CLI 명령 레퍼런스
기준일: 2026-07-26
난이도: 중급
공식 기준: CLI Commands Reference
개요
Hermes 터미널 엔트리포인트·명령 패밀리 레퍼런스입니다. 플래그 전체는 원문과 hermes --help / hermes <cmd> --help를 함께 보세요.
핵심 개념
| 구분 | 설명 |
|---|---|
| Global entrypoint | hermes 공통 옵션 |
| Top-level commands | chat, model, gateway, setup 등 |
| Scripted one-shot | hermes -z / non-interactive |
| Platform helpers | whatsapp, slack, send 등 |
| Auth / secrets | login, auth, secrets, migrate |
상세
명령 패밀리 목록
Global entrypoint
Top-level commands
hermes chat
Common options:
hermes model
Interactive provider + model selector. This is the command for adding new providers, setting up API keys, and running OAuth flows. Run it from your terminal — not from inside an active Hermes chat session.
hermes gateway
Subcommands:
hermes lsp
Manage the Language Server Protocol integration. LSP runs real
hermes setup
Easiest path: hermes setup --portal — OAuth into Nous Portal and opt into the Tool Gateway in one shot.
hermes portal
Inspect Nous Portal auth, Tool Gateway routing, and reach the subscription page. Subcommand-less invocation runs status.
hermes whatsapp
Runs the WhatsApp pairing/setup flow, including mode selection and QR-code pairing.
hermes slack
Generates a Slack app manifest that registers every gateway command in
hermes send
Send a one-shot message to a configured messaging platform without spinning up an agent or gateway loop. Reuses the gateway's already-configured credentials (~/.hermes/.env + ~/.hermes/config.yaml) so ops scripts, cron jobs, CI hooks, and monitoring daemons can post status updates without reimplementing each platform's REST client.
hermes secrets
Pull API keys from an external secret manager at process startup instead of storing them in ~/.hermes/.env. Currently supports Bitwarden Secrets Manager. See the full guide: Bitwarden integration.
hermes migrate
Diagnose and (optionally) rewrite the active config.yaml to replace references to retired models or deprecated settings. A timestamped backup of the original config.yaml is taken before any rewrite (skip with --no-backup).
hermes proxy
Run a local OpenAI-compatible HTTP server that forwards requests to an OAuth-authenticated upstream provider (e.g. Nous Portal, xAI). External apps can point at the proxy with any bearer token; the proxy attaches your real OAuth credentials on the way out. See Subscription Proxy for the full guide.
hermes security
On-demand vulnerability scan against OSV.dev. Covers the Hermes venv (installed PyPI distributions), Python dependencies declared by plugins under ~/.hermes/plugins/, and pinned npx/uvx MCP servers in config.yaml. Does NOT scan globally-installed packages or editor/browser extensions.
hermes login / hermes logout (Deprecated)
hermes login has been removed. Use hermes auth to manage OAuth credentials, hermes model to select a provider, or hermes setup for full interactive setup.
hermes auth
Manage credential pools for same-provider key rotation. See Credential Pools for full documentation.
hermes status
hermes cron
The cron trigger is pluggable via the cron.provider config key. Empty
hermes kanban
Multi-profile, multi-project collaboration board. Each install can host many boards (one per project, repo, or domain); each board is a standalone queue with its own SQLite DB and dispatcher scope. New installs start with one board called default, whose DB is ~/.hermes/kanban.db for back-compat; additional boards live at ~/.hermes/kanban/boards/<slug>/kanban.db. The gateway-embedded dispatcher sweeps every board per tick.
hermes egress
Outbound credential-injection firewall for remote terminal sandboxes. Wraps the iron-proxy daemon — a TLS-intercepting proxy that swaps opaque proxy tokens for real upstream API credentials at the network boundary, so sandboxes never hold real keys. Disabled by default; see the full Egress proxy page for setup + architecture.
hermes project
Projects are human-named workspaces that can span multiple folders / repos. They anchor desktop session grouping and, when bound to a kanban board, give tasks a deterministic worktree + branch convention. State is per-profile.
hermes webhook
Manage dynamic webhook subscriptions for event-driven agent activation. Requires the webhook platform to be enabled in config — if not configured, prints setup instructions.
hermes doctor
hermes dump
Outputs a compact, plain-text summary of your entire Hermes setup. Designed to be copy-pasted into Discord, GitHub issues, or Telegram when asking for support — no ANSI colors, no special formatting, just data.
hermes debug
Upload a debug report (system info + recent logs) to a paste service and get a shareable URL. Useful for quick support requests — includes everything a helper needs to diagnose your issue.
hermes backup
Create a zip archive of your Hermes configuration, skills, sessions, and data. The backup excludes the hermes-agent codebase itself.
hermes checkpoints
Inspect and manage the shadow git store at ~/.hermes/checkpoints/ — the storage layer behind the in-session /rollback command. Safe to run any time; does not require the agent to be running.
hermes import
Restore a previously created Hermes backup into your Hermes home directory. All files in the archive overwrite existing files in your Hermes home; --force only skips the confirmation prompt that fires when the target already has a Hermes installation.
hermes logs
View, tail, and filter Hermes log files. All logs are stored in ~/.hermes/logs/ (or <profile>/logs/ for non-default profiles).
hermes prompt-size
Reports the fixed prompt budget for a fresh session — what gets sent on every
hermes config
Subcommands:
hermes pairing
hermes skills
Subcommands:
hermes bundles
Skill bundles group several skills under one /<bundle-name> slash command. Invoking the bundle loads every referenced skill into a single combined user message. Storage: ~/.hermes/skill-bundles/<slug>.yaml. See Skill Bundles for the YAML schema and behavior.
hermes curator
The curator is an auxiliary-model background task that periodically reviews agent-created skills, prunes stale ones, consolidates overlaps, and archives obsolete skills. Bundled and hub-installed skills are never touched. Archives are recoverable; auto-deletion never happens.
hermes moa
Configure named Mixture of Agents presets. Presets appear as selectable models under a Mixture of Agents provider in every model picker; /moa <prompt> runs one prompt through the default preset.
hermes fallback
Manage the fallback provider chain. Fallback providers are tried in order when the primary model fails with rate-limit, overload, or connection errors.
hermes hooks
Inspect shell-script hooks declared in ~/.hermes/config.yaml, test them against synthetic payloads, and manage the first-use consent allowlist at ~/.hermes/shell-hooks-allowlist.json.
hermes memory
Set up and manage external memory provider plugins. Available providers: honcho, openviking, mem0, hindsight, holographic, retaindb, byterover, supermemory. Only one external provider can be active at a time. Built-in memory (MEMORY.md/USER.md) is always active.
hermes acp
Starts Hermes as an ACP (Agent Client Protocol) stdio server for editor integration.
hermes mcp
Manage MCP (Model Context Protocol) server configurations and run Hermes as an MCP server.
hermes plugins
Unified plugin management — general plugins, memory providers, and context engines in one place. Running hermes plugins with no subcommand opens a composite interactive screen with two sections:
hermes tools
Without --summary, this launches the interactive per-platform tool configuration UI.
hermes computer-use
Subcommands:
hermes pets
Petdex is a public gallery of animated sprite pets for coding agents. Install one and Hermes shows it reacting to agent activity across the CLI, TUI, and desktop app.
hermes sessions
Subcommands:
hermes insights
hermes claw
Migrate your OpenClaw setup to Hermes. Reads from ~/.openclaw (or a custom path) and writes to ~/.hermes. Automatically detects legacy directory names (~/.clawdbot, ~/.moltbot) and config filenames (clawdbot.json, moltbot.json).
hermes serve
Start the Hermes backend server — the JSON-RPC/WebSocket gateway the desktop app and remote clients connect to. It is the same server hermes dashboard runs, but headless: it never opens a browser UI. The desktop app launches its own hermes serve backend; use this command directly when you want a headless backend on a remote host. Accepts the same --host / --port / --insecure / --skip-build / --stop / --status options as hermes dashboard below (a non-loopback bind engages the same auth gate). Requires the [web] extra; the embedded Chat socket additionally needs [pty] on a POSIX host.
hermes dashboard
Launch the web dashboard — a browser-based UI for managing configuration, API keys, and monitoring sessions. (For a headless backend with no browser UI — e.g. what the desktop app spawns — use hermes serve above.) Requires cd ~/.hermes/hermes-agent && uv pip install -e ".[web]" (FastAPI + Uvicorn). The embedded browser Chat tab is always available and additionally needs the pty extra (cd ~/.hermes/hermes-agent && uv pip install -e ".[web,pty]") plus a POSIX PTY environment such as Linux, macOS, or WSL2. See Web Dashboard for full documentation.
hermes profile
Manage profiles — multiple isolated Hermes instances, each with its own config, sessions, skills, and home directory.
hermes completion
Print a shell completion script to stdout. Source the output in your shell profile for tab-completion of Hermes commands, subcommands, and profile names.
hermes update
Pulls the latest hermes-agent code and reinstalls dependencies in the managed venv, then re-runs the post-install hooks (MCP servers, skills sync, completion install). Safe to run on a live install. Use --check to see whether your checkout is behind origin/main without installing.
Maintenance commands
See also
자주 쓰는 흐름
hermes setup # 초기 설정
hermes model # provider/model 선택
hermes chat # 대화
hermes gateway # 메시징 게이트웨이
hermes plugins # 플러그인 관리
hermes skills # 스킬 허브
hermes cron # 스케줄 (버전에 따라 하위명령)
hermes --help
Global options (개념)
- 설정/프로파일 경로 오버라이드
- 로그 레벨
- non-interactive / JSON 출력 모드
- 버전 정보
hermes chat / one-shot
- 대화형 TUI/CLI
- 스크립트용 원샷 프롬프트 (
-z등)로 stdout 캡처 - 부모 스크립트가 종료 코드로 성공 판별 가능
hermes gateway
- 메시징 어댑터 상시 실행
- setup / status / service install 계열
hermes model / 세션 중 /model
- provider·모델·라우팅 변경
- 세션 중 slash로 핫스왑 (지원 시)
보안 관련
hermes security점검hermes secrets시크릿 저장소- deprecated
login/logout→auth계열로 이전 여부 확인
원문 대조 권장 섹션
- Global entrypoint
- Top-level commands
hermes chathermes modelhermes gatewayhermes lsphermes setuphermes portalhermes whatsapphermes slackhermes sendhermes secretshermes migratehermes proxyhermes securityhermes login/hermes logout(Deprecated)hermes authhermes statushermes cronhermes kanbanhermes egresshermes projecthermes webhookhermes doctorhermes dumphermes debughermes backuphermes checkpointshermes importhermes logshermes prompt-sizehermes confighermes pairinghermes skillshermes bundleshermes curatorhermes moahermes fallbackhermes hookshermes memory
체크리스트
- 필요한 명령/설정만 골라 로컬에서 확인했다
- 시크릿·토큰 env 이름을 문서와 대조했다
- 버전 차이에 대비해 공식 원문도 북마크했다
다음 단계
기준일: 2026-07-26 — 공식 문서 동기화 코퍼스