Integration

ShieldCortex for Hermes

The same defence pipeline that protects OpenClaw agents, now native to the Hermes Python runtime — a pre_tool_call gate on every tool the agent runs.

Install in Two Steps

The plugin is stdlib-only Python — no extra dependencies. It talks to a local ShieldCortex API server over REST.

1
cp -r plugins/hermes/shieldcortex ~/.hermes/plugins/shieldcortex

Drop the plugin into your Hermes plugins directory (pull it from the ShieldCortex repo)

2
hermes plugins enable shieldcortex

Enable it — advisory-first by default; set SHIELDCORTEX_ENFORCE=1 to actively block

Requires a running ShieldCortex API server — http://127.0.0.1:3001 by default (override with SHIELDCORTEX_API_URL).

How the gate works

Advisory-first

Enforcement is off by default — the gate logs what it would block so you can watch before turning it on. Set SHIELDCORTEX_ENFORCE=1 to block.

Fail-open

If the ShieldCortex API is unreachable, the gate never blocks. A down scanner must not wedge the agent — every fail-open is logged.

Isolated

Installs under ~/.hermes/plugins/, touching nothing else on the host. Coexists cleanly with an OpenClaw ShieldCortex on the same machine — separate state dirs, no shared-database contention.

Also running OpenClaw? See the OpenClaw integration.