capsule-hermes

Capsule plugin for the Hermes autonomous AI agent runtime. Forwards Hermes hook events to the Capsule agentsecurity service for centralized policy enforcement and audit.

Install

pip install capsule-hermes

Configure

Register the plugin in your Hermes runtime config (e.g. hermes.yaml):

plugins:
  - module: capsule_hermes
    config:
      endpoint: "https://agents.capsulesecurity.io/v1/hermes/hooks/events"
      token: ${CAPSULE_HERMES_TOKEN}

The endpoint and token values are issued by Capsule when you install the Hermes integration in the Capsule portal (Integrations → Hermes).

Optional config

Hooks covered

The plugin registers handlers for the Hermes runtime hooks Capsule supports:

• Blocking: pre_tool_call, pre_llm_call, pre_gateway_dispatch, pre_approval_request
• Observation: post_tool_call, post_llm_call, post_approval_response, subagent_stop, on_session_start, on_session_end, on_session_finalize, on_session_reset

Blocking hooks await Capsule's verdict and return {"action": "block", "message": ...} to Hermes when the server denies the action. Observation hooks dispatch fire-and-forget so telemetry never stalls the agent.

License

Apache-2.0.