Hermes Bot Screen docs detail gateway-hosted desktops, takeover flow and threat model
NousResearch · x · 2026-09-24
- Each Hermes bot gets its own Xfce desktop on a headless Linux gateway host (server/VM/Hermes Cloud), streamed live into Hermes Desktop; humans take over for logins, 2FA, CAPTCHAs or payments, then hand back—the bot keeps working after you close your laptop.
- Bots share the host OS user, files and network; screens are work surfaces, not security boundaries. Any process as that user can reach the RFB socket, X display and lease file, and Chromium's DevTools port is open to all local users—strong isolation needs separate hosts.
- Lease decisions cache up to 250 ms; viewer display tickets are single-use and expire in 30 seconds.
Related event: Hermes Desktop Lets You Watch AI Agents Work Live and Take Over Anytime(4 posts)→
More from coding & agent
- Garry Tan says capy makes his PR workflow 4x faster than raw Codex/Claude Code — garrytan · 2026-09-24
- Claude Code launches Projects: auto-split threads run as parallel cloud sessions, now with local support — ClaudeDevs · 2026-09-24
- Anthropic expands Claude Code Projects beta to more Pro and Max users via waitlist — ClaudeDevs · 2026-09-24
- Ex-Google engineer built a boss fight and spaceflight into his personal site — kieranklaassen · 2026-09-24
- Dan Grover: agent memory systems write and retrieve memories sparingly and arbitrarily — DanGrover · 2026-09-24
- Continuous Benchmarks: Treat Evals Like Software, Not Static Artifacts — kenbwork · 2026-09-24