Hermes / personal integration

Gmail · Read only · Personal use

Hermes Gmail Read Only

A private email-reading integration for Hermes Agent. Search messages, read conversations, and ask questions about your mail—without giving this Gmail connection permission to change your mailbox.

What the integration does

The account owner uses Hermes Agent with the local gogcli connector to search Gmail, read individual messages, and read email threads. Retrieved information can be used to answer the owner’s questions and produce summaries.

This is a single-user installation, not a public email service. Visiting this site does not authorize access to anyone’s Google account.

A read-only permission boundary

Gmail access
https://www.googleapis.com/auth/gmail.readonly permits reading messages and mailbox metadata. Basic Google sign-in identity permissions identify the authorized account.
Available actions
Search mail, retrieve one message, and retrieve one thread.
Unavailable through this connection
Sending mail, creating drafts, changing labels or read status, archiving, trashing, and deleting messages.

The Gmail OAuth scope is the primary restriction. The local connector also exposes only the three read tools. Read-only access does not by itself prevent sensitive information from being disclosed elsewhere by an AI assistant.

Where the data goes

  1. Google → local connector. Gmail returns the messages or metadata requested for an owner-authorized task.
  2. Local connector → Hermes. OAuth credentials are stored locally using macOS Keychain. Retrieved email can appear in local conversation history, logs, or files.
  3. Hermes → configured model provider. Relevant email content may be transmitted to an AI API routing service and/or model provider to process the request. Their own retention and privacy terms also apply.

The public Vercel site hosts these static pages only. It has no mailbox backend and no OAuth callback endpoint. Read the privacy policy for access, use, storage, sharing, and revocation details.

The owner stays in control

The owner can remove the application’s access in Google Account settings. Revocation stops future authorized Gmail requests; it does not automatically erase existing Hermes history or provider records.

For support, use the support email shown on this application’s Google OAuth consent screen. This personal integration is independently operated and is not an official Google, Nous Research, or OpenClaw service.