GAIA vs Hermes Agent

GAIA

GAIA's source is public, so its approval gate, memory store and token handling can be read. Three approval modes and per-tool overrides exist, but the default mode in the source runs every action unasked, which the privacy policy and release notes do not say. Pro costs $30 a month and self-hosting is limited to noncommercial use.

Hermes Agent

Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.

GAIA

1. Set Settings > Approvals to Always ask or Auto before connecting mail. The default in the source runs every action, including send and delete, without asking.
2. Expect no public API on the hosted service. The backend turns off its OpenAPI document in production, so reach GAIA through its apps, bots or CLI.
3. Check the plan before relying on the hosted service. The README and docs describe a Free plan, and the pricing page says GAIA is a paid product.
4. For self-hosting, prepare Docker, Node.js 20, a WorkOS account and a model key first, and confirm the use is noncommercial under the licence.
5. Add outside tools as MCP servers by URL on the Integrations page. GAIA asks before adding a server in every approval mode.

Hermes Agent

1. Set approvals.mode: manual before giving it real accounts. The default smart lets an auxiliary model approve commands
2. Run the gateway with terminal.backend: docker or the project's Docker image when it reads mail, web pages or group chats
3. Set memory.write_approval: true and skills.write_approval: true to review what it saves about the owner
4. Leave approvals.cron_mode and approvals.unattended_mode at deny for scheduled and webhook runs
5. Set TELEGRAM_ALLOWED_USERS or the matching allowlist per channel. Never set GATEWAY_ALLOW_ALL_USERS=true