Skip to main content

2026-08-17 — Integration secrets load at Hermes startup

  • Agent Secrets tab and MCP upsert_secret remain write-only. Values are never shown again after save.
  • Integration keys are stored in Google Secret Manager. Hermes loads them at startup as environment variables so tools can use them.
  • Follows the Hermes-recommended secret-source path: provider keys are not stored in .env. See Hermes Secrets.
  • Running agents still restart after save so Hermes picks up a new or replaced key.
  • Operator guide: Secrets.

2026-08-16 — Write-only Secrets tab

  • Agent Secrets tab is the write-only path for integration API keys (add / replace / delete). Values are never shown again after save.
  • Config rejects secret-like keys; use Secrets (or MCP upsert_secret) instead.
  • Operator guide: Secrets.

2026-08-07 — Single live data plane

  • Agent data plane is us-central1 only (Iowa). Other GCP regions remain listed as Coming soon until demand justifies idle multi-region cost.
  • See Regions for the current catalog.

2026-08-01 — MCP server + agent exec

  • Published @ryanseaotter/mcp-server for Claude, Cursor, and Codex (stdio via npx).
  • Added control-plane, runtime chat (talk_to_hermes_agent), onboarding, and tiered Hermes CLI tools.
  • New API: POST /api/v1/agents/{id}/exec — argv-only hermes in the agent pod (allowlisted, audited; no --yolo, no shell).

2026-07-31 — Public developer docs (v1.0.0)

  • Published branded docs at docs.seaotter.dev from the live OpenAPI schema.
  • Control-plane API keys (so_…) authenticate as Bearer tokens alongside Clerk JWTs.
  • OpenAPI now documents config.provisioning_stages, typed metrics/logs responses, and standard error responses.
  • Internal worker and webhook routes are excluded from the public schema.

Earlier

The /api/v1 agents, billing, users/keys, organizations, and audit surfaces described in the reference were already live in production prior to this docs launch. Treat this entry as the start of the customer-facing changelog.