{ "data": { "a": { "slug": "cowagent", "name": "CowAgent", "vendor": "zhayujie", "vendorUrl": "https://cowagent.ai", "kind": "harness", "category": "personal-assistants", "summary": "CowAgent is an open-source AI assistant that its owner runs on a computer or server. It plans tasks, runs tools and skills, keeps long-term memory in local files and answers on a web console and messaging apps.", "url": "https://www.anchorterminal.com/tools/cowagent", "markdownUrl": "https://www.anchorterminal.com/tools/cowagent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cowagent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cowagent.json", "repo": "https://github.com/zhayujie/CowAgent", "license": "MIT", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "zhayujie/chatgpt-on-wechat" } ], "auth": "mixed", "authNotes": "No account. The web console listens on 127.0.0.1 with no password by default, and `web_password` adds a login whose session lasts 30 days. `external_api_token` is one Bearer token for the OpenAI-compatible endpoint, which stays off while the token is empty (https://docs.cowagent.ai/channels/web). Messaging channels use each platform's bot token or app secret in `config.json`. Model keys go in `config.json` or environment variables.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy to run it. The owner pays the configured model provider, or nothing with a local model behind an OpenAI-compatible endpoint. The README names LinkAI as a seller of managed hosting, and link-ai.tech did not answer on 12 October 2026, so its prices were not read.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 47400, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.cowagent.ai/intro/index", "llmsTxt": "https://docs.cowagent.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "agent.mcp-client", "assistant.accounts" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "docker", "python", "openai-compatible" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 58.5, "grade": "C", "agentReady": false, "rank": 591, "ranked": true, "rankOf": 986, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 83, "payments": 60, "reliability": 84, "schema": 67, "security": 43, "transparency": 45 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -5, "negativeNotes": [ "2026-07-31. Issue #2998 reports that a member of a Feishu group asked the bot for local files and it sent the owner's documents into the group. This is the reporter's account and we did not reproduce it. We confirmed in the master source on 12 October 2026 that group channels accept every group, that full-access is the default and that the proposed sender gating is absent. Open and unfixed, -3. https://github.com/zhayujie/CowAgent/issues/2998", "2026-07-29. Version 2.1.5 fixed a chain in which injected content led the agent to rewrite the MCP config, run arbitrary commands and take keys, and fixed the `edit` tool reaching `~/.cow/.env`. Both are described in the release notes with no advisory. Fixed and documented, -2. https://docs.cowagent.ai/releases/v2.1.5" ], "verdict": "MIT software with seven releases in 90 days, memory kept as plain files in the owner's workspace and three per-session permission modes. Source and Docker installs default to full-access, no action asks for approval, and an open report of 31 July 2026 says group members could reach the owner's files through the bot.", "bestFor": "One technical owner who wants an assistant on WeChat, Feishu, DingTalk, Telegram, Slack or Discord with memory in local files and a choice of Chinese and Western model providers.", "strengths": [ "Memory is plain Markdown under `~/cow` (`MEMORY.md`, `memory/YYYY-MM-DD.md`), readable and removable by the owner", "Three permission modes per session (read-only, workspace-write, full-access), with a global default in `agent_permission_mode`", "The web console binds to 127.0.0.1 by default, and the cloud client loads only when `use_linkai` and a deployment id are both set", "Seven tagged releases between 20 July and 30 September 2026, each with dated notes in the docs", "Tests run on Python 3.11 and 3.13 for every push to master, and the 15 newest master runs we saw passed on 12 October 2026" ], "weaknesses": [ "Source and Docker installs default to full-access, and no mode asks the owner before a shell command, a file send or an MCP call", "The permission checks read arguments and are not an OS sandbox, as the source says. The `bash` blocklist covers only root deletion, disk wiping and power commands", "Issue #2998, open since 31 July 2026, reports the bot sending the owner's local documents into a Feishu group. Its fix is not on master", "No setting limits which Telegram, Slack or Discord users may message the bot, and those channels reply in every group", "No SECURITY.md, security.txt, privacy policy or terms. Model keys sit in `config.json` and MCP keys in `mcp.json` as plain text" ], "agentNotes": [ "Set `agent_permission_mode` to `workspace-write` or `read-only` before connecting any channel. Source and Docker installs default to `full-access`", "Keep the bot out of group chats that include other people. Any member who mentions it reaches the same tools as the owner", "Set `web_password` before changing `web_host` to `0.0.0.0`. The password is empty by default", "Set `external_api_token` to enable `POST /v1/chat/completions`, and send `conversation_id` to keep one session. The `model` field does not select a model", "Run it in a container for a hard boundary. The docs and the source both say the permission modes are not isolation" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.5 } ], "editorialScores": { "ergonomics": 59, "maintenance": 83, "payments": 60, "reliability": 84, "schema": 67, "security": 43, "transparency": 62 }, "provenanceScore": 27 }, "connect": { "install": "bash \u003c(curl -fsSL https://cdn.link-ai.tech/code/cow/run.sh) # or: curl -O https://cdn.link-ai.tech/code/cow/docker-compose.yml \u0026\u0026 docker compose up -d", "http": "curl http://localhost:9899/v1/chat/completions -H \"Authorization: Bearer $TOKEN\" -H \"Content-Type: application/json\" -d '{\"model\":\"cowagent\",\"conversation_id\":\"example-conversation\",\"messages\":[{\"role\":\"user\",\"content\":\"Hello\"}]}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/cowagent" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "cowagent.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://docs.cowagent.ai/releases/overview", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "No company or legal entity is named for CowAgent. The licence names zhayujie, and the cowagent.ai footer reads Copyright 2026 CowAgent.", "The README lists sales@simple-future.tech and LinkAI (link-ai.tech) for enterprise services and managed hosting. link-ai.tech did not answer our robots.txt request on 12 October 2026, so none of its pages were read.", "cowagent.ai links no terms and no privacy policy. Its sitemap lists the home, download and blog pages only.", "cowagent.ai answers `/.well-known/security.txt` and `/llms.txt` with the home page, so neither file exists. docs.cowagent.ai serves an llms.txt.", "The registration date of cowagent.ai was not looked up." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cowagent.json" }, "answer": "Hermes Agent scores 67.9 (B) on agent readiness against CowAgent's 58.5 (C), and leads in 5 of 7 scored categories. CowAgent leads on reliability.", "b": { "slug": "hermes-agent", "name": "Hermes Agent", "vendor": "Nous Research", "vendorUrl": "https://hermes-agent.nousresearch.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal agent from Nous Research that the owner runs on a computer or server. It answers on messaging apps, keeps memory between sessions, runs scheduled jobs and connects to accounts, models and MCP servers the owner configures.", "url": "https://www.anchorterminal.com/tools/hermes-agent", "markdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hermes-agent.json", "repo": "https://github.com/NousResearch/hermes-agent", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "nousresearch/hermes-agent" } ], "auth": "none", "authNotes": "No account of its own. Model and channel keys go in `~/.hermes/.env` or come from Bitwarden, 1Password or a command helper at start-up. Google Workspace, MCP servers and Nous Portal sign in by OAuth, with tokens stored under `~/.hermes/`. The optional API server takes a bearer key set in `API_SERVER_KEY`.", "pricing": "free", "pricingNotes": "Free under the MIT licence. The owner pays the model provider chosen, or nothing with a local model. Nous Portal plans ($0, $20, $100 and $200 a month in credits) and Hermes Cloud hosting ($0.51 a day running on the Standard size, plus inference) are optional and sold separately.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on Hermes Agent's own interfaces. An optional skill lets the agent pay other services over MPP, which is a client and not a way to pay for Hermes (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 253000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://hermes-agent.nousresearch.com/docs/", "llmsTxt": "https://hermes-agent.nousresearch.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "python", "docker", "llms-txt", "pre-1.0" ], "lastRelease": "2026-10-11", "graded": true, "anchor": { "graded": true, "score": 67.9, "grade": "B", "agentReady": false, "rank": 244, "ranked": true, "rankOf": 986, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-10-08. The v0.21.6 release notes list six security fixes, among them a native sign-in flaw that could send login codes to a non-loopback redirect and a quoted display name in the `From` header that affected the email gateway's sender check. SECURITY.md counts unauthorised access to an external surface as in scope, yet the repository shows no published advisory, so owners on older versions have no advisory to act on. Fixed and described in the notes, -3. https://github.com/NousResearch/hermes-agent/releases/tag/v0.21.6; https://github.com/NousResearch/hermes-agent/security/advisories" ], "verdict": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.", "bestFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "strengths": [ "Every saved-card fill asks for approval, and cron, webhook and API sessions are refused because nobody can confirm", "The messaging gateway denies all senders until an allowlist or a pairing code approved on the CLI is in place", "The docs say no telemetry, usage data or analytics is collected, and conversations, memory and skills stay in `~/.hermes/`", "SECURITY.md states that in-process checks are not a boundary and names OS-level isolation as the only one", "Ten releases between 19 August and 11 October 2026, the latest v0.21.7 on 11 October" ], "weaknesses": [ "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk", "The Google Workspace skill requests full Gmail, Calendar and Drive scopes, and its confirm-before-sending rule is an instruction in SKILL.md, not enforced in code", "Memory writes are saved without approval by default (`memory.write_approval: false`), including from a background review after each turn", "Release v0.21.6 of 8 October 2026 lists six security fixes and the repository has no published security advisory", "15,102 open issues and more than 5,000 open pull requests on 12 October 2026", "The Nous Portal terms grant Nous a licence to train models on customer data when the Portal is the model provider" ], "agentNotes": [ "Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands", "Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats", "Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner", "Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs", "Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.9 } ], "editorialScores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 73 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash # then: hermes setup", "headless": { "command": "hermes chat -q \"$TASK\" --format stream-json --max-turns 30" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/hermes-agent" }, "area": "frameworks", "provenance": { "legalEntity": "Nous Research, Inc.", "domain": "nousresearch.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/NousResearch/hermes-agent/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer reads Nous Research, Inc., and the Nous Portal terms name it as a Delaware corporation.", "No terms or privacy link is given. The Nous Portal terms and privacy policy (both dated 28 September 2026) govern the optional Portal and Hermes Cloud services, not the software the owner runs under the MIT licence, so the licence stands in.", "hermes-agent.nousresearch.com/.well-known/security.txt answered 404. SECURITY.md in the repository gives security@nousresearch.com and GitHub private reporting.", "No status page applies to software the owner runs. None was looked for on the Portal.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hermes-agent.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "zhayujie", "b": "Nous Research", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-30", "b": "2026-10-11", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "47k stars", "b": "253k stars", "name": "Popularity" } ], "faq": [ { "answer": "Hermes Agent scores 67.9 (B) on agent readiness against CowAgent's 58.5 (C), and leads in 5 of 7 scored categories. CowAgent leads on reliability.", "question": "Which is better for AI agents, CowAgent or Hermes Agent?" }, { "answer": "Yes. CowAgent is open source (MIT). Hermes Agent is open source (MIT).", "question": "Are CowAgent and Hermes Agent open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 84 against 57" ], "also": null, "goodFor": "One technical owner who wants an assistant on WeChat, Feishu, DingTalk, Telegram, Slack or Discord with memory in local files and a choice of Chinese and Western model providers.", "slug": "cowagent", "watchFor": "Source and Docker installs default to full-access, and no mode asks the owner before a shell command, a file send or an MCP call" }, { "aheadOn": [ "Schema \u0026 documentation, 80 against 67", "Agent ergonomics, 80 against 59", "Security \u0026 auth, 75 against 43", "Transparency \u0026 trust, 63 against 45" ], "also": [ "No key needed to call it" ], "goodFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "slug": "hermes-agent", "watchFor": "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent.json", "title": "AstrBot vs CowAgent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-cowagent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.json", "title": "AstrBot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-gaia.json", "title": "CowAgent vs GAIA", "url": "https://www.anchorterminal.com/compare/cowagent-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-gemini-spark.json", "title": "CowAgent vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/cowagent-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-grok-bot.json", "title": "CowAgent vs Grok Bot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-haven.json", "title": "CowAgent vs Haven", "url": "https://www.anchorterminal.com/compare/cowagent-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-instinct.json", "title": "CowAgent vs Instinct", "url": "https://www.anchorterminal.com/compare/cowagent-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-ironclaw.json", "title": "CowAgent vs IronClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-leon.json", "title": "CowAgent vs Leon", "url": "https://www.anchorterminal.com/compare/cowagent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-lindy.json", "title": "CowAgent vs Lindy", "url": "https://www.anchorterminal.com/compare/cowagent-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot.json", "title": "CowAgent vs nanobot", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-nanoclaw.json", "title": "CowAgent vs NanoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openai-dots.json", "title": "CowAgent vs Dots", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw.json", "title": "CowAgent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.json", "title": "CowAgent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-poke.json", "title": "CowAgent vs Poke", "url": "https://www.anchorterminal.com/compare/cowagent-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.json", "title": "CowAgent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.json", "title": "CowAgent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-zo-computer.json", "title": "CowAgent vs Zo Computer", "url": "https://www.anchorterminal.com/compare/cowagent-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.json", "title": "GAIA vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.json", "title": "Gemini Spark vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.json", "title": "Grok Bot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent.json", "title": "Haven vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.json", "title": "Hermes Agent vs Instinct", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.json", "title": "Hermes Agent vs IronClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.json", "title": "Hermes Agent vs Lindy", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.json", "title": "Hermes Agent vs NanoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.json", "title": "Hermes Agent vs Dots", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "title": "Hermes Agent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "title": "Hermes Agent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke.json", "title": "Hermes Agent vs Poke", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.json", "title": "Hermes Agent vs Zo Computer", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer" } ], "scores": [ { "by": 27, "cowagent": 84, "edge": "cowagent", "hermes-agent": 57, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 13, "cowagent": 67, "edge": "hermes-agent", "hermes-agent": 80, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 21, "cowagent": 59, "edge": "hermes-agent", "hermes-agent": 80, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 32, "cowagent": 43, "edge": "hermes-agent", "hermes-agent": 75, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "cowagent": 60, "edge": "", "hermes-agent": 60, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 1, "cowagent": 83, "edge": "hermes-agent", "hermes-agent": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 18, "cowagent": 45, "edge": "hermes-agent", "hermes-agent": 63, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Hermes Agent scores 67.9 (B) on agent readiness against CowAgent's 58.5 (C), and leads in 5 of 7 scored categories. CowAgent leads on reliability. Both do assistant proactive.", "verdicts": { "cowagent": "MIT software with seven releases in 90 days, memory kept as plain files in the owner's workspace and three per-session permission modes. Source and Docker installs default to full-access, no action asks for approval, and an open report of 31 July 2026 says group members could reach the owner's files through the bot.", "hermes-agent": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent", "json": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.md", "slim": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.min.md" }, "markdown": "Hermes Agent scores 67.9 (B) on agent readiness against CowAgent's 58.5 (C), and leads in 5 of 7 scored categories. CowAgent leads on reliability. Both do assistant proactive.\n\n- CowAgent: grade C, 58.5/100, rank #591 of 986. Markdown https://www.anchorterminal.com/tools/cowagent.md · JSON https://www.anchorterminal.com/api/v1/tools/cowagent.json\n- Hermes Agent: grade B, 67.9/100, rank #244 of 986. Markdown https://www.anchorterminal.com/tools/hermes-agent.md · JSON https://www.anchorterminal.com/api/v1/tools/hermes-agent.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### CowAgent (C)\n\nGood for: One technical owner who wants an assistant on WeChat, Feishu, DingTalk, Telegram, Slack or Discord with memory in local files and a choice of Chinese and Western model providers.\n\nAhead on:\n- Reliability, 84 against 57\n\nWatch for: Source and Docker installs default to full-access, and no mode asks the owner before a shell command, a file send or an MCP call\n\n### Hermes Agent (B)\n\nGood for: A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.\n\nAhead on:\n- Schema \u0026 documentation, 80 against 67\n- Agent ergonomics, 80 against 59\n- Security \u0026 auth, 75 against 43\n- Transparency \u0026 trust, 63 against 45\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk\n\n\n## Score by category\n\n| Category | Weight | CowAgent | Hermes Agent | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 84 | 57 | CowAgent +27 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 67 | 80 | Hermes Agent +13 |\n| Agent ergonomics | 13% (16.2 this run) | 59 | 80 | Hermes Agent +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 43 | 75 | Hermes Agent +32 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 84 | Hermes Agent +1 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 45 | 63 | Hermes Agent +18 |\n| Negative events | ≤15 | -5 | -3 | |\n| **Total** | | **58.5 · C** | **67.9 · B** | |\n\n## Facts side by side\n\n| Fact | CowAgent | Hermes Agent |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | zhayujie | Nous Research |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-30 | 2026-10-11 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 47k stars | 253k stars |\n\n## Verdicts\n\n**CowAgent.** MIT software with seven releases in 90 days, memory kept as plain files in the owner's workspace and three per-session permission modes. Source and Docker installs default to full-access, no action asks for approval, and an open report of 31 July 2026 says group members could reach the owner's files through the bot.\n\n**Hermes Agent.** Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.\n\n## Before you call either\n\n### CowAgent\n\n1. Set `agent_permission_mode` to `workspace-write` or `read-only` before connecting any channel. Source and Docker installs default to `full-access`\n2. Keep the bot out of group chats that include other people. Any member who mentions it reaches the same tools as the owner\n3. Set `web_password` before changing `web_host` to `0.0.0.0`. The password is empty by default\n4. Set `external_api_token` to enable `POST /v1/chat/completions`, and send `conversation_id` to keep one session. The `model` field does not select a model\n5. Run it in a container for a hard boundary. The docs and the source both say the permission modes are not isolation\n\n### Hermes Agent\n\n1. Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands\n2. Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats\n3. Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner\n4. Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs\n5. Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`\n\n## Questions\n\n### Which is better for AI agents, CowAgent or Hermes Agent?\n\nHermes Agent scores 67.9 (B) on agent readiness against CowAgent's 58.5 (C), and leads in 5 of 7 scored categories. CowAgent leads on reliability.\n\n### Are CowAgent and Hermes Agent open source?\n\nYes. CowAgent is open source (MIT). Hermes Agent is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cowagent\", \"b\": \"hermes-agent\"}`. From a terminal: `anchor compare cowagent hermes-agent`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cowagent.json and https://www.anchorterminal.com/api/v1/tools/hermes-agent.json\n\n## Other comparisons with CowAgent or Hermes Agent\n\n- [AstrBot vs CowAgent](https://www.anchorterminal.com/compare/astrbot-vs-cowagent.md)\n- [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md)\n- [CowAgent vs GAIA](https://www.anchorterminal.com/compare/cowagent-vs-gaia.md)\n- [CowAgent vs Gemini Spark](https://www.anchorterminal.com/compare/cowagent-vs-gemini-spark.md)\n- [CowAgent vs Grok Bot](https://www.anchorterminal.com/compare/cowagent-vs-grok-bot.md)\n- [CowAgent vs Haven](https://www.anchorterminal.com/compare/cowagent-vs-haven.md)\n- [CowAgent vs Instinct](https://www.anchorterminal.com/compare/cowagent-vs-instinct.md)\n- [CowAgent vs IronClaw](https://www.anchorterminal.com/compare/cowagent-vs-ironclaw.md)\n- [CowAgent vs Leon](https://www.anchorterminal.com/compare/cowagent-vs-leon.md)\n- [CowAgent vs Lindy](https://www.anchorterminal.com/compare/cowagent-vs-lindy.md)\n- [CowAgent vs nanobot](https://www.anchorterminal.com/compare/cowagent-vs-nanobot.md)\n- [CowAgent vs NanoClaw](https://www.anchorterminal.com/compare/cowagent-vs-nanoclaw.md)\n- [CowAgent vs Dots](https://www.anchorterminal.com/compare/cowagent-vs-openai-dots.md)\n- [CowAgent vs OpenClaw](https://www.anchorterminal.com/compare/cowagent-vs-openclaw.md)\n- [CowAgent vs PicoClaw](https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.md)\n- [CowAgent vs Poke](https://www.anchorterminal.com/compare/cowagent-vs-poke.md)\n- [CowAgent vs QwenPaw](https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.md)\n- [CowAgent vs ZeroClaw](https://www.anchorterminal.com/compare/cowagent-vs-zeroclaw.md)\n- [CowAgent vs Zo Computer](https://www.anchorterminal.com/compare/cowagent-vs-zo-computer.md)\n- [GAIA vs Hermes Agent](https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.md)\n- [Gemini Spark vs Hermes Agent](https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.md)\n- [Grok Bot vs Hermes Agent](https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.md)\n- [Haven vs Hermes Agent](https://www.anchorterminal.com/compare/haven-vs-hermes-agent.md)\n- [Hermes Agent vs Instinct](https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.md)\n- [Hermes Agent vs IronClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs Lindy](https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Hermes Agent vs NanoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.md)\n- [Hermes Agent vs Dots](https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.md)\n- [Hermes Agent vs OpenClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md)\n- [Hermes Agent vs PicoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md)\n- [Hermes Agent vs Poke](https://www.anchorterminal.com/compare/hermes-agent-vs-poke.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Hermes Agent vs Zo Computer](https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "CowAgent vs Hermes Agent", "url": "" } ], "description": "Hermes Agent scores 67.9 (B) to CowAgent's 58.5 (C) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "CowAgent C 58.5", "Hermes Agent B 67.9", "scores" ], "h1": "CowAgent vs Hermes Agent", "image": "https://www.anchorterminal.com/assets/og/compare-cowagent-vs-hermes-agent.png", "path": "/compare/cowagent-vs-hermes-agent", "published": "2026-10-01", "section": "tools", "title": "CowAgent vs Hermes Agent for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent" }, "tokens": { "markdown": 2600, "slim": 530 }, "version": 1 }