Connect Hermes to Conjur
Set up in minutes
Choose where it runs
On your computer through your own Hermes, or hosted in the cloud. The rest of setup adapts to your choice:
Pick what it can do in Conjur
A preset of real Conjur operations. Each one becomes a tool the agent can call, and it can't touch anything outside the list.
Connect Conjur
One sign-in. The agent acts through your account, scoped to the operations you picked.
Add your personal MCP link
The last step mints a private MCP URL for this agent and walks you through exactly this, with your real link filled in. The page flips to Connected the moment your Hermes first calls in. Hermes connects when it next starts a session.
1. Run this in your terminal
2. Answer no when asked if the server requires authentication — the link itself is the key
<your-link> is your personal server URL — setup mints it for you.
Tools Hermes gets
Conjur
15 toolsShow the authenticated account and username.
Read the latest or a retained version of a secret value.
Add a new secret value to an existing variable.
Fetch several secrets in one API call.
List accessible resources for the authenticated account.
List resources through the account resource endpoint.
List resources of a selected kind in the connected account.
Read resource metadata, permissions and versions.
Get role details, direct members or memberships.
Grant the selected role to a member.
Revoke a direct role membership.
Add policy data; omitted objects are retained and deletions are refused.
Modify policy data, including explicit delete, revoke and deny statements.
Replace a policy: existing objects omitted from this YAML will be deleted.
Read SSH public keys for a user or host.
About Hermes
Frequently asked questions
More ways to connect
Open your Hermes agent in one click.
NoClick runs Hermes for you with Conjur wired in as tools. Connect your account and run.