
- ping
hosts:
- globalping.io
post_install: |
On first connection Hermes opens a browser to authorize with
Globalping (or run `hermes mcp login globalping`). Approve access,
then restart the session so tools load.
optional-mcps/grafana/manifest.yaml
+65
View File
@@ -0,0 +1,65 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: grafana
description: >-
Query metrics, logs, dashboards, alerts, and incidents from Grafana Cloud.
source: https://grafana.com/docs/grafana-cloud/ai-tools/mcp-servers/cloud-mcp/
# Grafana Cloud's hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration over
# Streamable HTTP; Hermes's MCP client + mcp_oauth_manager handle discovery,
# PKCE, token exchange, and refresh. OAuth is user-scoped to your Grafana RBAC.
#
# Note: this is the *hosted* Grafana Cloud MCP server, not the self-run OSS
# `mcp-grafana` binary (which authenticates with a service account token and
# supports self-hosted Grafana). Self-hosted users should configure that
# manually per https://github.com/grafana/mcp-grafana.
transport:
type: http
url: https://mcp.grafana.com/mcp
auth:
type: oauth
# Defensive excludes (verified against Grafana's published MCP tool tables).
# The hosted Cloud server's documented surface (~35 tools: dashboards,
# datasources, Prometheus/Loki/Tempo/Pyroscope queries, annotations,
# rendering) is clean — but the sibling OSS roster carries two clusters we
# never want auto-enabled if the Cloud surface grows toward it:
# - ask_assistant: opaque delegation to Grafana Assistant (an agent
# meta-tool, same class as Railway's railway-agent) that also bills
# Assistant usage per call.
# - agento11y_*: eight multiplexed tools for Grafana's own
# agent-observability product surface.
# Both no-op harmlessly while the Cloud server doesn't serve them.
tools:
default_excluded:
- ask_assistant
- "agento11y_*"
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- grafana
- promql
- logql
- observability
- dashboard
hosts:
- grafana.net
- grafana.com
post_install: |
On first connection Hermes opens a browser to authorize with Grafana Cloud
(or run `hermes mcp login grafana`). During authorization you'll enter your
Grafana Cloud stack URL (https://<your-stack>.grafana.net) and choose read
or read+write access, then approve. Restart the session so tools load.
Requires a hosted Grafana Cloud stack and the "Assistant Cloud MCP User"
role (Editor or higher has it by default). Self-hosted Grafana isn't
supported by this endpoint — use the OSS mcp-grafana server instead.
Billing note: Grafana counts each user connecting via MCP as an active
Grafana Assistant user — see grafana.com Assistant pricing.
optional-mcps/hugging_face/manifest.yaml
+34
View File
@@ -0,0 +1,34 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: hugging_face
description: >-
Models, datasets, Spaces, and papers from the Hugging Face Hub.
source: https://huggingface.co/docs/hub/agents-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
# Underscored name so UIs render "Hugging Face", not "Huggingface".
transport:
type: http
url: https://huggingface.co/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- hugging face
- huggingface
hosts:
- huggingface.co
- hf.co
post_install: |
On first connection Hermes opens a browser to authorize with
Hugging Face (or run `hermes mcp login hugging_face`). Approve access,
then restart the session so tools load.
optional-mcps/indeed/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: indeed
description: Search jobs and listings on Indeed.
source: https://docs.indeed.com/indeed-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.indeed.com/claude/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- indeed
- job search
hosts:
- indeed.com
post_install: |
On first connection Hermes opens a browser to authorize with
Indeed (or run `hermes mcp login indeed`). Approve access,
then restart the session so tools load.
optional-mcps/intercom/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: intercom
description: >-
Conversations, tickets, and customer data from Intercom.
source: https://developers.intercom.com/docs/guides/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.intercom.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- intercom
hosts:
- intercom.com
- intercom.io
post_install: |
On first connection Hermes opens a browser to authorize with
Intercom (or run `hermes mcp login intercom`). Approve access,
then restart the session so tools load.
optional-mcps/kiwi/manifest.yaml
+40
View File
@@ -0,0 +1,40 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: kiwi
description: 'Kiwi.com flight search: itineraries with direct booking links.'
source: https://www.kiwi.com/stories/kiwi-mcp-connector/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://mcp.kiwi.com
auth:
type: none
# The server ships exactly two tools: search-flight (the product) and
# feedback-to-devs (outbound feedback channel — excluded per Hermes policy:
# no telemetry/feedback tools without explicit user opt-in).
tools:
default_enabled:
- search-flight
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- flight search
- kiwi.com
hosts:
- kiwi.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
Search only — booking and payment happen on kiwi.com via the returned
links, never in-conversation.
optional-mcps/klaviyo/manifest.yaml
+43
View File
@@ -0,0 +1,43 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: klaviyo
description: 'Klaviyo marketing: campaigns, flows, segments, and reporting.'
source: https://developers.klaviyo.com/en/docs/klaviyo_mcp_server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
# Vendor-documented debloat params: core-tools-only trims the 262-tool
# surface to ~40 core tools; disable-tools-with-user-generated-content
# removes tools that read UGC (vendor's prompt-injection mitigation).
# Drop the params in mcp_servers.klaviyo.url for the full surface.
url: https://mcp.klaviyo.com/mcp?core-tools-only=true&disable-tools-with-user-generated-content=true
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- klaviyo
hosts:
- klaviyo.com
post_install: |
On first connection Hermes opens a browser to authorize with
Klaviyo (or run `hermes mcp login klaviyo`). Approve access,
then restart the session so tools load.
Requires an Owner/Admin/Manager Klaviyo role.
Hermes pins the trimmed ~40-tool core surface plus Klaviyo's
prompt-injection mitigation via URL params. For the full 262-tool
surface, remove the query params from mcp_servers.klaviyo.url in
config.yaml.
optional-mcps/linear/manifest.yaml
+45
View File
@@ -0,0 +1,45 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: linear
description: Find, create, and update Linear issues, projects, and comments.
source: https://linear.app/docs/mcp
# Linear ships a remote MCP server with native OAuth 2.1 + Dynamic Client
# Registration over Streamable HTTP. Hermes's MCP client + mcp_oauth_manager
# handle discovery, PKCE, token exchange, and refresh — nothing to install
# locally.
transport:
type: http
url: https://mcp.linear.app/mcp
auth:
type: oauth
# No `provider:` — this is native MCP OAuth (case 1), not a third-party
# provider like Google. The MCP client triggers the browser flow on the
# first probe / first connect.
# Tool selection at install time:
# Linear's MCP server exposes a moderate-sized tool surface (find/get/list +
# create/update across issues/projects/comments). We leave `default_enabled`
# unset so the install-time checklist starts with everything pre-checked —
# users prune what they don't want.
#
# If you want to encode a curated subset here once it stabilizes, list the
# tool names under `tools.default_enabled`. Probe failure would then apply
# that list directly.
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- linear
hosts:
- linear.app
post_install: |
On first connection, Hermes will open a browser to authenticate with Linear.
After auth, restart your Hermes session so the Linear tools are loaded.
You can re-run the tool checklist any time with:
hermes mcp configure linear
optional-mcps/microsoft-learn/manifest.yaml
+31
View File
@@ -0,0 +1,31 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: microsoft-learn
description: Official Microsoft, Azure, and .NET docs and code samples.
source: https://learn.microsoft.com/en-us/training/support/mcp-get-started
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://learn.microsoft.com/api/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- microsoft docs
- azure docs
- msdn
hosts:
- learn.microsoft.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
optional-mcps/miro/manifest.yaml
+44
View File
@@ -0,0 +1,44 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: miro
description: Read and edit Miro boards, diagrams, and frames.
source: https://developers.miro.com/docs/connecting-to-miro-mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.miro.com/
auth:
type: oauth
# Excluded: diagram_create/diagram_get_dsl are vendor-deprecated; the four
# layout_* tools are 'deprecating soon', duplicated by the canvas_* set.
tools:
default_excluded:
- diagram_create
- diagram_get_dsl
- layout_create
- layout_get_dsl
- layout_read
- layout_update
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- miro
- whiteboard
hosts:
- miro.com
post_install: |
On first connection Hermes opens a browser to authorize with
Miro (or run `hermes mcp login miro`). Approve access,
then restart the session so tools load.
optional-mcps/mixpanel/manifest.yaml
+48
View File
@@ -0,0 +1,48 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: mixpanel
description: 'Mixpanel analytics: events, funnels, retention, dashboards.'
source: https://docs.mixpanel.com/docs/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.mixpanel.com/mcp
auth:
type: oauth
# Excluded: six guidance pseudo-tools returning static best-practice text;
# chart-widget renderer; deep-link generator; bulk variants of
# Edit-Event/Edit-Property.
tools:
default_excluded:
- Get-Experiment-Setup-Guidance
- Get-Experiment-Results-Interpretation-Guidance
- Explain-Experiment-Health-Check
- Run-Experiment-Pre-Launch-Checks
- Get-Feature-Flag-Setup-Guidance
- Get-Feature-Flag-Lifecycle-Guidance
- Display-Query
- Get-Lexicon-URL
- Bulk-Edit-Events
- Bulk-Edit-Properties
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- mixpanel
hosts:
- mixpanel.com
post_install: |
On first connection Hermes opens a browser to authorize with
Mixpanel (or run `hermes mcp login mixpanel`). Approve access,
then restart the session so tools load.
optional-mcps/monday/manifest.yaml
+45
View File
@@ -0,0 +1,45 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: monday
description: Boards, items, docs, and workflows in monday.com.
source: https://developer.monday.com/apps/docs/mondaycom-mcp-integration
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.monday.com/mcp
auth:
type: oauth
# Excluded: the 'Advanced API access' trio is a generic execute-any-GraphQL
# escape hatch (meta-layer — Hermes policy: no server-side API-execute
# indirection); get_sprint_summary is an AI-product feature;
# create_notification pings other users' bell/email.
tools:
default_excluded:
- all_monday_api
- get_graphql_schema
- get_type_details
- get_sprint_summary
- create_notification
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- monday.com
- monday board
hosts:
- monday.com
post_install: |
On first connection Hermes opens a browser to authorize with
monday.com (or run `hermes mcp login monday`). Approve access,
then restart the session so tools load.
optional-mcps/motherduck/manifest.yaml
+48
View File
@@ -0,0 +1,48 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: motherduck
description: 'MotherDuck: query DuckDB cloud warehouses with SQL.'
source: https://motherduck.com/docs/key-tasks/ai-and-motherduck/mcp-setup/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://api.motherduck.com/mcp
auth:
type: oauth
# Curated default: the 9 core catalog/SQL tools. The other 30 (Dive, Flight
# scheduled-jobs, Guide products + ask_docs_question) stay available via
# `hermes mcp configure motherduck`.
tools:
default_enabled:
- list_columns
- list_databases
- list_macros
- list_shares
- list_tables
- list_views
- query
- query_rw
- search_catalog
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- motherduck
- duckdb
hosts:
- motherduck.com
post_install: |
On first connection Hermes opens a browser to authorize with
MotherDuck (or run `hermes mcp login motherduck`). Approve access,
then restart the session so tools load.
optional-mcps/n8n/manifest.yaml
+81
View File
@@ -0,0 +1,81 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
#
# Schema version 1.
manifest_version: 1
name: n8n
description: Manage and inspect n8n workflows from Hermes (stdio bridge, no public port).
source: https://github.com/CyberSamuraiX/hermes-n8n-mcp
# How to launch the server once installed. The keys here map 1:1 to the
# `mcp_servers.<name>` block written into ~/.hermes/config.yaml by the
# existing `_save_mcp_server()` helper in hermes_cli/mcp_config.py.
transport:
type: stdio
# For git-installed servers, ${INSTALL_DIR} is substituted at install time
# with the path the catalog cloned the repo into. The catalog never
# auto-updates: the user re-runs `hermes mcp install official/n8n` to
# refresh.
command: "${INSTALL_DIR}/.venv/bin/python"
args:
- "${INSTALL_DIR}/server.py"
# Optional install step. Omit for npm/uvx servers where transport.command
# is the install (`npx -y package`). Use for repos that need a local clone
# + dependency install.
install:
type: git
url: https://github.com/CyberSamuraiX/hermes-n8n-mcp.git
# Pinned per catalog dependency policy: full commit SHA (branches and tags
# can be moved; SHAs cannot), and the pinned commit must be at least
# 2 weeks old at pin time — same supply-chain rules as pyproject
# dependencies. This SHA is "feat: add local n8n MCP bridge for Hermes"
# (2026-05-23). Bumping the pin is a PR to this manifest.
ref: 7a9ae00795593aa1fdb4e61ecd640e8bfd0c3841
# Bootstrap commands run inside the cloned directory after clone.
bootstrap:
- "python3 -m venv .venv"
- ".venv/bin/pip install -r requirements.txt"
# Authentication. Three shapes:
# type: api_key — prompt for env vars, write to ~/.hermes/.env
# type: oauth — provider-mediated or remote MCP native OAuth (case 1/2)
# type: none — no credentials needed
auth:
type: api_key
env:
- name: N8N_BASE_URL
prompt: "n8n instance URL"
default: "http://127.0.0.1:5678"
required: true
secret: false
- name: N8N_API_KEY
prompt: "n8n API key (generate under Settings → API)"
required: true
secret: true
# Tool selection at install time:
# n8n's bridge exposes 11 tools. Mutating ones (activate/deactivate, docker
# container_logs) are pruned from the default so a user who installs casually
# gets a read-mostly safe surface. Users see the full list in the install-time
# checklist and can opt into the mutating tools per their threat model.
tools:
default_enabled:
- health
- list_workflows
- get_workflow
- find_workflows
- list_executions
- get_execution
- recent_failures
- export_workflow
post_install: |
The n8n bridge expects to talk to a running n8n instance over the URL you
provided. Generate an API key in n8n under Settings → API.
Workflow activate/deactivate calls are real mutations against your live n8n.
Treat them carefully.
Start a new Hermes session to load the n8n tools.
optional-mcps/neon/manifest.yaml
+50
View File
@@ -0,0 +1,50 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: neon
description: 'Neon serverless Postgres: projects, branches, and SQL.'
source: https://neon.com/docs/ai/neon-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.neon.tech/mcp
auth:
type: oauth
# Excluded: search/fetch nav indirection (redundant with list/describe
# tools); docs-lookup pair; observability beta (single-region, dead weight
# for most); Neon Auth product provisioning trio.
tools:
default_excluded:
- search
- fetch
- list_docs_resources
- get_doc_resource
- query_logs
- list_log_fields
- list_log_field_values
- provision_neon_auth
- configure_neon_auth
- get_neon_auth_config
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- neon
- postgres
hosts:
- neon.tech
- neon.com
post_install: |
On first connection Hermes opens a browser to authorize with
Neon (or run `hermes mcp login neon`). Approve access,
then restart the session so tools load.
optional-mcps/netlify/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: netlify
description: >-
Sites, deploys, and env vars via Netlify's hosted MCP.
source: https://docs.netlify.com/build/build-with-ai/agent-setup-guides/agent-setup-overview/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
# No `netlify.app` suggest host for the same deploy-preview reason as vercel.app.
transport:
type: http
url: https://netlify-mcp.netlify.app/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- netlify
hosts:
- netlify.com
post_install: |
On first connection Hermes opens a browser to authorize with
Netlify (or run `hermes mcp login netlify`). Approve access,
then restart the session so tools load.
optional-mcps/notion/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: notion
description: >-
Pages and databases from your Notion workspace.
source: https://developers.notion.com/docs/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.notion.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- notion
hosts:
- notion.so
- notion.site
post_install: |
On first connection Hermes opens a browser to authorize with
Notion (or run `hermes mcp login notion`). Approve access,
then restart the session so tools load.
optional-mcps/paypal/manifest.yaml
+31
View File
@@ -0,0 +1,31 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: paypal
description: >-
Payments, invoices, and subscriptions via PayPal's hosted MCP.
source: https://developer.paypal.com/tools/mcp-server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.paypal.com/sse
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- paypal
hosts:
- developer.paypal.com
post_install: |
On first connection Hermes opens a browser to authorize with
Paypal (or run `hermes mcp login paypal`). Approve access,
then restart the session so tools load.
optional-mcps/plaid/manifest.yaml
+37
View File
@@ -0,0 +1,37 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: plaid
description: 'Plaid dashboard: integrations, Items, and usage debugging.'
source: https://plaid.com/docs/resources/mcp/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://api.dashboard.plaid.com/mcp/
auth:
type: oauth
# Excluded: meta-intro tool that spends a call explaining the other four.
tools:
default_excluded:
- plaid_get_tools_introduction
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- plaid
hosts:
- plaid.com
post_install: |
On first connection Hermes opens a browser to authorize with
Plaid (or run `hermes mcp login plaid`). Approve access,
then restart the session so tools load.
optional-mcps/postman/manifest.yaml
+36
View File
@@ -0,0 +1,36 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: postman
description: Postman workspaces, collections, environments, and APIs.
source: https://learning.postman.com/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
# /minimal is Postman's own documented essential-CRUD variant (collections,
# workspaces, environments). The Full variant at /mcp is 100+ tools with
# Enterprise surface; switch mcp_servers.postman.url if you need it.
url: https://mcp.postman.com/minimal
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- postman
- api collection
hosts:
- postman.com
post_install: |
On first connection Hermes opens a browser to authorize with
Postman (or run `hermes mcp login postman`). Approve access,
then restart the session so tools load.
optional-mcps/prisma-postgres/manifest.yaml
+37
View File
@@ -0,0 +1,37 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: prisma-postgres
description: Create and manage Prisma Postgres databases.
source: https://www.prisma.io/docs/postgres/integrations/mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.prisma.io/mcp
auth:
type: oauth
# Excluded: docs Q&A tool bundled into a DB-management server.
tools:
default_excluded:
- search_prisma_documentation
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- prisma
hosts:
- prisma.io
post_install: |
On first connection Hermes opens a browser to authorize with
Prisma Postgres (or run `hermes mcp login prisma-postgres`). Approve access,
then restart the session so tools load.
optional-mcps/railway/manifest.yaml
+41
View File
@@ -0,0 +1,41 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: railway
description: 'Railway: projects, services, deployments, and environments.'
source: https://docs.railway.com/guides/mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.railway.com
auth:
type: oauth
# Excluded: railway-agent hands the request to Railway's server-side AI
# agent for multi-step infra operations — an opaque delegation meta-layer
# that acts outside Hermes's per-tool approval loop. The remaining tools
# are direct (and destructive ones carry vendor destructive-hints).
tools:
default_excluded:
- railway-agent
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- railway
- railway deploy
hosts:
- railway.com
- railway.app
post_install: |
On first connection Hermes opens a browser to authorize with
Railway (or run `hermes mcp login railway`). Approve access,
then restart the session so tools load.
optional-mcps/robinhood/manifest.yaml
+47
View File
@@ -0,0 +1,47 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: robinhood
description: 'Robinhood agentic trading: portfolio, balances, and orders.'
source: https://robinhood.com/us/en/support/articles/agentic-trading-overview/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://agent.robinhood.com/mcp/trading
auth:
type: oauth
# Excluded: options-tier upsell link and social watchlist engagement
# features. Trading tools stay enabled by design — see the post_install
# caution.
tools:
default_excluded:
- get_option_level_upgrade_info
- get_popular_watchlists
- follow_watchlist
- unfollow_watchlist
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- robinhood
- stock trade
hosts:
- robinhood.com
post_install: |
On first connection Hermes opens a browser to authorize with
Robinhood (or run `hermes mcp login robinhood`). Approve access,
then restart the session so tools load.
CAUTION: this server can place REAL trades (equities, options, crypto)
in a dedicated Robinhood agentic account. Hermes's normal tool-approval
flow applies, but review orders carefully before approving.
optional-mcps/semgrep/manifest.yaml
+42
View File
@@ -0,0 +1,42 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: semgrep
description: Scan code for security vulnerabilities with Semgrep.
source: https://semgrep.dev/docs/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.semgrep.ai/mcp
auth:
type: oauth
# Excluded: security_check duplicates semgrep_scan; static metadata and
# schema probes. (Vendor archived the standalone repo — live surface may
# drift; excludes no-op harmlessly if names change.)
tools:
default_excluded:
- security_check
- supported_languages
- semgrep_rule_schema
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- semgrep
- static analysis
hosts:
- semgrep.dev
post_install: |
On first connection Hermes opens a browser to authorize with
Semgrep (or run `hermes mcp login semgrep`). Approve access,
then restart the session so tools load.
optional-mcps/sentry/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: sentry
description: >-
Issues, stack traces, and error context from Sentry.
source: https://docs.sentry.io/product/sentry-mcp/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.sentry.dev/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- sentry
- stack trace
- crash report
hosts:
- sentry.io
post_install: |
On first connection Hermes opens a browser to authorize with
Sentry (or run `hermes mcp login sentry`). Approve access,
then restart the session so tools load.
optional-mcps/square/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: square
description: >-
Catalog, orders, and payments via Square's hosted MCP.
source: https://developer.squareup.com/docs/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
# "square" the English word is everywhere ("square brackets") — only the
# unambiguous brand form triggers a suggestion.
transport:
type: http
url: https://mcp.squareup.com/sse
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- squareup
hosts:
- squareup.com
post_install: |
On first connection Hermes opens a browser to authorize with
Square (or run `hermes mcp login square`). Approve access,
then restart the session so tools load.
optional-mcps/strava/manifest.yaml
+36
View File
@@ -0,0 +1,36 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: strava
description: 'Strava: activities, fitness trends, training load (read-only).'
source: https://support.strava.com/en-us/articles/15401531-strava-mcp-connector
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.strava.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- strava
- running
- cycling
hosts:
- strava.com
post_install: |
On first connection Hermes opens a browser to authorize with
Strava (or run `hermes mcp login strava`). Approve access,
then restart the session so tools load.
Requires a Strava subscription.
optional-mcps/stripe/manifest.yaml
+31
View File
@@ -0,0 +1,31 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: stripe
description: >-
Payments, customers, and invoices via Stripe's hosted MCP.
source: https://docs.stripe.com/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.stripe.com
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- stripe
hosts:
- dashboard.stripe.com
post_install: |
On first connection Hermes opens a browser to authorize with
Stripe (or run `hermes mcp login stripe`). Approve access,
then restart the session so tools load.
optional-mcps/supabase/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: supabase
description: >-
Database, auth, and storage from your Supabase projects.
source: https://supabase.com/docs/guides/ai-tools/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
transport:
type: http
url: https://mcp.supabase.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- supabase
hosts:
- supabase.com
- supabase.co
post_install: |
On first connection Hermes opens a browser to authorize with
Supabase (or run `hermes mcp login supabase`). Approve access,
then restart the session so tools load.
optional-mcps/todoist/manifest.yaml
+42
View File
@@ -0,0 +1,42 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: todoist
description: Manage Todoist tasks and projects.
source: https://www.todoist.com/help/articles/todoist-mcp-server
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://ai.todoist.net/mcp
auth:
type: oauth
# Excluded: search/fetch are the OpenAI-connector compatibility layer that
# duplicates the find-* tools; template import/export is niche.
tools:
default_excluded:
- search
- fetch
- export-project-template
- import-project-template
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- todoist
- todo
hosts:
- todoist.com
post_install: |
On first connection Hermes opens a browser to authorize with
Todoist (or run `hermes mcp login todoist`). Approve access,
then restart the session so tools load.
optional-mcps/trivago/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: trivago
description: 'trivago hotel search: compare prices by city and dates.'
source: https://mcp.trivago.com/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://mcp.trivago.com/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- hotel search
- trivago
hosts:
- trivago.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
Search only — booking happens on the linked booking sites, never
in-conversation.
optional-mcps/twelve-data/manifest.yaml
+42
View File
@@ -0,0 +1,42 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: twelve-data
description: Stocks, forex, and crypto market data from Twelve Data.
source: https://twelvedata.com/docs
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://mcp.twelvedata.com/mcp
auth:
type: oauth
# Excluded: OAuth plumbing exposed as tools on the cloud server, plus the
# account-quota probe. All remaining tools are read-only market data.
tools:
default_excluded:
- oauth_login
- auth_status
- oauth_configure
- get_api_usage
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- twelve data
- stock price
hosts:
- twelvedata.com
post_install: |
On first connection Hermes opens a browser to authorize with
Twelve Data (or run `hermes mcp login twelve-data`). Approve access,
then restart the session so tools load.
optional-mcps/twilio-docs/manifest.yaml
+29
View File
@@ -0,0 +1,29 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: twilio-docs
description: 'Twilio developer docs search (public beta, read-only).'
source: https://www.twilio.com/docs/ai/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://mcp.twilio.com/docs
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- twilio docs
hosts:
- twilio.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
optional-mcps/unreal-engine/manifest.yaml
+54
View File
@@ -0,0 +1,54 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: unreal-engine
description: Drive the Unreal Engine 5.8 editor over its local MCP server.
source: https://dev.epicgames.com/documentation/unreal-engine/unreal-mcp-in-unreal-editor
# Epic's official "Unreal MCP" plugin (internal id ModelContextProtocol)
# embeds an MCP server inside the running Unreal Editor process and serves it
# over local HTTP. There is nothing to install on the Hermes side — the user
# enables the plugin in-editor and the server binds to 127.0.0.1. Hermes's
# MCP client just connects to the URL.
#
# Default bind is http://127.0.0.1:8000/mcp (port + path are configurable in
# Editor Preferences > General > Model Context Protocol). If you change the
# port/path in-editor, edit the url in mcp_servers.unreal-engine afterward.
transport:
type: http
url: http://127.0.0.1:8000/mcp
# The editor-embedded server accepts connections only from the same machine
# and has no authentication of its own (Epic's experimental design — not for
# remote use). Nothing to prompt for.
auth:
type: none
# Tool selection at install time:
# The plugin advertises engine tools (spawn actors, configure lighting, create
# material instances, inspect Slate widgets, run automation tests) and is
# user-extensible, so the exact surface depends on the project's enabled
# toolsets. Leave default_enabled unset — the install-time probe lists whatever
# the live editor exposes and pre-checks all of it; users prune from there.
post_install: |
This entry connects to Epic's official Unreal MCP plugin, which runs INSIDE
the Unreal Editor. Before Hermes can connect:
1. Open your project in Unreal Editor 5.8+.
2. Edit > Plugins, search "Unreal MCP", enable it, restart the editor
(the Toolset Registry dependency enables automatically).
3. Edit > Editor Preferences > General > Model Context Protocol, turn on
"Auto Start Server" (or run `ModelContextProtocol.StartServer` in the
editor console). It binds to http://127.0.0.1:8000/mcp by default.
Start Hermes AFTER the editor's server is running so the tools are probed.
If you changed the port or URL path in Editor Preferences, update the url in
mcp_servers.unreal-engine to match.
Status: Epic ships this as EXPERIMENTAL. The server runs Tool calls serially
on the engine game thread — avoid issuing overlapping calls.
Re-run the tool checklist any time with:
hermes mcp configure unreal-engine
optional-mcps/vercel/manifest.yaml
+33
View File
@@ -0,0 +1,33 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: vercel
description: >-
Deployments, logs, and projects via Vercel's hosted MCP.
source: https://vercel.com/docs/mcp
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
# No `vercel.app` suggest host on purpose: pasted deploy-preview links are
# about the site being previewed, not about managing Vercel.
transport:
type: http
url: https://mcp.vercel.com
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- vercel
hosts:
- vercel.com
post_install: |
On first connection Hermes opens a browser to authorize with
Vercel (or run `hermes mcp login vercel`). Approve access,
then restart the session so tools load.
optional-mcps/webflow/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: webflow
description: >-
Sites, CMS collections, and pages via Webflow's hosted MCP.
source: https://developers.webflow.com/mcp/reference/getting-started
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration;
# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
# exchange, and refresh.
# No `webflow.io` suggest host — that's published staging sites, not Webflow intent.
transport:
type: http
url: https://mcp.webflow.com/mcp
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- webflow
hosts:
- webflow.com
post_install: |
On first connection Hermes opens a browser to authorize with
Webflow (or run `hermes mcp login webflow`). Approve access,
then restart the session so tools load.
optional-mcps/wolfram/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: wolfram
description: Wolfram|Alpha computation, math, and curated knowledge.
source: https://www.wolfram.com/agent-tools/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). No authentication required (verified live:
# initialize succeeds anonymously).
transport:
type: http
url: https://agenttools.wolfram.com/mcp
auth:
type: none
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- wolfram
- wolfram alpha
- computation
hosts:
- wolfram.com
- wolframalpha.com
post_install: |
No account or credentials needed — tools are available as soon as the
session restarts.
optional-mcps/wordpress-com/manifest.yaml
+32
View File
@@ -0,0 +1,32 @@
# Nous-approved MCP catalog entry.
# Presence in this directory = approval. Merged via PR review.
manifest_version: 1
name: wordpress-com
description: 'WordPress.com: posts, pages, drafts, stats, and comments.'
source: https://developer.wordpress.com/docs/mcp/
# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
# discovery, PKCE, token exchange, and refresh.
transport:
type: http
url: https://public-api.wordpress.com/wpcom/v2/mcp/v1
auth:
type: oauth
# Composer-suggestion triggers (desktop brand pills).
suggest:
keywords:
- wordpress
hosts:
- wordpress.com
post_install: |
On first connection Hermes opens a browser to authorize with
WordPress.com (or run `hermes mcp login wordpress-com`). Approve access,
then restart the session so tools load.