Aggregate read-only Hermes install, profile, toolkit, config, and API configuration metadata without live prompt-bearing calls.

Detect local Hermes CLI/home/profile/config/toolkit surfaces without mutation or live API/model calls.

Summarize toolkit agents, skills, eval harness paths, suites, helper scripts, and README metadata without reading secrets.

List local Hermes profiles and profile-local surface presence without exposing memory, skill, plugin, or config contents.

Read Hermes config shape and MCP server transport metadata while redacting secret values and reporting env presence only.

List Hermes toolkit/profile skill directories and linked-file inventories without reading profile memory, writing skills, or invoking evals.

Read one bounded SKILL.md or linked skill file after resolving the skill and linked file within allowed roots.

Write proposal-only skill patch artifacts after bounded skill-file readback; performs no skill writes or git operations.

Apply an exact-scope skill-file patch only when mutation policy, allow_skill_write, expected sha256, and confirmation nonce gates all pass; writes a private backup and receipt artifact.

Apply an exact-scope config-file patch only when mutation policy, allow_config_write, expected sha256, parse validation, and confirmation nonce gates all pass; writes a private backup and receipt artifact.

Run a preconfigured gateway restart command only at owner policy tier with external-side-effect, allow_gateway_restart, command-hash, and confirmation nonce gates; captures redacted stdout/stderr artifacts.

Run a preconfigured deploy repair command against a verified repair-plan artifact only at owner policy tier with git/config/gateway/external gates, command-hash, plan-hash, and confirmation nonce gates.

Validate a skill id/read boundary, then start a bounded dry/live-gated eval job without writing the skill file.

Read-only git/live-checkout guard that verifies branch, HEAD, cleanliness, and path containment without fetch, checkout, restart, or config writes.

Compare selected top-level config keys across two allowlisted YAML surfaces with redaction and presence-only handling for sensitive values.

Inspect configured gateway pid/lock/log path state without starting, stopping, restarting, or mutating services.

Tail a configured allowlisted log path with bounded reads and redaction; arbitrary log paths are denied.

Write a proposal-only deploy repair artifact based on deploy guard evidence; performs no git, service, or config mutation.

Gated Hermes API smoke that separates endpoint reachability, auth acceptance, model invocation, and assistant answer evidence, writing redacted artifacts.

List bundled Hermes API server documentation resources, section slugs, snapshot provenance, and planned wrapper mapping without network refresh.

Read one bundled Hermes API server docs section by slug or hermes-docs://api-server/* resource URI without network, API, model, or tool calls.

List bundled Hermes Kanban REST API documentation resources, section slugs, snapshot provenance, and planned wrapper mapping without network refresh.

Read one bundled Hermes Kanban API docs section by slug or hermes-docs://kanban-api/* resource URI without network, API, model, or tool calls.

Typed GET /v1/models wrapper that lists available models from the configured Hermes API server, writing redacted request/result/response receipts.

Typed GET /v1/capabilities wrapper that returns the configured Hermes API server capability surface, writing redacted receipts.

Typed GET /health wrapper that checks the configured Hermes API server liveness, writing redacted receipts.

Typed GET /health/detailed wrapper that checks the configured Hermes API server detailed health, writing redacted receipts.

Typed OpenAI Responses API POST /v1/responses wrapper. Requires api_call policy plus live/model/tool/external-side-effect gates, disables streaming in v0, supports previous_response_id / conversation chaining, and writes redacted request/result/response receipts.

Typed GET /v1/responses/{id} wrapper that retrieves a stored response from the configured Hermes API server, writing redacted receipts.

Typed DELETE /v1/responses/{id} wrapper that deletes a stored response from the configured Hermes API server, writing redacted receipts.

Typed GET /v1/skills wrapper that lists available skills from the configured Hermes API server, writing redacted receipts.

Typed GET /v1/toolsets wrapper that lists available toolsets from the configured Hermes API server, writing redacted receipts.

Typed GET /api/jobs wrapper that lists scheduled Hermes cron jobs from the configured Hermes API server, with optional limit, offset, and status filter, writing redacted receipts.

Typed GET /api/jobs/{job_id} wrapper that fetches one scheduled Hermes cron job's definition and last-run state, writing redacted receipts.

Typed POST /api/jobs wrapper that creates a scheduled Hermes cron job with prompt, schedule, skills, provider/model overrides, and delivery target, writing redacted receipts.

Typed PATCH /api/jobs/{job_id} wrapper that partially updates a scheduled Hermes cron job (prompt, schedule, skills, provider/model, delivery, enabled), writing redacted receipts.

Typed DELETE /api/jobs/{job_id} wrapper that removes a scheduled Hermes cron job and cancels any in-flight run, writing redacted receipts.

Typed POST /api/jobs/{job_id}/pause wrapper that suspends a scheduled Hermes cron job without deleting it, writing redacted receipts.

Typed POST /api/jobs/{job_id}/resume wrapper that resumes a previously paused scheduled Hermes cron job, writing redacted receipts.

Typed POST /api/jobs/{job_id}/run wrapper that triggers a scheduled Hermes cron job to run immediately, out of schedule, writing redacted receipts.

Typed GET /api/plugins/kanban/board wrapper that reads a Kanban board with optional board slug, tenant, archived filter, limit, and offset, writing redacted receipts.

Typed GET /api/plugins/kanban/boards wrapper that lists every board on disk with metadata, task counts, health, and the active board slug, writing redacted receipts.

Typed GET /api/plugins/kanban/assignees wrapper that lists available assignee profiles with optional board-scoped task counts, writing redacted receipts.

Typed GET /api/plugins/kanban/tasks/{id} wrapper that reads one Kanban task by id with optional board slug and tenant, writing redacted receipts.

Typed GET /api/plugins/kanban/workers/active wrapper that lists currently spawned Kanban workers with PID, profile, task id, and heartbeat metadata, writing redacted receipts.

Typed GET /api/plugins/kanban/runs/{run_id} wrapper that reads single-run detail such as task id, status, started/ended timestamps, exit code, and log path, writing redacted receipts.

Typed GET /api/plugins/kanban/runs/{run_id}/inspect wrapper that reads per-run captured output (stdout/stderr preview, redacted), writing redacted receipts. Process control remains unwrapped/denied.

Typed POST /api/plugins/kanban/tasks wrapper that creates a Kanban task with title, body, assignee, priority, parents, triage flag, idempotency key, and workspace options, writing redacted receipts.

Typed PATCH /api/plugins/kanban/tasks/{id} wrapper that updates status, assignee, priority, title, body, result, or completion summary for one Kanban task, writing redacted receipts.

Typed POST /api/plugins/kanban/tasks/bulk wrapper that applies the same status, assignee, priority, archive, or completion patch to every id in the list, reporting per-id outcomes without aborting siblings, writing redacted receipts.

Typed POST /api/plugins/kanban/tasks/{id}/comments wrapper that appends a comment to a Kanban task, using JSON body for the comment text and optional board query param, writing redacted receipts.

Typed POST /api/plugins/kanban/links wrapper that adds a dependency (parent_id -> child_id), using JSON body for the relationship and optional board query param, writing redacted receipts.

Typed DELETE /api/plugins/kanban/links wrapper that removes a dependency identified by parent_id and child_id query params, with optional board query param, writing redacted receipts.

Typed POST /api/plugins/kanban/tasks/{id}/specify wrapper that runs the triage specifier auxiliary LLM to flesh out a triage task and promote it to todo, writing redacted receipts.

Typed POST /api/plugins/kanban/tasks/{id}/decompose wrapper that runs the kanban decomposer auxiliary LLM to produce a task graph, create children, link the root, and flip triage to todo, writing redacted receipts.

Typed GET /api/plugins/kanban/profiles wrapper that lists installed Hermes profiles with descriptions, writing redacted receipts.

Typed PATCH /api/plugins/kanban/profiles/{name} wrapper that sets or clears a profile's user-authored description, writing redacted receipts.

Typed GET /api/plugins/kanban/orchestration wrapper that reads kanban orchestration settings and resolved effective values, writing redacted receipts.

Typed PUT /api/plugins/kanban/orchestration wrapper that updates orchestrator_profile, default_assignee, or auto_decompose in config.yaml, writing redacted receipts.

Typed POST /api/plugins/kanban/dispatch wrapper that nudges the kanban dispatcher to skip the 60 s wait, with optional max, dry_run, board, and tenant query params, writing redacted receipts.

Typed GET /api/plugins/kanban/config wrapper that reads dashboard.kanban preferences from config.yaml, writing redacted receipts.

Typed POST /v1/runs wrapper that starts a Hermes agent run from a prompt, writing redacted request/result/response receipts. Requires api_call tier with live, model, agent-tool, and external-side-effect gates.

Typed GET /v1/runs/{run_id} wrapper that reads a Hermes run status, writing redacted receipts. Requires api_call tier with live and external-side-effect gates.

Typed GET /v1/runs/{run_id}/events wrapper that returns non-streaming event metadata for a Hermes run, writing redacted receipts. This is not a streaming SSE/WebSocket proxy.

Typed POST /v1/runs/{run_id}/stop wrapper that requests a Hermes run stop, writing redacted receipts. Requires api_call tier with live, agent-tool, and external-side-effect gates.

Typed POST /v1/runs/{run_id}/approval wrapper that submits an approval decision for a paused Hermes run, writing redacted receipts. Requires api_call tier with live, agent-tool, and external-side-effect gates.

List configured Hermes eval suite files, dry-run markers, case counts, and harness path state without executing the harness.

Run one bounded Hermes eval suite synchronously through the configured eval harness. Dry/structural suites run without live-model opt-in; non-dry/live eval requires live_eval=true, HERMES_TOOLKIT_MCP_ALLOW_LIVE_EVAL=1, and the live/model/tool/external policy gates. Writes request/result/summary/stdout/stderr/report artifacts.

Start one bounded Hermes eval suite as an in-process async job with the same dry/live gates as hermes_eval_run. Poll with hermes_job_status and cancel with hermes_job_cancel.

Poll a process-local Hermes Toolkit MCP async eval job by job_id/run_id and return current artifact/result status.

Best-effort cancel of a process-local Hermes Toolkit MCP async eval job by job_id/run_id.

Typed OpenAI-compatible POST /v1/chat/completions wrapper for mocked/local Hermes API endpoints. Requires api_call policy plus live/model/tool/external-side-effect gates, disables streaming in v0, and writes redacted request/result/response receipts.

Last-resort prompt bridge to a configured Hermes Agent backend after typed tools do not fit. Requires why_no_typed_tool_fits, docs_resource_consulted, typed_wrapper_checked, risk_acknowledgement, and expected_evidence, writes private artifacts, supports async jobs, and warns when a typed tool would be better.