ory-hermes

Ory Agent Security for the Hermes agent framework.

Wraps your Hermes tool registry so every call is authorized against Ory Permissions, audited, and tied to the user → agent identity — built on ory-argus.

pip install ory-hermes

Hermes drives its loop from a {name: callable} tool registry (model_tools). Gate it before handing it to the agent:

from ory_hermes import guard_function_map

tools = guard_function_map(model_tools)   # returns a gated copy of the registry

Tool objects (with a run / _run method) work too:

from ory_hermes import guard_tools

tools = guard_tools([search_tool, shell_tool])

In enforce mode a denied tool raises OryDenialError before the tool body runs; Hermes surfaces the denial and the tool never executes. In observe mode (default) the tool runs and a permission.observe_deny activity event is recorded. Network / rate-limit errors fail open.

The integration is SDK-free: it wraps Hermes' plain Python registry by duck typing. Hermes is installed through its own bootstrap process and does not publish an installable Python SDK, so this package intentionally has no Hermes dependency or external real-SDK compatibility test.

Credentials come from the shared ~/.config/ory-agent-plugins/config.json, so a login performed by any other Ory harness plugin or SDK integration is reused here.