Hermes Agents

Manage hosted Hermes agents — isolated NousResearch Hermes containers on Divinci infrastructure — without leaving your terminal. Every command supports the global --json flag for scripting and --workspace <id> to override the active workspace.

Create

# Platform model (Divinci-paid, no key needed) — the default
divinci hermes create --title "Support Bot"

# Pick a model explicitly
divinci hermes create --title "Llama Bot" \
  --model "cloudflare/@cf/meta/llama-3.3-70b-instruct-fp8-fast"

# Bring your own key
divinci hermes create --title "Claude Agent" \
  --model "anthropic/claude-sonnet-4-5" \
  --provider anthropic --provider-api-key "$ANTHROPIC_API_KEY"

# Ground every turn in a Release's knowledge base (RAG)
divinci hermes create --title "Docs Agent" --release <releaseId>

Also accepts --system-prompt (persona) and --description.

List and inspect

divinci hermes list

divinci hermes get <agentId>
# → model, status (provisioned | active | stopped), linked releaseId,
#   BYOK provider + hasProviderApiKey, and the hsk- proxy key

Update

Partial update — only the flags you pass are touched:

divinci hermes update <agentId> --model "vertex_ai/gemini-2.5-pro"
divinci hermes update <agentId> --system-prompt "New persona"
divinci hermes update <agentId> --disable        # reject chat with 403
divinci hermes update <agentId> --enable

# RAG grounding
divinci hermes update <agentId> --release <releaseId>
divinci hermes update <agentId> --clear-release

# BYOK key rotation (encrypted server-side, never echoed back)
divinci hermes update <agentId> --provider anthropic --provider-api-key "$NEW_KEY"
divinci hermes update <agentId> --clear-provider-key   # revert to platform billing

Chat

divinci hermes chat <agentId> "Summarize our refund policy."

Prints the agent’s reply. Each successful turn is metered to the workspace wallet.

Cold starts are handled for you

A sleeping container cold-boots on the first turn (typically 30–60s). If the API returns 503 agent_warming, the CLI waits ~30 seconds and retries once automatically — you’ll see an “Agent is cold-starting” spinner.

Proxy key

divinci hermes key <agentId>            # print the hsk- key + connection hint
divinci hermes key <agentId> --rotate   # mint a new key, revoking the old one

Drop the key into any OpenAI-compatible client:

export OPENAI_BASE_URL="https://api.divinci.app/api/v1/hermes-proxy"
export OPENAI_API_KEY="hsk-your-agent-proxy-key"

Delete

divinci hermes delete <agentId>   # stops the container and removes the record

Environments behind Cloudflare Access

If your API host is fronted by Cloudflare Access (e.g. a staging environment), give the CLI the service-token headers via DIVINCI_EXTRA_HEADERS:

export DIVINCI_EXTRA_HEADERS='{"CF-Access-Client-Id":"…","CF-Access-Client-Secret":"…"}'

The headers are sent on every request in addition to your normal Divinci auth. Malformed JSON is a hard error so a broken value can’t silently turn into an opaque edge 403.