Skip to content

Permissions

Jump to bottom
rookiemann edited this page Mar 15, 2026 · 1 revision

Part 4: Permissions — Keeping You Safe

Hermes can interact with your computer, but you control exactly how much access it has. The permission system has five categories, each with five levels.

How to Access

Go to Tools > Permissions to open the permission panel.

Permission Categories

File Reading

Controls where Hermes can read files from.

  • Level 0 — Disabled: Cannot read any files
  • Level 1 — App Only: Can only read files inside the Hermes application folder
  • Level 2 — App + Home (default): Can read files in the Hermes folder and your user folder (C:\Users\YourName)
  • Level 3 — Anywhere: Can read any file on your computer
  • Level 4 — System: Can read system files, configuration files, and registry

File Writing

Controls where Hermes can create or modify files.

  • Level 0 — Disabled: Cannot write any files
  • Level 1 — App Only (default): Can only write files inside the Hermes folder
  • Level 2 — App + Home: Can write in the Hermes folder and your user folder
  • Level 3 — Anywhere: Can write files anywhere
  • Level 4 — System: Can modify system files (use with extreme caution)

Package Installation

Controls where software packages (Python libraries, etc.) can be installed.

  • Level 0 — Disabled: Cannot install any packages
  • Level 1 — App Only (default): Can only install into the portable Python that comes with Hermes
  • Level 2 — App + User: Can install to the portable Python and your user-level packages
  • Level 3 — System-wide: Can install packages system-wide
  • Level 4 — Admin: Can install system services and drivers

Command Execution

Controls what commands Hermes can run in the terminal.

  • Level 0 — Disabled: Cannot run any commands
  • Level 1 — App Only: Can only run commands inside the Hermes folder
  • Level 2 — App + Safe (default): Can run commands anywhere but no admin/system changes
  • Level 3 — Unrestricted: Can run any command
  • Level 4 — Admin: Can run elevated/administrator commands

File Deletion

Controls where Hermes can delete files.

  • Level 0 — Disabled: Cannot delete any files
  • Level 1 — App Only (default): Can only delete files inside the Hermes folder
  • Level 2 — App + Home: Can delete in the Hermes folder and your user folder
  • Level 3 — Anywhere: Can delete any file
  • Level 4 — System: Can delete system files (dangerous!)

Network Access

Controls what network resources Hermes can access.

  • Level 0 — Offline: No network access at all
  • Level 1 — Local Only: Can only access localhost services (LM Studio, extensions)
  • Level 2 — Web + APIs (default): Can browse web, call APIs, search online
  • Level 3 — Full Network: Can access any network resource, SSH, etc.
  • Level 4 — Full + Listen: Can open ports and accept incoming connections

Recommended Settings

For new users (safe defaults): Everything at Level 1-2. This lets Hermes work within its own folder and browse the web, but can't modify files outside the app.

For power users: Read=3, Write=2, Execute=3, Network=3. This gives Hermes wide access to help with real work.

For maximum capability: Everything at Level 3-4. Only do this if you trust the AI model and understand the risks.

Clone this wiki locally