Guide · Clients

Wire Hermes Agent to Munin.

Hermes Agent reads MCP servers from a YAML config block. Add Munin and the agent picks up every tool the calling key has scope for — KB hybrid search, CRM lookups, conversation drafts, CMS writes — on its next reload.

1 · Mint an API key

In the dashboard, go to Settings → API keys and create a key. Pick scopes that match what Hermes should be allowed to do — read-only KB for an answer-bot, full CRM write for a sales agent. The token starts with mn_admin_ and is shown once.

2 · Add Munin to the Hermes config

Hermes reads MCP servers from ~/.hermes/config.yaml under the mcp_servers block. Merge the Munin entry in alongside any servers you already have.

~/.hermes/config.yamlmerge with existing servers

mcp_servers:
  munin:
    url: "http://localhost:3001/mcp"
    headers:
      Authorization: "Bearer mn_admin_…"
    enabled: true
    timeout: 120
    connect_timeout: 60

If you would rather use OAuth instead of a static token, drop the headers block and set auth: oauth. Hermes runs the MCP SDK’s OAuth 2.1 PKCE flow on first connect and persists the token to ~/.hermes/mcp-tokens/munin.json for refresh.

3 · Reload without restarting

From an active Hermes session, run the slash command:

hermes

/reload-mcp

Hermes re-reads the config, reconnects to every server in the block, and refreshes the tool list in-place.

4 · Verify

Ask Hermes “What MCP tools do you have for Munin?”. It should list the tools matching the key’s scopes — admin keys see everything, narrower scopes see only their slice. If nothing shows up, common causes are a typo in the URL (the path is /mcp, not /v1/mcp), a revoked token, or a YAML indent error in ~/.hermes/config.yaml.

5 · Filter tools (optional)

If you only want a slice of Munin’s tool surface exposed to a given agent, use the tools.include / tools.exclude lists. A read-only research agent might want only KB and CRM lookups:

~/.hermes/config.yaml

mcp_servers:
  munin:
    url: "http://localhost:3001/mcp"
    headers:
      Authorization: "Bearer mn_admin_…"
    tools:
      include:
        - "kb_*"
        - "crm_get_contact"
        - "crm_search_contacts"

6 · Tighten scope

Mint a separate key per workstation or per agent so you can revoke one without disrupting the others. Pick the smallest scope set that lets the agent do its job — read-only KB is plenty for a Q&A assistant, full conv:write is only needed if Hermes should actually send replies on your behalf.