The Hermes Webapp is the Hermes Desktop workspace running in a normal browser tab, served by the Hermes gateway on its own listener. Turn it on with hermes config set webapp.enabled true, restart the gateway, then run hermes webapp. It opens at http://127.0.0.1:9120 by default.
📺 Watch: NEW Hermes Inside AgentOS is a Game Changer!
🔥 Get the Agent OS as a free bonus: AI Profit Boardroom members get the full Agent OS zip, prompt libraries, daily tutorials and weekly live coaching calls. → Get inside
Nous Research shipped it in Hermes Agent v0.22.6, published on 2 November 2026. The release notes describe "the Webapp served from the gateway's own listener", plus a Desktop Web Access pane to open it on your network or your own URL behind Nous sign-in, and Desktop plugins loading in a browser tab.
This page covers what the Webapp is, how to open it, how to reach it from your phone, and how it differs from the older dashboard.
What the Hermes Webapp is
The Hermes docs list what you get in the browser: sessions, profiles, Capabilities, Messaging, Artifacts, scheduled jobs, the host file tree, Git review, previews and the terminal rail. In short, the Desktop app, minus the native window.
The docs are clear on one point: this is not the Web Dashboard. The dashboard is a separate tool you start with hermes dashboard. The Webapp is the full Desktop workspace.
Chats run on the same gateway that serves the CLI, the native Desktop app and your messaging platforms. Per the docs, every surface sees one conversation with one queue. Start a task on your laptop, check it from a browser on another machine, reply from Telegram. It is all the same session.
Want to set Hermes up as a full agent system for your business? The AI Profit Boardroom has the training, templates and weekly calls for $69/mo.
How to open the Hermes Webapp
- Update Hermes. CLI users run hermes update. Docker and Hermes Cloud use the stable image. The Microsoft Store app updates through the Store. The Desktop installer app gets this with the next bundled release.
- Run hermes config set webapp.enabled true. It is off until you turn it on.
- Run hermes gateway restart. The gateway reads the Webapp settings when it starts.
- Run hermes webapp.
That last command builds the Webapp bundle when it is out of date, starts the gateway if it is not running, and opens a one-use sign-in link. The link is valid for 60 seconds and works once. Your browser swaps it for a sign-in it keeps in that tab, so reloading keeps you signed in. A fresh tab shows instructions instead: run hermes webapp again for a new link.
For a named profile, hermes -p work webapp opens the Webapp on the work profile.
📺 Watch: New Hermes Agent OS Just Changes EVERY THING!
Hermes Webapp settings: host, port and public_url
The Webapp has four settings under webapp in config.yaml. Here is what each one does, from the Hermes configuration docs.
| Setting | Default | What it does |
|---|---|---|
| enabled | false | True makes the gateway serve the Webapp. Restart the gateway after changing it. |
| host | 127.0.0.1 | 127.0.0.1, ::1 or localhost keeps it on this machine. 0.0.0.0 or :: opens it to other machines and needs a sign-in provider. |
| port | 9120 | Fixed, so the browser address stays the same across restarts. A standalone profile needs its own port. |
| public_url | empty | The address a reverse proxy or tunnel serves it at. Turns on sign-in even on a loopback host. |
Any other host value, including another loopback address like 127.0.0.2, keeps the Webapp off. A public_url must be a plain http or https address with no credentials, query or fragment. The dashboard's own public_url never applies to the Webapp.
📺 Watch: NEW Hermes AI Computer Update is INSANE!
Hermes Webapp on your network: loopback vs network host
On loopback, only your own computer can reach the Webapp, and the one-use link handles sign-in.
To reach it from another machine, set the host to 0.0.0.0. The gateway then requires a dashboard sign-in provider: username and password for a trusted LAN or VPN, OAuth or OIDC for anything facing the internet. Without one, the gateway keeps serving native clients only and hermes webapp --status tells you why.
Behind a reverse proxy or tunnel you run, keep the loopback host and set public_url instead. That needs the same sign-in.
The docs carry a clear warning here. A signed-in Webapp user can run commands as the OS account running Hermes, use host files and Git, and reach that account's credentials. Never expose it without a sign-in provider. Nous Research recommends an SSH tunnel, Tailscale or another trusted VPN.
Plain HTTP also costs you features. On a non-loopback HTTP address, browsers turn off the bot screen viewer, the microphone for dictation and live voice, clipboard reads, and system notifications. HTTPS through public_url, or an SSH tunnel to 127.0.0.1, keeps them.
Hermes Webapp from the Desktop: Settings, Web Access
In the native Desktop app, Settings, Web Access turns the Webapp on for other devices, behind sign-in with your Nous account. Only the native app on its local connection can change it. A browser signed in over the network cannot.
- This network: devices on the same Wi-Fi open your computer's address on the Webapp port. It is plain HTTP, so use it only on a network you trust.
- My own URL: an HTTPS address you already run, such as Tailscale Serve, a tunnel or a reverse proxy, forwarding to 127.0.0.1 on the Webapp port. It is saved as public_url. The docs say never forward that port from your router directly.
Pressing Start builds the Webapp if needed, registers its sign-in address with your Nous account, saves the settings and restarts the gateway. If a chat is running, the pane shows Restart needed and applies the change once the chat ends. For a standalone profile with no port set, Start picks the first free port above 9120 that no other profile uses.
Want help picking the safest way to reach Hermes from your phone? Book a free AI strategy session.
Hermes Webapp in Docker and other limits
The Docker image ships the Webapp prebuilt. Turn it on in the mounted config.yaml, publish port 9120 and set up a sign-in provider, as for the dashboard. Set public_url to the address your browser opens. Without it, links printed by hermes webapp inside the container use the container's own address.
Other limits from the docs:
- Uploaded files and pasted images are capped at 16 MiB each.
- Detached terminal shells are kept for 15 minutes, up to 16 host terminals.
- Global shortcuts, always-on-top overlays, OS-window inspection, external-terminal launch and the updater stay in the native app.
- Older chats need hermes sessions adopt once before you can continue them in the browser.
- hermes webapp --sign-out signs out every browser at once.
Hermes Webapp vs the dashboard and older web UIs
Hermes has had browser views before. The hermes dashboard command runs a separate web dashboard. Community projects filled the gap too, covered in our Hermes Agent web UI guide. The Webapp is different: it is the official Hermes Desktop app workspace, served by the gateway itself, on the same sessions and queue.
Not sure whether the Webapp, the dashboard or the native app suits your team? Get a free AI strategy session and we will walk through it.
If you run several agents from one control layer, the Agent OS guide shows how the Webapp fits next to your other tools. For model choice behind it, see Julian's own testing at Goldie Bench.
Hermes Webapp FAQ
Is the Hermes Webapp the same as the Hermes dashboard?
No. The docs say the Webapp is not the Web Dashboard. The Webapp is the full Desktop workspace in a browser, served by the gateway.
What port does the Hermes Webapp use?
9120 by default, at http://127.0.0.1:9120. Change it with webapp.port in config.yaml.
How do I check if the Webapp is running?
Run hermes webapp --status. It shows whether the gateway serves the Webapp, at which address, and why not when it cannot.
Do I get it in the Desktop installer app today?
Not yet. The v0.22.6 notes say the .exe and .dmg Desktop app updates with the next bundled release. CLI, Microsoft Store, Docker and Hermes Cloud have it now.
Ready to run Hermes from any device as part of a real business system? Join the AI Profit Boardroom, or grab a free AI strategy session to plan your setup.
