paarths-collab/hstack

Validate a secret-free hstack blueprint and compose the approved Hermes skills in safe dependency order. Use when a user has exported an Agent Builder JSON plan or asks to install a SaaS Founder blueprint onto Hermes.

Compose a safe, reviewable SaaS Founder agent blueprint from optional hstack capabilities, then hand it to the validated Hermes-only installer.

Back up a self-hosted Hermes v0.22.5 agent over SSH with the native hermes backup (full zip or quick state snapshot), verify the archive, and restore it only behind an explicit gate. Use before risky changes; schedule recurring runs with /hermes-cron. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Create, verify and manage scheduled jobs on a self-hosted Hermes v0.22.5 over SSH: agent prompts, no-agent scripts, and opt-in native backup and session-prune jobs. Use when the user wants something to run on a schedule.

Deploy a self-hosted Hermes Agent v0.22.5 with Telegram end-to-end over SSH, covering install, model, platform, skills, memory, personality, home channel, native gateway service and verification. Idempotent, dry-run-first and rollback-safe, and it works from any AI agent (Claude Code, Codex, Cursor, Gemini CLI, or Hermes itself).

Diagnose and repair a broken self-hosted Hermes v0.22.5 over SSH, starting from hermes doctor: gateway down or wedged, bot silent, model or tool errors, PATH, Docker UID, memory growth. Repairs are consent-gated, snapshot-backed and reload only through the native gateway lifecycle. Use when Hermes is broken. Works from any AI agent (Hermes, Claude Code, Codex, Cursor, Gemini CLI).

Set or verify the home channel (where cron output and proactive notices are delivered) of a self-hosted Hermes v0.22.5 over SSH, proving it with a native hermes send probe. Use after a messaging platform is wired.

Install Hermes Agent v0.22.5 on a fresh POSIX host with its official pinned source installer and managed runtime, without ambient pip or deleting existing user state.

Wire several apps into a self-hosted Hermes v0.22.5 in one sitting. Presents the integration catalog, validates the picks, refuses specialists that are still legacy procedures, runs each /integration-NAME skill one at a time with the credentials collected up front, then verifies every MCP server with mcp test and the gateway with gateway ensure. Use when the user wants to connect more than one app. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Add any MCP server to a self-hosted Hermes v0.22.5 over SSH. Uses the native catalog (mcp install) when the server is in it, otherwise probes the endpoint from the VPS before writing anything, stores the credential in .env over ssh stdin, registers it with mcp add or config set, and verifies with mcp test. Use when no integration-specific skill exists. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Inspect, switch off or prepare Hermes external memory with the native memory and plugin commands on Hermes 0.22.5, keeping provider dependencies under Hermes PM and never putting a provider key through SSH argv.

Configure the Hermes model and provider with an API key over SSH on Hermes v0.22.5, reload the gateway natively, and prove it with an exact-reply inference test that rolls back on failure. Use when setting up or changing which LLM a remote, self-hosted Hermes uses. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Reload or restart the Hermes gateway on a remote VPS over SSH with the native v0.22.5 lifecycle: gateway restart --detach, then gateway ensure --json until it reports a ready gateway with a new instance. Use after a config or .env change, or when the gateway is stuck or down. Works from any AI agent (Hermes, Claude Code, Codex, Cursor, Gemini CLI).

Install a pack of third-party Hermes skills on a self-hosted Hermes v0.22.5 over SSH: resolve exact identifiers with skills search --json, skip what is installed, install with --yes after an explicit consent step, verify and undo. Use when adding capabilities to the agent.

Give a self-hosted Hermes v0.22.5 agent a name and personality by writing ~/.hermes/SOUL.md directly over SSH. Backs up the previous file, needs no gateway reload (new sessions read it from disk), and checks the result with a one-shot native call. Use when setting or updating the agent's identity. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Read-only dashboard for a self-hosted Hermes v0.22.5 over SSH: version, hermes status, gateway status, memory provider, cron jobs, sessions, pairing and recent logs, shown as the native commands print them. Use when the user asks if their agent is ok. It starts, stops and writes nothing. Works from any AI agent (Hermes, Claude Code, Codex, Cursor, Gemini CLI).

Inspect and apply Hermes's native stable-channel updater on an existing Hermes 0.22.5 source installation, with a verified native backup first, and report version, runtime and delivery honestly.

Connect airtable to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect asana to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect auth0 to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect aws to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect azure to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect bitbucket to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect brave-search to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect brevo to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect calendly to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect clerk to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect clickup to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect cloudflare to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect datadog to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect digitalocean to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect e2b to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect elevenlabs to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect exa to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect firecrawl to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect freshdesk to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect gcp to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect GitHub (repos, issues, PRs, Actions) to a self-hosted Hermes Agent over SSH with a personal access token, through Hermes' native MCP client. Default is GitHub's hosted MCP over HTTP with a bearer header; a stdio npm server is the alternative. Idempotent and rollback-safe. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Connect gitlab to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect google-workspace to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Connect hetzner to a host-installed Hermes assistant over SSH using native supported interfaces, private credentials and verified rollback.

Set up hubspot on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up intercom on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up jira on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up linear on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up mailchimp on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up mem0 on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up microsoft-365 on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up monday on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up neon on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up netlify on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Connect Notion (docs, CRM-lite, memory, SOPs) to a self-hosted Hermes Agent over SSH with the official Notion MCP server and a static internal integration token. The hosted OAuth catalog entry is documented as the interactive alternative. Idempotent and rollback-safe. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Connect an Obsidian vault to a self-hosted Hermes agent over SSH. Obsidian is a local desktop app with no first-party API or MCP, so this skill offers two paths. Path A points Hermes' bundled obsidian skill at a vault directory on the VPS, which is the default for headless agents. Path C registers the community mcp-obsidian server against the Local REST API plugin over a private tunnel. Idempotent and rollback-safe. Works from Claude Code, Codex, Cursor, Hermes itself, and any AI agent.

Set up openai-tools on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up paypal on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up pinecone on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up pipedrive on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up postgres on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up posthog on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up postmark on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up qdrant on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up r2 on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up railway on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up razorpay on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up redis on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Set up render on a host-installed Hermes 0.22.5 default profile over SSH, with read-only credential preflight, native integration commands and verified recovery.

Configure Replicate for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Salesforce for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Segment for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Sendbird for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure SendGrid for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Sentry for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Shopify for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Stripe for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Supabase for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Supermemory for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Tally for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Tavily for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Trello for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Twilio for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Typeform for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Vercel for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Webflow for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure WooCommerce for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure WordPress for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Zendesk for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Zoho CRM for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Configure Zoom for Hermes v0.22.5 over SSH using native connectors or an installed local REST skill, with credential preflight, private storage and verified rollback.

Wire a remote Hermes Agent v0.22.5 to Discord (bot token, Message Content intent, numeric user-ID allowlist) over SSH. Checks the token and intents against Discord from the VPS before any write, refuses open access, reloads the gateway natively, verifies the adapter's own connected log line and rolls back to the previous values on any failure.

Wire a remote Hermes 0.22.5 agent to Google Chat over SSH using a Cloud Pub/Sub pull subscription: service-account key upload, an email allowlist, a live Google token plus subscription check before any write, rollback, and log verification. A human must create the GCP resources and the Chat app.

Wire a remote Hermes Agent v0.22.5 to a Mattermost server (server URL plus bot or personal-access token) over SSH. Checks the token against the server's /api/v4/users/me from the VPS before any write, refuses open access, reloads the gateway natively, verifies the adapter's own connected log line and rolls back to the previous values on any failure.

Wire a remote Hermes Agent 0.22.5 to Signal through a signal-cli HTTP daemon over SSH. Hard allowlist gate, a read-only daemon health check before any write, snapshot and rollback, native gateway reload, log-verified connect. Linking the Signal account (QR) and installing the daemon stay human steps.

Wire a remote Hermes Agent v0.22.5 to Slack through Socket Mode (bot token xoxb- plus app-level token xapp-, no public endpoint) over SSH. Checks both tokens against Slack from the VPS before any write, refuses open access, reloads the gateway natively, verifies the adapter's own connected log line and rolls back to the previous values on any failure.

Wire a remote Hermes 0.22.5 agent to Microsoft Teams over SSH: Azure AD bot credentials plus an AAD object-ID allowlist, a live Microsoft token preflight before any write, rollback, and log/health verification. A human must provide the public HTTPS endpoint, the bot registration and the first Teams message.

Wire a remote Hermes Agent v0.22.5 to Telegram (BotFather token + numeric user-ID allowlist) over SSH. Long polling, pure env vars, no QR or OAuth. Enforces a hard allowlist gate and a live Telegram getMe check before anything is written, reloads the gateway once natively, and rolls back to the previous values on any failure. Works from Claude Code, Codex, Cursor, Hermes itself, and Gemini CLI.

Wire a remote Hermes Agent 0.22.5 to WhatsApp through the bundled Baileys/Node bridge (QR pairing, no Meta developer account) over SSH. Hard allowlist gate, strict allowlist DM policy, snapshot and rollback, native gateway reload, log and bridge-health verification. The QR pairing is a human step; the Meta Cloud API integration is a different path this skill does not cover.

Set up key-based SSH access from this machine to the user's VPS so every other hstack skill can run unattended. Use when any skill aborts with "SSH to $VPS_USER@$VPS_IP failed", or before the first deploy. Handles the container-vs-host trap, the merged-key corruption, and the fact that an AI agent cannot type an interactive password.