{ "data": { "a": { "slug": "hermes-agent", "name": "Hermes Agent", "vendor": "Nous Research", "vendorUrl": "https://hermes-agent.nousresearch.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal agent from Nous Research that the owner runs on a computer or server. It answers on messaging apps, keeps memory between sessions, runs scheduled jobs and connects to accounts, models and MCP servers the owner configures.", "url": "https://www.anchorterminal.com/tools/hermes-agent", "markdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hermes-agent.json", "repo": "https://github.com/NousResearch/hermes-agent", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "nousresearch/hermes-agent" } ], "auth": "none", "authNotes": "No account of its own. Model and channel keys go in `~/.hermes/.env` or come from Bitwarden, 1Password or a command helper at start-up. Google Workspace, MCP servers and Nous Portal sign in by OAuth, with tokens stored under `~/.hermes/`. The optional API server takes a bearer key set in `API_SERVER_KEY`.", "pricing": "free", "pricingNotes": "Free under the MIT licence. The owner pays the model provider chosen, or nothing with a local model. Nous Portal plans ($0, $20, $100 and $200 a month in credits) and Hermes Cloud hosting ($0.51 a day running on the Standard size, plus inference) are optional and sold separately.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on Hermes Agent's own interfaces. An optional skill lets the agent pay other services over MPP, which is a client and not a way to pay for Hermes (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 253000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://hermes-agent.nousresearch.com/docs/", "llmsTxt": "https://hermes-agent.nousresearch.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "python", "docker", "llms-txt", "pre-1.0" ], "lastRelease": "2026-10-11", "graded": true, "anchor": { "graded": true, "score": 67.9, "grade": "B", "agentReady": false, "rank": 244, "ranked": true, "rankOf": 986, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-10-08. The v0.21.6 release notes list six security fixes, among them a native sign-in flaw that could send login codes to a non-loopback redirect and a quoted display name in the `From` header that affected the email gateway's sender check. SECURITY.md counts unauthorised access to an external surface as in scope, yet the repository shows no published advisory, so owners on older versions have no advisory to act on. Fixed and described in the notes, -3. https://github.com/NousResearch/hermes-agent/releases/tag/v0.21.6; https://github.com/NousResearch/hermes-agent/security/advisories" ], "verdict": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.", "bestFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "strengths": [ "Every saved-card fill asks for approval, and cron, webhook and API sessions are refused because nobody can confirm", "The messaging gateway denies all senders until an allowlist or a pairing code approved on the CLI is in place", "The docs say no telemetry, usage data or analytics is collected, and conversations, memory and skills stay in `~/.hermes/`", "SECURITY.md states that in-process checks are not a boundary and names OS-level isolation as the only one", "Ten releases between 19 August and 11 October 2026, the latest v0.21.7 on 11 October" ], "weaknesses": [ "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk", "The Google Workspace skill requests full Gmail, Calendar and Drive scopes, and its confirm-before-sending rule is an instruction in SKILL.md, not enforced in code", "Memory writes are saved without approval by default (`memory.write_approval: false`), including from a background review after each turn", "Release v0.21.6 of 8 October 2026 lists six security fixes and the repository has no published security advisory", "15,102 open issues and more than 5,000 open pull requests on 12 October 2026", "The Nous Portal terms grant Nous a licence to train models on customer data when the Portal is the model provider" ], "agentNotes": [ "Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands", "Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats", "Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner", "Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs", "Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.9 } ], "editorialScores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 73 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash # then: hermes setup", "headless": { "command": "hermes chat -q \"$TASK\" --format stream-json --max-turns 30" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/hermes-agent" }, "area": "frameworks", "provenance": { "legalEntity": "Nous Research, Inc.", "domain": "nousresearch.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/NousResearch/hermes-agent/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer reads Nous Research, Inc., and the Nous Portal terms name it as a Delaware corporation.", "No terms or privacy link is given. The Nous Portal terms and privacy policy (both dated 28 September 2026) govern the optional Portal and Hermes Cloud services, not the software the owner runs under the MIT licence, so the licence stands in.", "hermes-agent.nousresearch.com/.well-known/security.txt answered 404. SECURITY.md in the repository gives security@nousresearch.com and GitHub private reporting.", "No status page applies to software the owner runs. None was looked for on the Portal.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hermes-agent.json" }, "answer": "Hermes Agent and OpenClaw score within a point of each other on agent readiness, 67.9 (B) and 67.1 (B). OpenClaw leads on reliability and transparency \u0026 trust.", "b": { "slug": "openclaw", "name": "OpenClaw", "vendor": "OpenClaw Foundation", "vendorUrl": "https://openclaw.ai", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal AI assistant that runs as a Gateway on the owner's own computer and answers in WhatsApp, Telegram, Slack, iMessage and other chat apps, with desktop and mobile apps. The OpenClaw Foundation maintains it under the MIT licence.", "url": "https://www.anchorterminal.com/tools/openclaw", "markdownUrl": "https://www.anchorterminal.com/tools/openclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openclaw.json", "repo": "https://github.com/openclaw/openclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "openclaw" }, { "registry": "oci", "name": "ghcr.io/openclaw/openclaw" } ], "auth": "mixed", "authNotes": "No OpenClaw account exists. The owner supplies model provider API keys or signs in with a ChatGPT or Claude subscription, and adds a bot token, QR pairing or OAuth grant for each channel and account. Clients reach the Gateway with a token or password (`gateway.auth.mode`), or through a trusted proxy, and paired devices hold their own tokens. Operator scopes (`operator.read`, `operator.write`, `operator.admin` and others) apply to paired clients, but a shared-secret bearer token on `POST /tools/invoke` gets full operator access whatever scopes the caller sends (https://docs.openclaw.ai/gateway/tools-invoke-http-api; https://docs.openclaw.ai/gateway/operator-scopes).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with no paid tier, hosted service or subscription. The owner pays the model provider for usage, or nothing with a local model, plus any search, speech or media API they configure (https://github.com/openclaw/openclaw; https://docs.openclaw.ai/reference/api-usage-costs).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 391800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.openclaw.ai", "llmsTxt": "https://docs.openclaw.ai/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "foundation", "llms-txt", "docker", "typescript" ], "lastRelease": "2026-10-12", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 270, "ranked": true, "rankOf": 986, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -8, "negativeNotes": [ "2026-09-11. The project's security page and GitHub advisory list show 722 advisories published between 31 January and 11 September 2026, 14 critical, 249 high, 390 medium and 69 low, 39 with a CVE. The largest groups are Gateway auth and scopes (182) and exec, sandbox and approvals (160). The project says all 14 critical issues are fixed and disclosed and reports no known compromise of its infrastructure. Fixed and published, which decays the deduction, but the volume and the two areas affected bear directly on an assistant that holds its owner's accounts, -8. https://openclaw.ai/security; https://github.com/openclaw/openclaw/security/advisories" ], "verdict": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.", "bestFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "strengths": [ "State, memory and credentials stay under `~/.openclaw` on the owner's machine, and the project sells no hosted service or paid tier", "Memory is plain Markdown files in the workspace, and `openclaw memory forget` removes what a named session contributed", "Four session permission modes (`read-only`, `guarded`, `workspace`, `full`), exec approvals and an optional Docker or Podman tool sandbox", "Unknown direct-message senders get a pairing code by default and are ignored until the owner approves them", "Telemetry is documented field by field. Feature statistics are opt-in and `update.checkOnStart: false` stops every automatic request", "13 stable releases in the 90 days to 12 October 2026, with npm provenance attestations on the published package" ], "weaknesses": [ "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off", "Agents with the message tool can send across conversations and channel providers by default, with no approval step for a send", "722 advisories published between 31 January and 11 September 2026, 14 critical and 249 high, per the project's own security page", "Credentials sit in files and SQLite databases under `~/.openclaw`, protected by file permissions unless the owner configures a secret provider", "The project's own maturity scorecard rates the product at 68 per cent, labelled Alpha", "The privacy policy covers the mobile apps, the Chrome extension and website analytics, and says it does not cover the Gateway" ], "agentNotes": [ "Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval", "Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default", "Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation", "Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it", "Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 77, "maintenance": 86, "payments": 60, "reliability": 75, "schema": 84, "security": 74, "transparency": 82 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://openclaw.ai/install.sh | bash # or: npm install -g openclaw@latest --allow-scripts=openclaw \u0026\u0026 openclaw onboard --install-daemon" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/openclaw" }, "area": "frameworks", "provenance": { "legalEntity": "OpenClaw Foundation", "domain": "openclaw.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/openclaw/openclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The README and the `LICENSE` file name the OpenClaw Foundation, described as an independent 501(c)(3). Its site at www.openclaw.org gave no address, registration number, board or filings on the page we read.", "No terms of service were found for the software, so the MIT licence stands in.", "The privacy policy at openclaw.ai/privacy, effective 2 August 2026, covers the iOS and Android apps, the Chrome extension and website analytics, and says it does not cover the gateway, server or AI provider the owner connects. It is not linked here for that reason.", "openclaw.ai/.well-known/security.txt returned 404 on 12 October 2026. The repository has a SECURITY.md with private GitHub reporting and security@openclaw.ai.", "There is no hosted endpoint. A Gateway answers on its owner's own host. The daily update check goes to telemetry.openclaw.ai.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Nous Research", "b": "OpenClaw Foundation", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-11", "b": "2026-10-12", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "253k stars", "b": "392k stars", "name": "Popularity" } ], "faq": [ { "answer": "Hermes Agent and OpenClaw score within a point of each other on agent readiness, 67.9 (B) and 67.1 (B). OpenClaw leads on reliability and transparency \u0026 trust.", "question": "Which is better for AI agents, Hermes Agent or OpenClaw?" }, { "answer": "Yes. Hermes Agent is open source (MIT). OpenClaw is open source (MIT).", "question": "Are Hermes Agent and OpenClaw open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No key needed to call it", "Free to start without a card" ], "goodFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "slug": "hermes-agent", "watchFor": "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk" }, { "aheadOn": [ "Reliability, 75 against 57", "Transparency \u0026 trust, 68 against 63" ], "also": null, "goodFor": "A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.", "slug": "openclaw", "watchFor": "Without configuration the default is full access. Host exec runs with no approval and sandboxing is off" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.json", "title": "AstrBot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw.json", "title": "AstrBot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.json", "title": "CowAgent vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw.json", "title": "CowAgent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.json", "title": "GAIA vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-openclaw.json", "title": "GAIA vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.json", "title": "Gemini Spark vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.json", "title": "Gemini Spark vs OpenClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.json", "title": "Grok Bot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.json", "title": "Grok Bot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent.json", "title": "Haven vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-openclaw.json", "title": "Haven vs OpenClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.json", "title": "Hermes Agent vs Instinct", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.json", "title": "Hermes Agent vs IronClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.json", "title": "Hermes Agent vs Lindy", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.json", "title": "Hermes Agent vs NanoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.json", "title": "Hermes Agent vs Dots", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "title": "Hermes Agent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke.json", "title": "Hermes Agent vs Poke", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.json", "title": "Hermes Agent vs Zo Computer", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-openclaw.json", "title": "Instinct vs OpenClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.json", "title": "IronClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-openclaw.json", "title": "Leon vs OpenClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-openclaw.json", "title": "Lindy vs OpenClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw.json", "title": "nanobot vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.json", "title": "NanoClaw vs OpenClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.json", "title": "Dots vs OpenClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-poke.json", "title": "OpenClaw vs Poke", "url": "https://www.anchorterminal.com/compare/openclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "title": "OpenClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.json", "title": "OpenClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.json", "title": "OpenClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/openclaw-vs-zo-computer" } ], "scores": [ { "by": 18, "edge": "openclaw", "hermes-agent": 57, "key": "reliability", "name": "Reliability", "openclaw": 75, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "openclaw", "hermes-agent": 80, "key": "schema", "name": "Schema \u0026 documentation", "openclaw": 84, "weight": 13 }, { "by": 3, "edge": "hermes-agent", "hermes-agent": 80, "key": "ergonomics", "name": "Agent ergonomics", "openclaw": 77, "weight": 13 }, { "by": 1, "edge": "hermes-agent", "hermes-agent": 75, "key": "security", "name": "Security \u0026 auth", "openclaw": 74, "weight": 14 }, { "by": 0, "edge": "", "hermes-agent": 60, "key": "payments", "name": "Payments \u0026 pricing", "openclaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "edge": "openclaw", "hermes-agent": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "openclaw": 86, "weight": 7 }, { "by": 5, "edge": "openclaw", "hermes-agent": 63, "key": "transparency", "name": "Transparency \u0026 trust", "openclaw": 68, "weight": 7 } ], "summary": "Hermes Agent and OpenClaw score within a point of each other on agent readiness, 67.9 (B) and 67.1 (B). OpenClaw leads on reliability and transparency \u0026 trust. Both do assistant proactive.", "verdicts": { "hermes-agent": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.", "openclaw": "Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw", "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md", "slim": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.min.md" }, "markdown": "Hermes Agent and OpenClaw score within a point of each other on agent readiness, 67.9 (B) and 67.1 (B). OpenClaw leads on reliability and transparency \u0026 trust. Both do assistant proactive.\n\n- Hermes Agent: grade B, 67.9/100, rank #244 of 986. Markdown https://www.anchorterminal.com/tools/hermes-agent.md · JSON https://www.anchorterminal.com/api/v1/tools/hermes-agent.json\n- OpenClaw: grade B, 67.1/100, rank #270 of 986. Markdown https://www.anchorterminal.com/tools/openclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/openclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### Hermes Agent (B)\n\nGood for: A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n\nWatch for: The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk\n\n### OpenClaw (B)\n\nGood for: A technical owner who wants an assistant on their own machine across many chat apps, with their choice of model and files they can read and delete.\n\nAhead on:\n- Reliability, 75 against 57\n- Transparency \u0026 trust, 68 against 63\n\nWatch for: Without configuration the default is full access. Host exec runs with no approval and sandboxing is off\n\n\n## Score by category\n\n| Category | Weight | Hermes Agent | OpenClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 75 | OpenClaw +18 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 84 | OpenClaw +4 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 77 | Hermes Agent +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 74 | Hermes Agent +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 86 | OpenClaw +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 63 | 68 | OpenClaw +5 |\n| Negative events | ≤15 | -3 | -8 | |\n| **Total** | | **67.9 · B** | **67.1 · B** | |\n\n## Facts side by side\n\n| Fact | Hermes Agent | OpenClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Nous Research | OpenClaw Foundation |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-11 | 2026-10-12 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 253k stars | 392k stars |\n\n## Verdicts\n\n**Hermes Agent.** Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.\n\n**OpenClaw.** Self-hosted under the MIT licence, with state, memory and credentials kept on the owner's machine and no paid tier. A fresh install runs tools on the host with full access, no approval prompt and no sandbox, and the project has published 722 security advisories since January 2026, 14 of them critical.\n\n## Before you call either\n\n### Hermes Agent\n\n1. Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands\n2. Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats\n3. Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner\n4. Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs\n5. Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`\n\n### OpenClaw\n\n1. Set a session permission mode of `guarded` or `workspace`, or `tools.exec.mode`, before connecting mail. The default runs host commands without approval\n2. Turn on `agents.defaults.sandbox` for any agent that reads mail, web pages or attachments. Sandboxing is off by default\n3. Set `tools.message.crossContext.allowAcrossProviders` and `allowWithinProvider` to `false` to confine sends to the current conversation\n4. Route incoming mail to a restricted reader agent, as the IMAP and Gmail guides show, and deny `gateway`, `cron`, `sessions_spawn` and `sessions_send` for it\n5. Run `openclaw security audit` after setup, and treat the Gateway token as an owner credential. `POST /tools/invoke` accepts it with full operator access\n\n## Questions\n\n### Which is better for AI agents, Hermes Agent or OpenClaw?\n\nHermes Agent and OpenClaw score within a point of each other on agent readiness, 67.9 (B) and 67.1 (B). OpenClaw leads on reliability and transparency \u0026 trust.\n\n### Are Hermes Agent and OpenClaw open source?\n\nYes. Hermes Agent is open source (MIT). OpenClaw is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"hermes-agent\", \"b\": \"openclaw\"}`. From a terminal: `anchor compare hermes-agent openclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/hermes-agent.json and https://www.anchorterminal.com/api/v1/tools/openclaw.json\n\n## Other comparisons with Hermes Agent or OpenClaw\n\n- [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md)\n- [AstrBot vs OpenClaw](https://www.anchorterminal.com/compare/astrbot-vs-openclaw.md)\n- [CowAgent vs Hermes Agent](https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.md)\n- [CowAgent vs OpenClaw](https://www.anchorterminal.com/compare/cowagent-vs-openclaw.md)\n- [GAIA vs Hermes Agent](https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.md)\n- [GAIA vs OpenClaw](https://www.anchorterminal.com/compare/gaia-vs-openclaw.md)\n- [Gemini Spark vs Hermes Agent](https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.md)\n- [Gemini Spark vs OpenClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-openclaw.md)\n- [Grok Bot vs Hermes Agent](https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.md)\n- [Grok Bot vs OpenClaw](https://www.anchorterminal.com/compare/grok-bot-vs-openclaw.md)\n- [Haven vs Hermes Agent](https://www.anchorterminal.com/compare/haven-vs-hermes-agent.md)\n- [Haven vs OpenClaw](https://www.anchorterminal.com/compare/haven-vs-openclaw.md)\n- [Hermes Agent vs Instinct](https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.md)\n- [Hermes Agent vs IronClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs Lindy](https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Hermes Agent vs NanoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.md)\n- [Hermes Agent vs Dots](https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.md)\n- [Hermes Agent vs PicoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md)\n- [Hermes Agent vs Poke](https://www.anchorterminal.com/compare/hermes-agent-vs-poke.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Hermes Agent vs Zo Computer](https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.md)\n- [Instinct vs OpenClaw](https://www.anchorterminal.com/compare/instinct-vs-openclaw.md)\n- [IronClaw vs OpenClaw](https://www.anchorterminal.com/compare/ironclaw-vs-openclaw.md)\n- [Leon vs OpenClaw](https://www.anchorterminal.com/compare/leon-vs-openclaw.md)\n- [Lindy vs OpenClaw](https://www.anchorterminal.com/compare/lindy-vs-openclaw.md)\n- [nanobot vs OpenClaw](https://www.anchorterminal.com/compare/nanobot-vs-openclaw.md)\n- [NanoClaw vs OpenClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-openclaw.md)\n- [Dots vs OpenClaw](https://www.anchorterminal.com/compare/openai-dots-vs-openclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [OpenClaw vs Poke](https://www.anchorterminal.com/compare/openclaw-vs-poke.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [OpenClaw vs ZeroClaw](https://www.anchorterminal.com/compare/openclaw-vs-zeroclaw.md)\n- [OpenClaw vs Zo Computer](https://www.anchorterminal.com/compare/openclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Hermes Agent vs OpenClaw", "url": "" } ], "description": "Hermes Agent and OpenClaw score within a point of each other for assistant proactive, 67.9 and 67.1 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Hermes Agent B 67.9", "OpenClaw B 67.1", "scores" ], "h1": "Hermes Agent vs OpenClaw", "image": "https://www.anchorterminal.com/assets/og/compare-hermes-agent-vs-openclaw.png", "path": "/compare/hermes-agent-vs-openclaw", "published": "2026-10-01", "section": "tools", "title": "Hermes Agent vs OpenClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, "tokens": { "markdown": 2550, "slim": 480 }, "version": 1 }