Hermes - Superserve

Hermes is NousResearch’s open-source personal AI agent. Run it in a Superserve sandbox so its tools and shell commands stay isolated from your machine.

Via the console

On the Secrets page, create a secret for your model provider (e.g. Anthropic) and paste your API key — you only do this once, and the key never enters the sandbox.
Go to console.superserve.ai and click Create sandbox.
Pick the superserve/hermes template (Hermes and tmux preinstalled).
Under Advanced Options → Secrets, bind that secret to your provider’s key env var (e.g. ANTHROPIC_API_KEY).
Create the sandbox, open its Terminal, and run hermes.

Via the SDK

npm install @superserve/sdk
export SUPERSERVE_API_KEY=ss_live_...

import { Sandbox, Secret } from "@superserve/sdk"

// One-time: store your key as a secret. It never enters the sandbox.
await Secret.create({
  name: "anthropic-key",
  value: "sk-ant-...",
  provider: "anthropic",
})

const sandbox = await Sandbox.create({
  name: "hermes",
  fromTemplate: "superserve/hermes",
  secrets: { ANTHROPIC_API_KEY: "anthropic-key" },
})

from superserve import Sandbox, Secret

# One-time: store your key as a secret. It never enters the sandbox.
Secret.create(name="anthropic-key", value="sk-ant-...", provider="anthropic")

sandbox = Sandbox.create(
    name="hermes",
    from_template="superserve/hermes",
    secrets={"ANTHROPIC_API_KEY": "anthropic-key"},
)

Hermes reads ANTHROPIC_API_KEY as usual, but its value is a stand-in token — the real key is attached only on requests to the provider, never exposed to the agent. Open the sandbox in the console, launch the terminal, and run hermes.

Keep it running

Start Hermes inside tmux so it survives closing the terminal or browser tab:

tmux new -d -s hermes 'hermes gateway'

Press Ctrl+b then d to detach. Reattach later with:

tmux attach -t hermes

Persist sessions

await sandbox.pause()
await sandbox.resume()