2026-08-17 — Integration secrets load at Hermes startup
- Agent Secrets tab and MCP
upsert_secretremain write-only. Values are never shown again after save. - Integration keys are stored in Google Secret Manager. Hermes loads them at startup as environment variables so tools can use them.
- Follows the Hermes-recommended secret-source path: provider keys are not stored in
.env. See Hermes Secrets. - Running agents still restart after save so Hermes picks up a new or replaced key.
- Operator guide: Secrets.
2026-08-16 — Write-only Secrets tab
- Agent Secrets tab is the write-only path for integration API keys (add / replace / delete). Values are never shown again after save.
- Config rejects secret-like keys; use Secrets (or MCP
upsert_secret) instead. - Operator guide: Secrets.
2026-08-07 — Single live data plane
- Agent data plane is
us-central1only (Iowa). Other GCP regions remain listed as Coming soon until demand justifies idle multi-region cost. - See Regions for the current catalog.
2026-08-01 — MCP server + agent exec
- Published
@ryanseaotter/mcp-serverfor Claude, Cursor, and Codex (stdio vianpx). - Added control-plane, runtime chat (
talk_to_hermes_agent), onboarding, and tiered Hermes CLI tools. - New API:
POST /api/v1/agents/{id}/exec— argv-onlyhermesin the agent pod (allowlisted, audited; no--yolo, no shell).
2026-07-31 — Public developer docs (v1.0.0)
- Published branded docs at docs.seaotter.dev from the live OpenAPI schema.
- Control-plane API keys (
so_…) authenticate as Bearer tokens alongside Clerk JWTs. - OpenAPI now documents
config.provisioning_stages, typed metrics/logs responses, and standard error responses. - Internal worker and webhook routes are excluded from the public schema.
Earlier
The/api/v1 agents, billing, users/keys, organizations, and audit surfaces described in the reference were already live in production prior to this docs launch. Treat this entry as the start of the customer-facing changelog.
