Hermes Webapp For Business: Is A Browser Workspace Worth It?

For a small business, the Hermes webapp means the agent workspace you already run on one office computer can open in a browser on your laptop, tablet or phone.

Nous Research shipped it in Hermes Agent v0.22.6 on 2 November 2026.

This page answers the owner's questions: what it actually gives you, where it pays off in a real business, what it puts at risk, and when to leave it switched off.

If you want a second opinion on where agents fit in your company, book a free SEO strategy session with my team.

The Short Answer For Business Owners

Yes, it's worth switching on if one machine already runs your Hermes agent and you're tired of walking back to it.

No, it isn't a way to hand the agent to your staff, because every signed-in browser gets the same power you have on that machine.

Keep those two lines in mind and the rest of the decision gets easy.

The setup is free of extra software, because the browser workspace comes from the gateway Hermes already runs.

What it asks of you is discipline about who signs in and over which network.

What You Actually Get In The Browser

The Hermes Desktop docs list what the browser version carries over.

Your chat sessions and profiles.
Capabilities and Messaging.
Artifacts and scheduled jobs.
The host computer's file tree and Git review.
Previews and a terminal.

Chats run on the same gateway that serves the command line, the native Desktop app and your messaging bots.

So a job you start from the office desk shows up on your phone as the same conversation with the same queue, not a copy.

Don't Confuse It With The Web Dashboard

Hermes already had a browser tool, and the docs are clear the Webapp is a different thing.

The Web Dashboard is an admin panel you open with hermes dashboard on port 9119.

It's where you'd edit settings, manage API keys and read logs or usage analytics.

The Webapp, on port 9120, is the working space where you and the agent actually get things done.

Think of the dashboard as the back office and the Webapp as the shop floor.

Use Case: The Local Shop Owner

Picture a shop where the agent runs on the back-office computer and handles stock notes, supplier emails and scheduled reports.

With Web Access set to This network, the owner opens the workspace on a tablet at the counter over the shop's own Wi-Fi.

The docs flag that this mode is plain HTTP, so the traffic isn't encrypted and anyone else on that Wi-Fi could read it.

That rules out a guest Wi-Fi that customers join.

It also means the tablet loses the microphone, clipboard reading and notifications, because browsers block those features on plain HTTP away from the host.

If dictating to the agent at the counter matters, use the HTTPS route covered below.

Use Case: The Service Firm Owner On The Road

A plumber, accountant or consultant spends half the day away from the desk.

Here the My own URL option is the one that fits.

It points at an HTTPS address you already have running (a tunnel, a reverse proxy or Tailscale Serve) that forwards traffic to the office computer.

Hermes saves that address as webapp.public_url and puts Nous sign-in in front of it.

From a phone between jobs, you can check what a scheduled job produced, read an artifact or start a new chat, all running on the office machine.

🔥 Want an agent setup you can run your business from, wherever you are? Inside the AI Profit Boardroom you get step-by-step video trainings, the installable Agent OS with Hermes ready, four coaching calls a week and 3,400+ members using agents in real businesses. → Join the AI Profit Boardroom

Use Case: The Small Agency With A Headless Box

An agency might keep Hermes on a machine with no screen at all.

The Webapp suits that, because the gateway serves the full workspace and the docs say the desktop half of a plugin package is copied in by the host itself.

That means desktop plugins appear in the browser on a headless host that native Desktop never runs on.

Each client can sit in its own profile, and hermes -p work webapp opens the workspace on a named profile.

The catch is the same as always: whoever signs in gets the whole machine, so this is for the owner or one trusted operator, not the whole team.

The Risk You Have To Accept

The docs put a warning box on this, and it's the most important paragraph for any owner.

Once signed in, a person can run commands as the Hermes account on that computer, use its agent tools, open its files and Git, and get at its saved passwords and keys.

In business terms: treat a Webapp login like the keys to the office computer.

The docs say not to expose it without a sign-in provider, and to prefer an SSH tunnel, Tailscale or another trusted VPN.

The Web Access pane also warns never to forward the port from your router directly.

And if a phone with an open session goes missing, hermes webapp --sign-out closes every browser's connection in one go.

What It Costs In Time To Set Up

For one computer, setup is three commands, copied here from the docs.

hermes config set webapp.enabled true
hermes gateway restart
hermes webapp

The first build can take a few minutes.

After that, the browser opens on http://127.0.0.1:9120 using a sign-in link that works once and expires after 60 seconds.

Opening it on other devices is a Start button in Settings → Web Access in the native app, signed in with your Nous account.

The bigger time cost is a proper HTTPS route if you don't run one yet, and that's worth doing once rather than living with plain HTTP.

Which Plan Or Version You Need

Hermes Agent is open source under the MIT License, according to the official docs, and the Webapp is part of the agent itself.

The browser version needs v0.22.6 or later.

Command-line installs update with hermes update.
Docker users pull the stable image.
If you installed from the Microsoft Store, updates come through the Store.
The downloadable Desktop installer gets it with its next bundled release, according to the release notes.

The Web Access pane signs people in with a Nous account, so set one up under Providers → Accounts before you press Start.

📞 Not sure which jobs an agent should take off your plate first? Book a free SEO strategy session and my team will walk through your workflow with you. → Get your free strategy session

Where The Time Saving Really Comes From

The saving isn't speed inside the agent, since the same gateway does the same work.

It's the trips you stop making to one desk.

Scheduled jobs, artifacts and previews you'd normally check on the office screen are now a tab away.

Display settings follow you too, because one preferences file on the host feeds both the native app and every browser tab.

And because there's one queue, you're never wondering which copy of the chat is current.

Plugins Your Team Already Uses Come Along

If your business relies on a Desktop plugin, the browser tab loads it from the host's desktop-plugins folder.

You can install new ones from Capabilities → Plugins → Install in the tab, and the host installs only the exact commit the dialog showed you.

Desktop plugins aren't sandboxed, so stick to ones you trust.

For a shortlist, see our guide to the best Hermes Agent plugins.

What Stays On The Office Computer

A few features don't make the trip to the browser.

Global keyboard shortcuts, always-on-top overlays, OS-window inspection, opening an external terminal and the app updater stay in the native app.

File uploads from the browser cap at 16 MiB each, which covers most invoices, contracts and photos.

Older chats from before the gateway owned sessions show history but need hermes sessions adopt run once on the host before you can continue them.

Pick Your Access Option In Thirty Seconds

Your situation	Best option	Why
You only work at the office computer	This computer only (the default)	It stays on `127.0.0.1`, needs no extra sign-in setup, and keeps every browser feature.
You want a tablet in the same building	Web Access: This network	Fast to turn on, but plain HTTP, so only on Wi-Fi you control.
You need it on the road	Web Access: My own URL	HTTPS through Tailscale Serve, a tunnel or a proxy, with Nous sign-in in front.
You run a screenless server	My own URL, or an SSH tunnel	Keeps the host on loopback while you reach it securely.

Most owners land on the first or third row.

The middle row is a convenience, and the docs treat it as one: trusted networks only.

A One-Week Rollout Plan For Owners

Don't flip every switch on day one.

Day 1: update Hermes, turn the Webapp on for the office computer, and use it there in a browser for a day.
Day 2: run hermes webapp --status and confirm it reports the address you expect.
Day 3: set up your HTTPS route, or decide you'll only use the local Wi-Fi option.
Day 4: press Start in Settings → Web Access and sign in from your phone with your Nous account.
Day 5: run one real scheduled job and check its output from the phone.
Day 6: practise hermes webapp --sign-out so you know it works before you need it.
Day 7: write down who is allowed to sign in, and keep that list to the people you'd hand the office keys to.

By the end of the week you'll know whether the browser saves you real trips or just adds another screen.

Either answer is fine, and both are cheap to reach.

When To Leave It Switched Off

You share the computer with staff who shouldn't reach its files or saved logins.
Your only network is one customers or tenants also use.
You'd be tempted to open the port on your router to save time.
No one in the business will own the sign-in and sign-out routine.

If any of those apply, keep using the native app at the desk until they don't.

Ready to build an agent setup that runs the boring parts of your business? Start inside the AI Profit Boardroom.

Also On Our Network

FAQ: Hermes Webapp For Business

Can my staff use the Hermes Webapp?

Only people you would trust with the host computer itself. A signed-in user can run commands, open files and reach saved credentials as the account running Hermes.

Is the Webapp safe to use on shop Wi-Fi?

The This network option is plain HTTP, so use it only on a network you trust. A customer or guest Wi-Fi is the wrong place for it.

Does it replace the Hermes Web Dashboard?

No. The dashboard is a separate admin panel for settings, keys and logs, while the Webapp is the full Desktop workspace in a browser.

What do I need before turning on Web Access?

Hermes v0.22.6 or later, the native Desktop app on the host, and a Nous account signed in under Providers then Accounts.

📺 Video notes + links to the tools 👉

🎥 Learn how I make these videos 👉

🆓 Get a FREE AI Course + Community + 1,000 AI Agents 👉

About Julian

I'm Julian Goldie, an SEO entrepreneur, author and founder of the AI Profit Boardroom, which has 3,400+ members.

I help business owners scale with AI agents, automation and SEO.

I've built a 7-figure SEO and link building agency, Goldie Agency, with a team of 70+ SEO experts.
I've grown a YouTube channel to 400,000+ subscribers.
I wrote "Link Building Mastery".
My Udemy courses have taught over 29,000 students.

→ Get my best AI training inside the AI Profit Boardroom

Decide who gets the keys first, then switch it on, and if you want my team to help pick the first jobs to hand over, book a free strategy session and ask us about the Hermes webapp.