Connect Hermes to Open Policy Agent
Set up in minutes
Choose where it runs
On your computer through your own Hermes, or hosted in the cloud. The rest of setup adapts to your choice:
Pick what it can do in Open Policy Agent
A preset of real Open Policy Agent operations. Each one becomes a tool the agent can call, and it can't touch anything outside the list.
Connect Open Policy Agent
One sign-in. The agent acts through your account, scoped to the operations you picked.
Add your personal MCP link
The last step mints a private MCP URL for this agent and walks you through exactly this, with your real link filled in. The page flips to Connected the moment your Hermes first calls in. Hermes connects when it next starts a session.
1. Run this in your terminal
2. Answer no when asked if the server requires authentication — the link itself is the key
<your-link> is your personal server URL — setup mints it for you.
Tools Hermes gets
Open Policy Agent
16 toolsList all loaded policy modules (also the connection proof).
Read a policy module and its AST.
Create or replace a Rego policy module.
Delete a loaded policy module.
Read a base or virtual document without input.
Evaluate a decision with input wrapped in the v1 input envelope.
Evaluate the v0 decision endpoint with an unwrapped input document.
Create or replace base data at a document path.
Apply an atomic JSON Patch to base data.
Delete base data at a document path.
Evaluate the instance's default decision using a raw input object.
Execute an ad hoc Rego query using GET.
Execute a complex ad hoc Rego query using POST.
Partially evaluate a query with specified unknowns.
Read OPA health, optionally checking bundles and plugins.
Read the active instance configuration (OPA masks private keys).
About Hermes
Frequently asked questions
More ways to connect
More tools for Hermes
Use Open Policy Agent with other agents
Open your Hermes agent in one click.
NoClick runs Hermes for you with Open Policy Agent wired in as tools. Connect your account and run.