Ranked #2 AI Agents — Software That Works While You Sleep
Nous Research

Hermes Agent

An open-source agent from Nous Research that learns reusable skills, verifies coding goals, and works across terminals, desktop, web, and messaging. The v0.19 Quicksilver release makes that ambitious system noticeably more practical with faster startup, observable subagents, durable result delivery, and safer secret handling.

Updated July 23, 2026 Open SourceSelf-ImprovingSelf-Hosted
8.2out of 10
Official Website
Best for

An open-source agent from Nous Research that learns reusable skills, verifies coding goals, and works across terminals, desktop, web, and messaging. The v0.19 Quicksilver release makes that ambitious system noticeably more practical with faster startup, observable subagents, durable result delivery, and safer secret handling.

Why It Wins

Closed learning loop with `/learn` and inspectable memory; verifiable `/goal` completion contracts; selectable Mixture-of-Agents councils; 60+ built-in tools; live and durable background subagents; Bitwarden and 1Password integration; Nous-reported cold-start dispatch improvement from about 4.3 to 0.9 seconds.

Watch out

Hermes still gives an AI unusually broad access to commands, files, browsers, and messaging accounts. Smart approvals reduce interruptions but rely on another model's judgment, not a security boundary; MoA and subagent fan-out can also multiply usage costs.

01

What It Actually Is

Most AI agents begin every Monday with amnesia. They may remember a chat, but they do not necessarily turn last week’s hard-won procedure into something they can repeat reliably. Hermes Agent is built around a more interesting promise: when a workflow succeeds, the agent can preserve the lesson as a readable skill, recall relevant experience later, and expose that growing memory for inspection. It is less like hiring a brilliant temporary worker and more like keeping a workshop notebook that becomes better organized after every project.

That learning loop remains Hermes’s defining advantage. /learn can convert a workflow, directory, or source into reusable procedural knowledge; /journey lets you inspect how memories connect; and the desktop application turns that history into an editable graph. For coding work, /goal adds a second discipline: the agent can be required to produce evidence, such as passing project tests, before it declares victory. This does not make every answer correct. It does make the definition of “done” more concrete than an eloquent final message.

Version 0.19, the Quicksilver release, does not replace that idea. It makes the machinery around it easier to live with. Nous Research reports that cold first-turn submit-to-dispatch time fell from about 4.3 seconds to 0.9 seconds. The TUI now renders streamed Markdown incrementally, reasoning can appear while the model works, and the desktop app received a large performance pass for long transcripts, large diffs, and session switching. These are first-party engineering measurements rather than an independent contest, but they address a real weakness: an autonomous assistant feels much less intelligent when its interface pauses before every useful action.

The more consequential improvement is durability. Delegated subagents now write live transcripts that can be followed while they work, replacing the uncomfortable experience of sending several assistants into a locked room and hoping they return. Background results are recorded so a restart does not automatically erase them. Gateway responses also pass through a delivery-obligation ledger: if Hermes generated an answer but crashed before a messaging platform confirmed delivery, it can send the result after recovery. That is not a glamorous benchmark win; it is the plumbing required for scheduled and unattended work.

Security also moved in a sensible direction. Hermes can resolve secrets from Bitwarden and 1Password, reducing the need for a sprawling plaintext environment file. Explicit deny patterns can block selected commands even when other approval checks are relaxed. Credential scoping, output redaction, shared file-access guards, and request-size limits close additional gaps. However, the new default “smart approval” mode deserves careful wording: a second language model decides whether a flagged command seems safe and may approve it automatically. That can reduce approval fatigue, but one model judging another model is not the same thing as a sandbox or an operating-system permission boundary.

Accessibility is better than our previous review suggested. Hermes still runs on infrastructure you control, but “bring every API key and edit everything by hand” is no longer the only route. Desktop installers reduce setup friction, and Nous Portal offers one OAuth login for a large model catalog plus managed web search, image generation, speech, browser automation, and optional cloud sandbox services. Power users can still connect direct providers, local models, or their own gateway. In other words, Portal manages many dependencies and bills; it does not magically remove the need for a machine or cloud environment where the agent itself runs.

The honest conclusion is measured. Quicksilver improves responsiveness, observability, secret management, and failure recovery, all of which matter to a real agent leaderboard. It does not provide independent evidence that Hermes now solves more tasks correctly than OpenClaw or Claude Cowork. We therefore keep Hermes at 8.2 and second place rather than converting a very large changelog into automatic points. Choose it when inspectable self-improvement, verifiable coding goals, broad model choice, and sophisticated delegation outweigh the operational burden. If you want an appliance with one vendor responsible for every permission and failure, Hermes still asks more of you than that.

02

Strengths and honest limitations

Key Strengths

  • Learning that leaves something useful behind: Hermes can turn successful workflows into readable, reusable skills and retain project knowledge across sessions. /journey and the desktop memory graph make that learning inspectable, while /goal can require tests or other evidence before a coding task is treated as complete.
  • Quicksilver makes the agent feel substantially quicker: Nous reports that v0.19 reduced cold first-turn submit-to-dispatch time from roughly 4.3 seconds to 0.9 seconds. Incremental TUI rendering, per-token response painting, virtualized diffs, and a broad desktop performance pass also target the delays users actually notice.
  • Parallel work is now observable and harder to lose: Background subagents expose live transcript files, so you can inspect their tool calls while they work. Their completion results survive process restarts, and a separate delivery ledger can resend a finished gateway response after a crash instead of silently losing it.
  • Broad model choice without abandoning advanced orchestration: Hermes works with major hosted APIs, local runtimes, Nous Portal, and OpenAI-compatible endpoints. MoA councils remain a distinctive option, now with per-model and per-role reasoning controls so expensive advisers and the final synthesizer do not all need the same thinking budget.
  • Secret handling and command controls improved meaningfully: Bitwarden and 1Password can supply credentials without copying every key into a plaintext .env. User-defined deny rules remain active even in permissive modes, while credential scoping, redaction, file-read guards, and webhook limits reduce several practical attack surfaces.
  • A wide operational surface: More than 60 built-in tools cover files, terminals, web research, browser automation, media, scheduling, and delegation. One gateway can connect to more than 20 messaging platforms, and profile-based routing can isolate work and personal configurations, memory, and secrets behind the same bot.
  • Onboarding is easier without closing the system: Desktop installers and hermes setup --portal provide a shorter path than assembling every model and tool key manually. Nous Portal can bundle model access and managed web, image, speech, browser, and sandbox services, while self-hosting and bring-your-own-provider configurations remain available.

Honest Limitations

  • Smart approval is convenience, not containment: In the default smart mode, an auxiliary model may auto-approve a command it considers low risk. Hard deny rules are useful, but anyone granting Hermes shell, browser, or inbox access should still use isolation, narrow permissions, backups, and human review for consequential work.
  • The strongest performance claims are maintainer-reported: The 80% startup improvement and 14× markdown-splitting figure come from Nous Research’s own release engineering. They are credible implementation measurements, but v0.19 includes no independent benchmark showing that Hermes completes real-world agent tasks more accurately than its rivals.
  • Power-user complexity has not disappeared: A desktop installer and Portal login simplify the first hour, yet serious deployments still involve providers, profiles, gateways, permissions, logs, updates, and sometimes remote infrastructure. The enormous release cadence is impressive, but it also means documentation and configuration can move quickly.
  • Parallel intelligence can become parallel spending: MoA councils, auxiliary reviewers, compression models, and background subagents may generate several model calls for one request. Nous Portal simplifies billing rather than eliminating it, so users should set budgets, choose cheaper roles where appropriate, and inspect usage reports.
03

The Verdict

Hermes remains our most intellectually ambitious self-improving agent, and v0.19 improves the less glamorous engineering that determines whether ambition survives daily use: latency, visibility, delivery durability, secrets, and routing. Those changes justify a fresher and more favorable review, but not a score or rank increase without independent task testing. It stays at 8.2 and #2 in this category: a compelling choice for technical users who want inspectable learning and deep orchestration, provided they are willing to operate it carefully.

04

Frequently Asked Questions