Skip to main content
Connect Hermes, Nous Research’s self-hosted agent, to Agent Vault so it can check out and sign in for you, using only mock tokens. It takes about 2 minutes: one command adds the server, and you sign in once in your browser.

Copy the line for Hermes from your dashboard, or open the steps to set it up by hand.

​
Before you start

  • An Agent Vault account, with a card if your agent will check out. New here? The Quickstart sets one up in about 5 minutes.
  • Hermes, installed where it runs.

​
Connect Hermes

1

Paste this into Hermes

Hermes reads the connect skill and adds the server with OAuth turned on.
2

Sign in

Hermes starts the sign-in and sends you a link. Open it and sign in on the Agent Vault sign-in page, with your Agent Vault account.If Hermes runs on a server, your browser then fails to load an address starting with http://127.0.0.1. That is expected: copy the whole address and send it back to Hermes within a few minutes, before the code in it expires.

​
Choose what it may use

A new connection starts with nothing granted, so your agent can’t use a card or a login yet. Until you choose, its first tool call answers:
The connection itself appears in the dashboard only once your agent makes its first tool call, so make that call first.
1

Make a first call

Ask your agent to call get_token_catalog. It answers with the message above, and the call creates the connection.
2

Open Connected apps

In the dashboard sidebar, under Vault, click Connected apps. The new connection’s row shows Choose what it may use.
3

Pick its cards and logins

Click Choose access. Under Cards and Logins, pick All, or keep Only selected and tick the ones this agent may use.
4

Check the choices, then click Save access

Your first connection’s dialog opens with nothing ticked. After that, a new connection’s dialog opens with the choices of the connection you used most recently, so saving it unchanged grants the same cards and logins, and the same three switches: Let this app create and change its own logins, Ask me before every purchase from this app and Fill a test card instead of my card. Check all of them for this agent before you click Save access.
You can change or revoke the connection on the same page at any time. See Connected apps.

​
Check it works

Ask Hermes to call the Agent Vault tool get_token_catalog. If the tools don’t appear, run /reload-mcp in Hermes and ask again. It answers with the mock tokens for the cards and logins you allowed, such as av_card_1_number_u7x2k.

​
Troubleshooting

It was added without --auth oauth. Correct the entry in ~/.hermes/config.yaml to match the one above, then run hermes mcp login agent-vault.
Run /reload-mcp in Hermes, then ask again.
The connection has nothing granted yet. Follow Choose what it may use, then ask again.
For Hermes, the dashboard recommends an API key over signing in: in testing, sign-in was slower or failed more often. Its Hermes setup leads with one command that runs the local server with your key. On Overview, open Connect another agent and pick Hermes.

​
Next

Your first checkout

Have Hermes buy something, start to finish.

Tool reference

Every tool your agent now has.