{ "data": { "a": { "slug": "hermes-agent", "name": "Hermes Agent", "vendor": "Nous Research", "vendorUrl": "https://hermes-agent.nousresearch.com", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal agent from Nous Research that the owner runs on a computer or server. It answers on messaging apps, keeps memory between sessions, runs scheduled jobs and connects to accounts, models and MCP servers the owner configures.", "url": "https://www.anchorterminal.com/tools/hermes-agent", "markdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hermes-agent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hermes-agent.json", "repo": "https://github.com/NousResearch/hermes-agent", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "nousresearch/hermes-agent" } ], "auth": "none", "authNotes": "No account of its own. Model and channel keys go in `~/.hermes/.env` or come from Bitwarden, 1Password or a command helper at start-up. Google Workspace, MCP servers and Nous Portal sign in by OAuth, with tokens stored under `~/.hermes/`. The optional API server takes a bearer key set in `API_SERVER_KEY`.", "pricing": "free", "pricingNotes": "Free under the MIT licence. The owner pays the model provider chosen, or nothing with a local model. Nous Portal plans ($0, $20, $100 and $200 a month in credits) and Hermes Cloud hosting ($0.51 a day running on the Standard size, plus inference) are optional and sold separately.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on Hermes Agent's own interfaces. An optional skill lets the agent pay other services over MPP, which is a client and not a way to pay for Hermes (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 253000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://hermes-agent.nousresearch.com/docs/", "llmsTxt": "https://hermes-agent.nousresearch.com/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "python", "docker", "llms-txt", "pre-1.0" ], "lastRelease": "2026-10-11", "graded": true, "anchor": { "graded": true, "score": 67.9, "grade": "B", "agentReady": false, "rank": 244, "ranked": true, "rankOf": 986, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-10-08. The v0.21.6 release notes list six security fixes, among them a native sign-in flaw that could send login codes to a non-loopback redirect and a quoted display name in the `From` header that affected the email gateway's sender check. SECURITY.md counts unauthorised access to an external surface as in scope, yet the repository shows no published advisory, so owners on older versions have no advisory to act on. Fixed and described in the notes, -3. https://github.com/NousResearch/hermes-agent/releases/tag/v0.21.6; https://github.com/NousResearch/hermes-agent/security/advisories" ], "verdict": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.", "bestFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "strengths": [ "Every saved-card fill asks for approval, and cron, webhook and API sessions are refused because nobody can confirm", "The messaging gateway denies all senders until an allowlist or a pairing code approved on the CLI is in place", "The docs say no telemetry, usage data or analytics is collected, and conversations, memory and skills stay in `~/.hermes/`", "SECURITY.md states that in-process checks are not a boundary and names OS-level isolation as the only one", "Ten releases between 19 August and 11 October 2026, the latest v0.21.7 on 11 October" ], "weaknesses": [ "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk", "The Google Workspace skill requests full Gmail, Calendar and Drive scopes, and its confirm-before-sending rule is an instruction in SKILL.md, not enforced in code", "Memory writes are saved without approval by default (`memory.write_approval: false`), including from a background review after each turn", "Release v0.21.6 of 8 October 2026 lists six security fixes and the repository has no published security advisory", "15,102 open issues and more than 5,000 open pull requests on 12 October 2026", "The Nous Portal terms grant Nous a licence to train models on customer data when the Portal is the model provider" ], "agentNotes": [ "Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands", "Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats", "Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner", "Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs", "Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.9 } ], "editorialScores": { "ergonomics": 80, "maintenance": 84, "payments": 60, "reliability": 57, "schema": 80, "security": 75, "transparency": 73 }, "provenanceScore": 53 }, "connect": { "install": "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash # then: hermes setup", "headless": { "command": "hermes chat -q \"$TASK\" --format stream-json --max-turns 30" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/hermes-agent" }, "area": "frameworks", "provenance": { "legalEntity": "Nous Research, Inc.", "domain": "nousresearch.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/NousResearch/hermes-agent/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer reads Nous Research, Inc., and the Nous Portal terms name it as a Delaware corporation.", "No terms or privacy link is given. The Nous Portal terms and privacy policy (both dated 28 September 2026) govern the optional Portal and Hermes Cloud services, not the software the owner runs under the MIT licence, so the licence stands in.", "hermes-agent.nousresearch.com/.well-known/security.txt answered 404. SECURITY.md in the repository gives security@nousresearch.com and GitHub private reporting.", "No status page applies to software the owner runs. None was looked for on the Portal.", "The domain registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hermes-agent.json" }, "answer": "Hermes Agent scores 67.9 (B) on agent readiness against PicoClaw's 46.1 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "picoclaw", "name": "PicoClaw", "vendor": "Sipeed", "vendorUrl": "https://picoclaw.io", "kind": "harness", "category": "personal-assistants", "summary": "PicoClaw is an open-source personal AI assistant from Sipeed, a single Go binary for small Linux boards, desktops and Android, reached through chat apps. Its last commit on the main branch was on 19 August 2026.", "url": "https://www.anchorterminal.com/tools/picoclaw", "markdownUrl": "https://www.anchorterminal.com/tools/picoclaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/picoclaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/picoclaw.json", "repo": "https://github.com/sipeed/picoclaw", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "docker.io/sipeed/picoclaw" }, { "registry": "oci", "name": "ghcr.io/sipeed/picoclaw" } ], "auth": "none", "authNotes": "No account with Sipeed. The owner supplies model provider keys, chat bot tokens and search keys, kept in `~/.picoclaw/.security.yml`. The web launcher asks for a password set on first run, stored as a bcrypt hash. Each channel's `allow_from` list decides who may talk to the assistant, and an empty list admits everyone.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays their model provider by usage, or nothing with a local model through Ollama or vLLM. Search keys are optional, and DuckDuckGo search needs none.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, docs or source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 30000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://docs.picoclaw.io", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "go", "docker", "pre-1.0" ], "lastRelease": "2026-07-03", "graded": true, "anchor": { "graded": true, "score": 46.1, "grade": "D", "agentReady": false, "rank": 879, "ranked": true, "rankOf": 986, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -7, "negativeNotes": [ "2026-04-25 to 2026-07-19. 15 advisories are listed for PicoClaw in the GitHub Advisory Database. Two are reviewed, CVE-2026-36045 (high, 7.3, command injection past the exec deny list, 0.1.2 and earlier) and CVE-2026-6987 (moderate, injection through the launcher's `/api/gateway/restart`, 0.2.4 and earlier), and 13 unreviewed entries of 10 to 19 July name versions up to 0.2.9. None lists a patched version, the project has published no advisory of its own, and it has no security policy. We read four of the fifteen. Several concern old versions and some fixes are in the git history, so -5. https://github.com/advisories?query=picoclaw", "Current behaviour, checked 2026-10-12. The repository's configuration guide says `tools.exec.allow_remote` defaults to `false`. The source at v0.3.1 and on main sets it to `true`, and the docs site calls fully open the default, so a remote chat can run shell commands on a default install. A misleading claim on a security default, the minimum, -2. https://github.com/sipeed/picoclaw/blob/main/docs/guides/configuration.md; https://github.com/sipeed/picoclaw/blob/main/pkg/config/defaults.go" ], "verdict": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.", "bestFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "strengths": [ "MIT licence, one Go binary for x86-64, ARM, RISC-V, MIPS and LoongArch, with Docker images and an Android APK", "Conversations, memory, scheduled jobs and credentials stay in files under `~/.picoclaw` on the owner's device", "File tools are limited to the workspace by default, and command jobs scheduled from remote chats are refused unless the chat is listed", "MCP client over stdio, SSE and HTTP, with optional search-based tool discovery to keep definitions out of context", "Credentials sit in a separate `.security.yml` with optional AES-256-GCM encryption, and are filtered from tool output before the model sees it" ], "weaknesses": [ "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply", "15 CVEs are listed in the GitHub Advisory Database (25 April to 19 July 2026). The project has published no advisory and has no SECURITY.md", "No human approval step. The agent sends messages, writes files and runs shell commands without asking, and the hooks guide says waiting for a human reply is not supported", "Shell execution from remote chats is on by default in the source and on the docs site, while the repository's configuration guide says the default is off", "An empty `allow_from` list lets anyone who can message the bot use it, with only a warning in the log" ], "agentNotes": [ "Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone", "Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says", "Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes", "Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read", "Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 46.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 22, "payments": 60, "reliability": 54, "schema": 51, "security": 51, "transparency": 58 }, "provenanceScore": 53 }, "connect": { "install": "git clone https://github.com/sipeed/picoclaw.git \u0026\u0026 cd picoclaw \u0026\u0026 docker compose -f docker/docker-compose.yml --profile launcher up # or download a binary from https://picoclaw.io/download/ and run: picoclaw onboard", "headless": { "command": "picoclaw agent -m \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/picoclaw" }, "area": "frameworks", "provenance": { "legalEntity": "Sipeed", "domain": "picoclaw.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/sipeed/picoclaw/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The docs footer reads Copyright 2026 Sipeed and the site says PicoClaw is open-source software by Sipeed. The `LICENSE` file names PicoClaw contributors. No registered company name or address was on the pages read.", "No terms of service or privacy policy is linked from picoclaw.io, docs.picoclaw.io or the repository, so both fields are left out and the MIT licence stands in.", "picoclaw.io/.well-known/security.txt and picoclaw.io/llms.txt answered 403 with a storage Access Denied body, read as absent. docs.picoclaw.io/llms.txt answered 404.", "The repository has no SECURITY.md, and GitHub's policy page says none is set up.", "Self-hosted software with no hosted endpoint. The registration date of picoclaw.io was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/picoclaw.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Nous Research", "b": "Sipeed", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-11", "b": "2026-07-03", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "253k stars", "b": "30k stars", "name": "Popularity" } ], "faq": [ { "answer": "Hermes Agent scores 67.9 (B) on agent readiness against PicoClaw's 46.1 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Hermes Agent or PicoClaw?" }, { "answer": "Yes. Hermes Agent is open source (MIT). PicoClaw is open source (MIT).", "question": "Are Hermes Agent and PicoClaw open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 80 against 51", "Agent ergonomics, 80 against 66", "Security \u0026 auth, 75 against 51", "Maintenance \u0026 community, 84 against 22", "Transparency \u0026 trust, 63 against 56" ], "also": null, "goodFor": "A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.", "slug": "hermes-agent", "watchFor": "The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk" }, { "aheadOn": null, "also": null, "goodFor": "A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.", "slug": "picoclaw", "watchFor": "No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply" } ], "job": { "capability": "assistant.proactive", "name": "Assistant proactive" }, "others": [ { "json": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.json", "title": "AstrBot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.json", "title": "AstrBot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.json", "title": "CowAgent vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.json", "title": "CowAgent vs PicoClaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.json", "title": "GAIA vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gaia-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw.json", "title": "GAIA vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.json", "title": "Gemini Spark vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.json", "title": "Gemini Spark vs PicoClaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.json", "title": "Grok Bot vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.json", "title": "Grok Bot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent.json", "title": "Haven vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/haven-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-picoclaw.json", "title": "Haven vs PicoClaw", "url": "https://www.anchorterminal.com/compare/haven-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.json", "title": "Hermes Agent vs Instinct", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.json", "title": "Hermes Agent vs IronClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon.json", "title": "Hermes Agent vs Leon", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.json", "title": "Hermes Agent vs Lindy", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.json", "title": "Hermes Agent vs nanobot", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.json", "title": "Hermes Agent vs NanoClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.json", "title": "Hermes Agent vs Dots", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.json", "title": "Hermes Agent vs OpenClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke.json", "title": "Hermes Agent vs Poke", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.json", "title": "Hermes Agent vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.json", "title": "Hermes Agent vs Zo Computer", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw.json", "title": "Instinct vs PicoClaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.json", "title": "IronClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-picoclaw.json", "title": "Leon vs PicoClaw", "url": "https://www.anchorterminal.com/compare/leon-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw.json", "title": "Lindy vs PicoClaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.json", "title": "nanobot vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.json", "title": "NanoClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.json", "title": "Dots vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.json", "title": "OpenClaw vs PicoClaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-poke.json", "title": "PicoClaw vs Poke", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.json", "title": "PicoClaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.json", "title": "PicoClaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer" } ], "scores": [ { "by": 3, "edge": "hermes-agent", "hermes-agent": 57, "key": "reliability", "name": "Reliability", "picoclaw": 54, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 29, "edge": "hermes-agent", "hermes-agent": 80, "key": "schema", "name": "Schema \u0026 documentation", "picoclaw": 51, "weight": 13 }, { "by": 14, "edge": "hermes-agent", "hermes-agent": 80, "key": "ergonomics", "name": "Agent ergonomics", "picoclaw": 66, "weight": 13 }, { "by": 24, "edge": "hermes-agent", "hermes-agent": 75, "key": "security", "name": "Security \u0026 auth", "picoclaw": 51, "weight": 14 }, { "by": 0, "edge": "", "hermes-agent": 60, "key": "payments", "name": "Payments \u0026 pricing", "picoclaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 62, "edge": "hermes-agent", "hermes-agent": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "picoclaw": 22, "weight": 7 }, { "by": 7, "edge": "hermes-agent", "hermes-agent": 63, "key": "transparency", "name": "Transparency \u0026 trust", "picoclaw": 56, "weight": 7 } ], "summary": "Hermes Agent scores 67.9 (B) on agent readiness against PicoClaw's 46.1 (D), and leads in 6 of 7 scored categories. Both do assistant proactive.", "verdicts": { "hermes-agent": "Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.", "picoclaw": "Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw", "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.md", "slim": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.min.md" }, "markdown": "Hermes Agent scores 67.9 (B) on agent readiness against PicoClaw's 46.1 (D), and leads in 6 of 7 scored categories. Both do assistant proactive.\n\n- Hermes Agent: grade B, 67.9/100, rank #244 of 986. Markdown https://www.anchorterminal.com/tools/hermes-agent.md · JSON https://www.anchorterminal.com/api/v1/tools/hermes-agent.json\n- PicoClaw: grade D, 46.1/100, rank #879 of 986. Markdown https://www.anchorterminal.com/tools/picoclaw.md · JSON https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 190 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### Hermes Agent (B)\n\nGood for: A technical owner who wants one always-on agent across chat apps with memory and scheduled jobs, on their own machine or a small server, with any model.\n\nAhead on:\n- Schema \u0026 documentation, 80 against 51\n- Agent ergonomics, 80 against 66\n- Security \u0026 auth, 75 against 51\n- Maintenance \u0026 community, 84 against 22\n- Transparency \u0026 trust, 63 against 56\n\nWatch for: The default terminal backend runs commands on the host, and the default `smart` mode lets an auxiliary model approve commands it rates low-risk\n\n### PicoClaw (D)\n\nGood for: A person who wants a chat-app assistant on a cheap Linux board, an old Android phone or a home server, with reminders, web search and file memory, and who accepts running software its maker calls pre-production.\n\nWatch for: No commit on main since 19 August 2026 and no release since v0.3.1 on 3 July 2026. An issue of 6 October calls the repository unmaintained, with no reply\n\n\n## Score by category\n\n| Category | Weight | Hermes Agent | PicoClaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 54 | Hermes Agent +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 51 | Hermes Agent +29 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 66 | Hermes Agent +14 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 51 | Hermes Agent +24 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 22 | Hermes Agent +62 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 63 | 56 | Hermes Agent +7 |\n| Negative events | ≤15 | -3 | -7 | |\n| **Total** | | **67.9 · B** | **46.1 · D** | |\n\n## Facts side by side\n\n| Fact | Hermes Agent | PicoClaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Nous Research | Sipeed |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-11 | 2026-07-03 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 253k stars | 30k stars |\n\n## Verdicts\n\n**Hermes Agent.** Card payments always ask first and are refused in unattended sessions, and the messaging gateway denies every sender until an allowlist is set. Shell commands run on the host by default with a model judging risk, and sending mail through the Google Workspace skill is held back only by an instruction to the model.\n\n**PicoClaw.** Self-hosted under the MIT licence, with 19 documented chat channels, scheduled and heartbeat tasks, and local file memory. The repository has had no commit since 19 August 2026 and no release since 3 July, and 15 CVEs are listed against it with no advisory or security policy from the project.\n\n## Before you call either\n\n### Hermes Agent\n\n1. Set `approvals.mode: manual` before giving it real accounts. The default `smart` lets an auxiliary model approve commands\n2. Run the gateway with `terminal.backend: docker` or the project's Docker image when it reads mail, web pages or group chats\n3. Set `memory.write_approval: true` and `skills.write_approval: true` to review what it saves about the owner\n4. Leave `approvals.cron_mode` and `approvals.unattended_mode` at `deny` for scheduled and webhook runs\n5. Set `TELEGRAM_ALLOWED_USERS` or the matching allowlist per channel. Never set `GATEWAY_ALLOW_ALL_USERS=true`\n\n### PicoClaw\n\n1. Set `allow_from` to the owner's user ID on every channel before starting the gateway. An empty list accepts messages from anyone\n2. Set `tools.exec.allow_remote` to `false` unless chats must run shell commands. The shipped default is `true`, whatever docs/guides/configuration.md says\n3. Set `isolation.enabled` to `true` on Linux (needs `bwrap`) or run in a container. The deny patterns do not inspect child processes\n4. Use `PICOCLAW_KEY_PASSPHRASE` for credential encryption. One docs page names `PICOCLAW_CREDENTIAL_PASSPHRASE`, which the source does not read\n5. Treat the README's ClawdChat line (read a remote skill file and follow it) as untrusted third-party instructions\n\n## Questions\n\n### Which is better for AI agents, Hermes Agent or PicoClaw?\n\nHermes Agent scores 67.9 (B) on agent readiness against PicoClaw's 46.1 (D), and leads in 6 of 7 scored categories.\n\n### Are Hermes Agent and PicoClaw open source?\n\nYes. Hermes Agent is open source (MIT). PicoClaw is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"hermes-agent\", \"b\": \"picoclaw\"}`. From a terminal: `anchor compare hermes-agent picoclaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/hermes-agent.json and https://www.anchorterminal.com/api/v1/tools/picoclaw.json\n\n## Other comparisons with Hermes Agent or PicoClaw\n\n- [AstrBot vs Hermes Agent](https://www.anchorterminal.com/compare/astrbot-vs-hermes-agent.md)\n- [AstrBot vs PicoClaw](https://www.anchorterminal.com/compare/astrbot-vs-picoclaw.md)\n- [CowAgent vs Hermes Agent](https://www.anchorterminal.com/compare/cowagent-vs-hermes-agent.md)\n- [CowAgent vs PicoClaw](https://www.anchorterminal.com/compare/cowagent-vs-picoclaw.md)\n- [GAIA vs Hermes Agent](https://www.anchorterminal.com/compare/gaia-vs-hermes-agent.md)\n- [GAIA vs PicoClaw](https://www.anchorterminal.com/compare/gaia-vs-picoclaw.md)\n- [Gemini Spark vs Hermes Agent](https://www.anchorterminal.com/compare/gemini-spark-vs-hermes-agent.md)\n- [Gemini Spark vs PicoClaw](https://www.anchorterminal.com/compare/gemini-spark-vs-picoclaw.md)\n- [Grok Bot vs Hermes Agent](https://www.anchorterminal.com/compare/grok-bot-vs-hermes-agent.md)\n- [Grok Bot vs PicoClaw](https://www.anchorterminal.com/compare/grok-bot-vs-picoclaw.md)\n- [Haven vs Hermes Agent](https://www.anchorterminal.com/compare/haven-vs-hermes-agent.md)\n- [Haven vs PicoClaw](https://www.anchorterminal.com/compare/haven-vs-picoclaw.md)\n- [Hermes Agent vs Instinct](https://www.anchorterminal.com/compare/hermes-agent-vs-instinct.md)\n- [Hermes Agent vs IronClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-ironclaw.md)\n- [Hermes Agent vs Leon](https://www.anchorterminal.com/compare/hermes-agent-vs-leon.md)\n- [Hermes Agent vs Lindy](https://www.anchorterminal.com/compare/hermes-agent-vs-lindy.md)\n- [Hermes Agent vs nanobot](https://www.anchorterminal.com/compare/hermes-agent-vs-nanobot.md)\n- [Hermes Agent vs NanoClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-nanoclaw.md)\n- [Hermes Agent vs Dots](https://www.anchorterminal.com/compare/hermes-agent-vs-openai-dots.md)\n- [Hermes Agent vs OpenClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-openclaw.md)\n- [Hermes Agent vs Poke](https://www.anchorterminal.com/compare/hermes-agent-vs-poke.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Hermes Agent vs ZeroClaw](https://www.anchorterminal.com/compare/hermes-agent-vs-zeroclaw.md)\n- [Hermes Agent vs Zo Computer](https://www.anchorterminal.com/compare/hermes-agent-vs-zo-computer.md)\n- [Instinct vs PicoClaw](https://www.anchorterminal.com/compare/instinct-vs-picoclaw.md)\n- [IronClaw vs PicoClaw](https://www.anchorterminal.com/compare/ironclaw-vs-picoclaw.md)\n- [Leon vs PicoClaw](https://www.anchorterminal.com/compare/leon-vs-picoclaw.md)\n- [Lindy vs PicoClaw](https://www.anchorterminal.com/compare/lindy-vs-picoclaw.md)\n- [nanobot vs PicoClaw](https://www.anchorterminal.com/compare/nanobot-vs-picoclaw.md)\n- [NanoClaw vs PicoClaw](https://www.anchorterminal.com/compare/nanoclaw-vs-picoclaw.md)\n- [Dots vs PicoClaw](https://www.anchorterminal.com/compare/openai-dots-vs-picoclaw.md)\n- [OpenClaw vs PicoClaw](https://www.anchorterminal.com/compare/openclaw-vs-picoclaw.md)\n- [PicoClaw vs Poke](https://www.anchorterminal.com/compare/picoclaw-vs-poke.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [PicoClaw vs ZeroClaw](https://www.anchorterminal.com/compare/picoclaw-vs-zeroclaw.md)\n- [PicoClaw vs Zo Computer](https://www.anchorterminal.com/compare/picoclaw-vs-zo-computer.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Hermes Agent vs PicoClaw", "url": "" } ], "description": "Hermes Agent scores 67.9 (B) to PicoClaw's 46.1 (D) for assistant proactive. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Hermes Agent B 67.9", "PicoClaw D 46.1", "scores" ], "h1": "Hermes Agent vs PicoClaw", "image": "https://www.anchorterminal.com/assets/og/compare-hermes-agent-vs-picoclaw.png", "path": "/compare/hermes-agent-vs-picoclaw", "published": "2026-10-01", "section": "tools", "title": "Hermes Agent vs PicoClaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-picoclaw" }, "tokens": { "markdown": 2550, "slim": 480 }, "version": 1 }