// SCAN REPORT

Hermes Computer Use

38 tools. 31 can modify or destroy data without limits.

31 write tools that can modify data. Rate limits recommended.

Last updated: 30 Jun 2026

31 can modify or destroy data

7 read-only

38 tools total

Community server · catalogue entry verified 30/06/2026

How to control Hermes Computer Use ↓

TOOL MAP

What Hermes Computer Use exposes to your agents

Read (7) Write / Execute (31) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Hermes Computer Use tools

Execute · Medium clear_field This tool executes OS-level input actions (select all + delete keystrokes) against a live browser. Execute · High dom_wait dom_wait executes a polling operation that waits for page state changes and can trigger subsequent actions. Execute · High new_tab This tool executes browser operations that can load arbitrary URLs and trigger page scripts/third-party content execution. Execute · Critical run_shell Shell command execution is a classic Execute-category capability with critical severity due to unrestricted blast radius.

31 of Hermes Computer Use's 38 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Hermes Computer Use

PolicyLayer is an MCP gateway — it sits between your AI agents and Hermes Computer Use, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "clipboard_set": {
    "limits": [
      {
        "counter": "clipboard_set_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "clipboard_get": {
    "limits": [
      {
        "counter": "clipboard_get_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Hermes Computer Use — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON HERMES COMPUTER USE →

Instant setup, no code required.

FULL CATALOGUE

All 38 Hermes Computer Use tools

EXECUTE 26 tools

Execute back Browser back (alt+Left). Execute clear_field Select all text in the focused widget and delete it. Handy before Execute dom_click Click the element matching the CSS selector. Faster and more Execute dom_eval Evaluate arbitrary JavaScript in the page context and return the Execute dom_type Set the value of an input / textarea / contenteditable matching the Execute dom_wait Poll until the selector matches at least one visible element, or Execute double_click Move to (x,y) then double left-click. Execute drag Press-and-hold left button at (x1,y1), drag to (x2,y2), release. Execute forward Browser forward (alt+Right). Execute hold_key Hold a key down for ms milliseconds, then release. Same key naming Execute left_click Move to (x,y) then single left-click. Execute middle_click Move to (x,y) then single middle-click (typically opens link in new tab). Execute move Move the cursor to (x,y). Set human=False for an instant jump. Execute new_tab Open a new Chrome tab to url. Execute open_url Focus Chrome's address bar and load a URL. Execute paste Paste the clipboard into the focused widget (ctrl+v). Execute press_key press_key Execute redo Redo the last undone edit (ctrl+shift+z). Execute reload Reload page. hard=True for ctrl+shift+R. Execute right_click Move to (x,y) then single right-click. Execute run_shell Run a shell command inside WSL (for ops like ls, curl, file ops). Execute scroll Scroll wheel at cursor (or at given x/y if provided). amount = click count. Execute select_all Select all content in the focused widget (ctrl+a). Execute type_text Type unicode text into whatever widget currently has focus. Execute undo Undo the last edit in the focused widget (ctrl+z). Execute wait Sleep for ms milliseconds (useful to wait for page loads/animations).

WRITE 5 tools

Write clipboard_set Put text on the system clipboard (useful when type_text would be too Write close_tab Close the active Chrome tab (ctrl+w). Write copy Copy the current selection to clipboard (ctrl+c). Write cut Cut the current selection to clipboard (ctrl+x). Write network_capture network_capture

READ 7 tools

Read clipboard_get Read the current clipboard text. Read console_messages Capture console.log / warn / error / info and uncaught exceptions Read cursor_position Return the current mouse cursor (x,y). Read dom_exists True if at least one element matches the selector. Zero-round-trip Read dom_query Read text content (default) or a named attribute from the first Read screen_info Return the virtual display geometry and backend settings. Read screenshot Capture the current Xvfb screen and return it as a PNG image.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Hermes Computer Use

How do I prevent bulk modifications through Hermes Computer Use? +

The Hermes Computer Use server has 5 write tools including clipboard_set, close_tab, copy. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Hermes Computer Use.

How many tools does the Hermes Computer Use MCP server expose? +

38 tools across 4 categories: Destructive, Execute, Read, Write. 7 are read-only. 31 can modify, create, or delete data.

How do I enforce a policy on Hermes Computer Use? +

Register the Hermes Computer Use MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Hermes Computer Use tool call.

Deterministic rules across all 38 Hermes Computer Use tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HERMES COMPUTER USE →

Instant setup, no code required.

38 Hermes Computer Use tools catalogued and risk-classified — across an index of 43,000+ MCP servers.