DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
FREEDOM251

Freedom251 › Blog › FastAPI

How to Set Up the Hermes Agent Web UI (Local and Remote)

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Install Hermes Agent, configure at least one model provider, and then run hermes dashboard. The dashboard normally listens only on http://127.0.0.1:9119, where you can manage configuration and API keys, inspect sessions, switch profiles, and use the embedded Chat tab. Keep that loopback-only default unless you have selected and configured an authentication provider for remote access.

The reliable order is installation, provider setup, dashboard launch, one ordinary chat, and only then optional gateways, skills, cron, voice, routing, or MCP integrations. The web UI is a management surface for the agent runtime; it does not replace a working provider or a functioning Hermes installation.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you need before opening the dashboard

Hermes Agent supports Linux, macOS, Windows, and WSL2 installation paths. You need a shell in which the hermes command can be installed and reloaded, plus credentials for at least one supported model provider. A browser is needed for the web interface. Remote use adds an authentication requirement; a publicly reachable bind without an authentication provider is not a supported setup.

Choose a scope before you install

Use case Bind and access What to prepare
Only this computer 127.0.0.1 and the default port 9119 Nothing beyond Hermes and a provider. This is the safest default because the service stays on the local machine.
A trusted network or another device A non-loopback host, such as 0.0.0.0 Select an authentication provider and configure its environment variables before exposing the service.
Hermes Desktop using a separate backend A backend URL such as http://host:9119 Set HERMES_DESKTOP_REMOTE_URL; sign in through the Gateway settings panel.

The dashboard is machine-level rather than a single-project page. It can operate with multiple profiles, but profile-specific gateway processes, session databases, and cron schedulers remain separately managed.

#1 Best Overall
CanaKit Raspberry Pi 5 Starter Kit PRO - Turbine Black (128GB Edition) (8GB RAM)
  • Includes Raspberry Pi 5 with 2.4Ghz 64-bit quad-core CPU (8GB RAM)
  • Includes 128GB Micro SD Card pre-loaded with 64-bit Raspberry Pi OS, USB MicroSD Card Reader
  • CanaKit Turbine Black Case for the Raspberry Pi 5
  • CanaKit Low Noise Bearing System Fan
  • Mega Heat Sink - Black Anodized

Install Hermes Agent

Linux, macOS, and WSL2

Run the official installer from a POSIX shell:

curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash

The installer places the source tree at ~/.hermes/hermes-agent/ on POSIX systems. Reload the shell so the command becomes available:

source ~/.bashrc

If you use Zsh, reload that file instead:

source ~/.zshrc

Check the installation by invoking Hermes, or go directly into setup:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
hermes
hermes setup

If the shell still reports that hermes cannot be found, open a new terminal after reloading the profile and check that the installer directory is on your PATH. Do not proceed to dashboard troubleshooting until the base command runs.

Native Windows PowerShell

In PowerShell, run:

iex (irm https://hermes-agent.nousresearch.com/install.ps1)

The Windows source layout documented for the installation is %LOCALAPPDATA%hermeshermes-agent. Open a new PowerShell window after installation, then run hermes or hermes setup to confirm that the command is available.

Other installation forms

The project documentation also identifies a desktop bundle, source or CLI installation, Docker, and a Termux path for aarch64 Android. Those are alternative deployment forms, not extra steps required for the local dashboard command. Whichever form you choose, finish the provider configuration and verify a normal chat before adding integrations.

Configure a model provider before launching the UI

A dashboard can open without a usable model, but its Chat tab cannot complete a conversation until a provider and model are configured. Hermes offers two principal setup routes and a minimal Blank Slate route.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Interactive provider and model selection

Run:

hermes model

Follow the interactive prompts to select a provider and model, then save the resulting configuration. This route is useful when you already know which provider credentials you want to use and want to choose the model explicitly.

Rank #2
CanaKit Raspberry Pi 5 16GB Starter Kit PRO - Turbine Black (128GB Edition) (16GB RAM)
  • Includes Raspberry Pi 5 16GB with 2.4Ghz 64-bit quad-core CPU (16GB RAM)
  • Includes 128GB Micro SD Card pre-loaded with 64-bit Raspberry Pi OS, USB MicroSD Card Reader
  • CanaKit Turbine Black Case for the Raspberry Pi 5
  • CanaKit Low Noise Bearing System Fan
  • Mega Heat Sink - Black Anodized

Nous Portal quick setup

The fastest official path is:

hermes setup --portal

This signs you in to Nous Portal, sets the provider, and enables the Tool Gateway. It is intended for a guided setup rather than manual key entry.

Quick Setup, Full Setup, and Blank Slate

The setup wizard presents three modes:

Mode What it is for Starting configuration
Quick Setup Getting a working installation with guided defaults Wizard-selected provider and standard settings.
Full Setup Choosing more of the available configuration during installation More prompts for provider, model, and tool behavior.
Blank Slate Starting with only the essentials Minimum provider/model plus file operations and terminal toolsets.

Blank Slate is a good diagnostic baseline: it limits the number of moving parts while you prove that the model can answer through Hermes. You can enable gateways, skills, voice, routing, MCP, and other features later.

Install dashboard dependencies when Hermes requests them

The web interface uses FastAPI and Uvicorn for its HTTP stack. Hermes reports what to install if those components are missing; the documented web extra supplies them. Follow the command Hermes prints rather than guessing a package version, because the required dependency set belongs to the installed Hermes release.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The first launch can also build the frontend automatically when npm is available and the frontend has not yet been built. Leave the terminal running during that first build. If automatic building cannot run, install a working Node.js/npm environment, rerun the dashboard command, and use the exact diagnostic output Hermes provides.

Start the Hermes Web UI

From the same environment where the hermes command works, run:

hermes dashboard

With no extra flags, Hermes starts a local server and opens:

http://127.0.0.1:9119

If the browser does not open automatically, copy that address into a browser on the same machine. The dashboard process must remain running while you use the UI.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
CanaKit Raspberry Pi 5 Essentials Starter Kit (4GB RAM)
  • CanaKit Raspberry Pi 5 Essentials Starter Kit

Useful launch options

Option Example Effect
Change the port hermes dashboard --port 8080 Listens on port 8080 instead of the documented default 9119.
Choose a host interface hermes dashboard --host 0.0.0.0 Binds beyond loopback so another machine can reach the server; this requires an authentication provider.
Do not launch a browser hermes dashboard --no-open Starts the server without opening a browser window.

The --insecure flag is deprecated and has no effect. It does not disable authentication requirements. A non-loopback bind still needs a configured authentication provider.

Understand the dashboard’s sections

Status and session monitoring

The status page reports the agent version and release date, gateway status, active sessions from the last five minutes, and the 20 most recent sessions. Recent-session entries include the model, message count, token usage, and a conversation preview. The status page refreshes automatically every five seconds, so it is useful for watching a gateway or chat process without manually reloading.

Configuration and API Keys

Configuration controls expose Hermes settings through the browser. The API Keys area is for managing provider credentials. Treat the dashboard like a local administration console: anyone who can use an authenticated dashboard account may be able to alter settings or invoke the agent according to the enabled tools.

Models, Skills, and MCP

Models, Skills, and MCP are separate dashboard areas for the selected profile. Keep them disabled or minimally configured until a basic chat works. This makes a provider problem distinguishable from a tool, skill, routing, or protocol problem.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Chat

Every dashboard launch includes a Chat tab. It runs the Hermes terminal interface through a PTY/WebSocket connection, giving you an in-browser conversation while retaining the agent’s normal runtime path. Use it for the first functional test rather than adding a gateway or automation first.

Profiles: one dashboard, separate configurations

The dashboard can manage multiple Hermes profiles from one machine. Configuration, API Keys, Skills, MCP, Models, and Chat follow whichever profile is selected. A profile can also be selected in the URL:

http://127.0.0.1:9119/?profile=<name>

Replace <name> with the profile name. Keep the profile identifier URL-encoded if it contains characters that have a special meaning in a URL.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
SANOOV Raspberry Pi 5 4GB Kit, 4GB RAM Single Board Computer with Active Cooler and ABS Case, Complete Raspberry Pi 5 Starter Kit for IoT Robotics Retro Gaming
  • All-in-One Complete Kit: This SANOOV RPi 5 bundle comes with Raspberry Pi 5 4GB RAM single board, active cooler, durable ABS case and screwdriver. No extra parts needed, ready to use right out of the box for beginners and hobbyists
  • Powerful Single Board Computer: Equipped with 4GB RAM and high-performance processor, delivers fast running speed for 4K playback, AI projects, programming and daily computing tasks. SANOOV for raspberry pi 5 4GB is equipped with broadcom 64 quad-core Arm Cortex A76 processor with gigabit ethernet and upgraded with IEEE 802.11ac Wi-Fi, Bluetooth 5.0 dual-band 2.4Ghz and 5Ghz and Power Over Ethernet (POE). Upgrading delivers 2-3 x speed vs Pi 4, redefining the experience
  • Efficient Active Cooler: Effectively lowers operating temperature and prevents performance throttling. Runs quietly even under long-time heavy load, ensures stable operation all day long. SANOOV RPi 5 4GB kit offer an active cooler, which combines an aluminium heatsink with a high-performance PWM fan. Active cooler is fully compatible with the Pi OS, which can effectively reduce the temperature of RPi5 and ensure its good performance during long-term high load operation
  • Sturdy ABS Protective Case: Well-fitted for Raspberry Pi 5 board, can be secured with 4 screws to effectively protect the Pi 5 motherboard from damage, reserves full access to all ports and buttons. SANOOV uses ABS material to produce the case, which has a softer texture and feel. Meanwhile, SANOOV case adopts a layered design for easy disassembly and installation. (Tip: The Case cannot install M.2 HAT Add on Board and Solid State Drive!)
  • Wide Application & Full Compatibility: Seamlessly compatible with official OS and mainstream peripheral accessories for Raspberry Pi 5. Whether you are a beginner, student, electronics hobbyist or professional developer, this all-in-one kit meets your diverse needs. It excels in IoT projects, robotics design, retro gaming devices, home media servers and other DIY creations. Backed by a large global community, you can easily find guides, technical support and shared projects online

Profiles do not merge every runtime resource. Gateway processes, session databases, and cron schedulers are managed separately for each profile. If a gateway appears in one profile but not another, first confirm the selected profile before changing credentials or restarting a process.

Verify one ordinary chat before enabling features

  1. Open the Chat tab in the dashboard.
  2. Send a normal, low-risk prompt that does not require a gateway, skill, voice function, routing rule, or MCP server.
  3. Wait for a complete response and confirm that the conversation remains visible in the session history.
  4. If the response fails, fix the provider, model, credentials, or base installation before enabling anything else.

The official quickstart rule is straightforward: if Hermes cannot complete a normal chat, do not add more features yet. Once the ordinary chat succeeds, add optional components one at a time so a later failure has a clear cause.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Expose the dashboard remotely without leaking keys

Keep loopback for local-only use

For a dashboard used on the same computer, keep the host at 127.0.0.1. The official documentation describes this mode as running entirely on your machine, with no data leaving localhost. It also avoids making an administration endpoint reachable from another device.

Choose an authentication provider before changing the host

A bind such as --host 0.0.0.0 makes the HTTP service reachable beyond loopback. Before doing that, configure one of the documented authentication choices:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Provider Relevant configuration When it fits
Nous OAuth HERMES_DASHBOARD_OAUTH_CLIENT_ID Use the Nous sign-in flow when your deployment is set up for it.
Bundled basic authentication Use the dashboard’s documented basic-auth environment variables. Suitable only for a network you trust and administer; protect the credentials and limit network exposure.
Self-hosted OIDC Use the documented self-hosted OIDC environment variables. Useful when an organization already operates an OpenID Connect identity provider.

Do not treat the deprecated --insecure switch as an access-control mechanism. It is a no-op, and it does not make a public bind safe.

Set the public URL consistently

Set HERMES_DASHBOARD_PUBLIC_URL to the URL users will actually reach. Hermes uses this value for OAuth callbacks and host/WebSocket checks. A mismatch between the externally reachable address and this variable can produce failed sign-ins or a Chat tab that cannot establish its WebSocket connection.

Connect Hermes Desktop to a remote backend

If Hermes Desktop should use a backend dashboard, set:

Best Value
RasTech Raspberry Pi 5 8GB Kit with Active Cooler and Pi5 Case
  • 【What you Get】You will get 1*Pi 5 8GB Single Board,1*RasTech Case,1*Active Cooler,1*Screwdriver,1*Installation instructions,12-month free warranty, lifetime service, 24-hour prompt and friendly response.
  • 【More Connectors】There are two USB 3.0 ports(5Gbps simultaneously) and two USB 2.0 ports, which triple total bandwidth ,support any combination of up to two cameras or displays. Peak SD card performance is doubled through support for the SDR104 high-speed mode. It provides a smooth desktop experience for you. Offer Gigabit Ethernet and a PCIe interface, along with dual-band Wi-Fi and Bluetooth 5.0/BLE wireless capability. The RasTech Pi 5 Kit use the new 27W 5.1V 5A USB-C power connector.
  • 【 Support Dual 4Kp60 Display 】Each of the two microHDMI sockets can control a 4K display at 60 Hertz, now support HDR, offering super HD video for media streaming projects. RPi 5 is the first RPi model that comes with a PCI Express port (PCIe 2.0 x1 with 500 MB/s) to attach SSDs (requires separate M.2 HAT).
  • 【 Excellent Chips And Applications】Pi 5 is a full-size Pi computer using silicon built in-house at Pi. The RP1 “southbridge” provides the bulk of the I/O capabilities for Pi 5. Pi 5 is more friendly and convenient in the development of Internet of Things, Web development, machine identification, automatic control and other electronic equipment applications and network.
  • 【 Faster CPU, Better GPU 】 Pi 5 features a Broadcom BCM2712 64-bit quad-core Arm Cortex-A76 processor running at 2.4GHz, it delivers a 2–3× increase in CPU performance relative to RaspberryPi 4. The 800MHz VideoCore VII GPU is compatible to OpenGL ES 3.1 and Vulkan 1.2, substantial uplift in graphics performance. Pi 5 Offers lightning-fast CPU speed, a PCI Express interface, a Real Time Clock (RTC) and a power button and runs significantly cooler than Pi 4.
HERMES_DESKTOP_REMOTE_URL=http://host:9119

The environment reference documents this variable for pointing Desktop at a backend. Users still sign in through the Gateway settings panel; setting the URL alone does not bypass authentication.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Remote-access checklist

  • Confirm that a local chat works before changing the host.
  • Choose OAuth, bundled basic authentication, or self-hosted OIDC.
  • Set the provider’s required environment variables before launching the dashboard.
  • Set HERMES_DASHBOARD_PUBLIC_URL to the real external address.
  • Start with the narrowest network exposure that meets your need.
  • Test sign-in and the Chat tab from the remote client before enabling optional tools.

Common setup failures and the shortest fix

hermes is not found after installation

Reload the shell profile or open a new terminal. On POSIX systems, check that you ran the appropriate source ~/.bashrc or source ~/.zshrc command. On Windows, start a new PowerShell session. Then run hermes again before attempting hermes dashboard.

The dashboard reports missing FastAPI or Uvicorn

Install the documented web extra using the command Hermes prints, then rerun hermes dashboard. Avoid installing unrelated versions manually when the application has already identified the required extra.

The first launch stalls while building the frontend

Ensure npm is installed and available on PATH. Hermes can build an unbuilt frontend automatically when npm is available. If the build fails, read the terminal error, correct the Node/npm installation, and launch the dashboard again.

The browser opens but Chat cannot answer

Return to provider setup. Run hermes model to select a valid provider and model, or use hermes setup --portal for the guided Nous Portal path. Check the selected profile, because credentials and model settings follow that profile. Do not add gateways or MCP until a plain Chat prompt succeeds.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Another service already uses port 9119

Choose an unused port, for example:

hermes dashboard --port 8080

Open the corresponding URL with the new port. If you use OAuth or a remote desktop client, update the public or remote URL settings to match the port users actually reach.

Remote users receive an authentication or WebSocket error

Confirm that an authentication provider is configured, that the host is intentionally non-loopback, and that HERMES_DASHBOARD_PUBLIC_URL matches the browser’s external URL. For profile-related confusion, add the intended ?profile=<name> selector and verify that the expected gateway and session data belong to that profile.

When to add gateways, skills, cron, voice, routing, or MCP

Add optional features only after the dashboard can complete and display a normal conversation. Enable one category at a time, perform a small test, and observe the status and recent-session panels. This sequence gives you a known-good baseline and prevents a gateway process, skill, routing rule, voice component, or MCP server from obscuring a provider or installation error.

For multi-profile machines, decide which profile owns each optional service before enabling it. The dashboard can switch the visible configuration, but profile-specific gateway processes, session databases, and cron schedulers remain independent.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A repeatable setup recipe

  1. Install Hermes with the POSIX installer or the native Windows PowerShell installer.
  2. Reload the shell and verify that hermes runs.
  3. Configure a provider with hermes model, or use hermes setup --portal.
  4. Choose Quick Setup, Full Setup, or Blank Slate according to how much configuration you want up front.
  5. Install the documented web extra if Hermes reports missing FastAPI or Uvicorn.
  6. Run hermes dashboard and open http://127.0.0.1:9119.
  7. Use the selected profile’s Chat tab to complete one ordinary prompt.
  8. Only after that succeeds, enable gateways, skills, cron, voice, routing, or MCP.
  9. If remote access is required, configure authentication and HERMES_DASHBOARD_PUBLIC_URL before using a non-loopback host.

This order keeps the dashboard simple to diagnose: first establish that Hermes is installed, then prove provider connectivity, then verify the browser interface, and only afterward expand the runtime.

Quick Recap

Bestseller No. 1
CanaKit Raspberry Pi 5 Starter Kit PRO - Turbine Black (128GB Edition) (8GB RAM)
CanaKit Raspberry Pi 5 Starter Kit PRO - Turbine Black (128GB Edition) (8GB RAM)
Includes Raspberry Pi 5 with 2.4Ghz 64-bit quad-core CPU (8GB RAM); CanaKit Turbine Black Case for the Raspberry Pi 5
$259.95
Bestseller No. 2
CanaKit Raspberry Pi 5 16GB Starter Kit PRO - Turbine Black (128GB Edition) (16GB RAM)
CanaKit Raspberry Pi 5 16GB Starter Kit PRO - Turbine Black (128GB Edition) (16GB RAM)
Includes Raspberry Pi 5 16GB with 2.4Ghz 64-bit quad-core CPU (16GB RAM); CanaKit Turbine Black Case for the Raspberry Pi 5
Bestseller No. 3
CanaKit Raspberry Pi 5 Essentials Starter Kit (4GB RAM)
CanaKit Raspberry Pi 5 Essentials Starter Kit (4GB RAM)
CanaKit Raspberry Pi 5 Essentials Starter Kit
$189.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

FastAPIHermes Agentmodel providersNous PortalRemote AccessUvicornweb dashboard

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.