Skip to main content

Security

The desktop app can run commands and edit files on this computer. Treat it like a powerful assistant, not a read-only chatbot.

Approvals​

Dangerous shell commands wait for you. Settings → Safety sets the policy:

  • Smart (default) — low-risk commands may auto-approve; destructive ones prompt
  • Manual — always ask
  • Off — no prompts (same idea as YOLO)

The status bar has a per-session YOLO toggle. /yolo in chat flips it for that conversation. YOLO skips approval prompts — use it only when you trust the session.

What leaves the machine​

API calls go only to the model provider (and tools) you configured. Conversations, memory, and skills stay in ~/.hermes/ locally. There is no product telemetry.

License​

Agent turns need a valid license key. The app still opens without one so you can paste a key.