Skip to content
Mordred

Features

What you can do with Mordred.

Mordred is a privacy plugin for the Hermes agent. Install it once and use these features from Hermes Desktop or the terminal.

Private AI

Use every feature privately

Pair Mordred with a Venice private model or a local model on your Mac. In strict mode, requests to any AI you didn't allow are refused, and on macOS memory and .env stay encrypted.

  • Works with Venice private or local models
  • Requests to AI you didn't allow are refused in strict mode
  • Memory and .env encrypted on macOS
Set up a private AI

Model requests

strict
  • Venice private api.venice.ai Allowed
  • Local model 127.0.0.1 Allowed
  • OpenAI api.openai.com Blocked
llm_guardkeyvault

Hermes Desktop

Use it right inside Hermes Desktop

Ask Hermes chat to install Mordred, restart the app, and a Mordred page appears in the sidebar. Encryption, Telegram and uninstall are all on that page.

  • Install by asking Hermes chat
  • Turn on memory encryption with a checkbox
  • Uninstall from the same page
Add Mordred to Hermes Desktop
The Hermes Desktop sidebar with Mordred listed below New session, Capabilities, Messaging, Artifacts and Scheduled jobs.The Mordred page in Hermes Desktop with a Venice private chat model, the Secure Enclave, Hermes memory encryption, and a Venice private or local question model all checked.
wizard

Telegram · preview, macOS

Import your Telegram chats and ask about them

Import recent chats into an encrypted, read-only archive on your Mac, then ask Hermes what was planned or promised.

  • Message text goes only to Venice private or local models
  • No file, skill or memory writes after reading
  • Large groups and archived chats are skipped
Import your Telegram chats

What did I promise Tanaka this week?

Reading encrypted archive…

You promised to send the estimate by Friday (chat on Oct 1).

Archive
✓ Encrypted · read-only
Answered by
✓ Venice private
Writes
✓ None
e2ekeyvault

Slack & Discord

Encrypt your Slack and Discord chats with Hermes

In channels you bind to end-to-end encryption, your commands and Hermes's replies travel as ENC:v3 ciphertext, so the gateway never sees plaintext. The Mordred browser extension from the Chrome Web Store lets you read and write them in your browser.

  • Keys bound to the channel and thread
  • Plaintext commands in a bound channel are refused
  • Other channels keep working as before
Add to Chrome Extension guide

# ops

What Slack sees

ENC:v3:q9Lf2xR…7cWm

What you see

Summarize today's deploy log

3 deploys, 1 rollback at 14:02. No errors since.

e2e

More features

Safeguards that work in the background

Once Mordred is on, these work in the background without extra steps.

Use only the AI you approved

In strict mode, requests go only to allowlisted providers and endpoints. Anything else is refused before it leaves.

llm_guard
Docs

Choose the network route

Send model calls directly, over Tor or through your VPN. In strict mode, a route that is down or has drifted is refused.

network
Docs

Keep keys and memory on your device

Keys stay in the Secure Enclave or TPM and can't be exported. On macOS, Hermes memory and .env are kept encrypted.

keyvault
Docs

Check skills and tool internet use

Skills installed with hermes-mordred install are checked first. Tools ask before internet use beyond web search.

privacy_check
Docs

Set up again or remove cleanly

Setup can be re-run and skips finished steps. Uninstall decrypts your files first and stops if it can't.

wizard
Docs

One plugin for all these features

Mordred brings these privacy features together in Hermes. Enable or disable them together with a single plugin.

Start with AI Setup.

The 7-step guide installs Hermes Desktop with Mordred and imports your Telegram chats.

AI Setup See use cases