I
Obsidian-native
Hermes lives in a side panel alongside your notes. It reads your vault with your permission — folder structure, tags, links, frontmatter — and respects every convention you already rely on.
Polleo · Product N°01
Hermes. Claude, inside your Obsidian vault.
Hermes is an Obsidian plugin that puts Anthropic's Claude inside your notes. Ask across your vault. Draft with real context. Let Claude run commands when you trust it — and block it, firmly, when you don't. Built around a two-axis security model, so convenience and protection are set independently.
§ 01 What it does
II
Claude-powered
Pick the model that fits the task. Opus 4.7 for the hardest thinking, Sonnet 4.6 for fast everyday drafting, Haiku 4.5 for near-instant answers. Switch per-conversation or per-command.
III
Your data stays yours
Your vault isn't uploaded, indexed on our servers, or used to train anything. API calls go directly from your machine to Anthropic — Polleo sits out of the data path entirely.
IV
Keyboard-first, palette-friendly
Every surface is built for how Obsidian power-users actually work: command palette entries, keybindings, a typographic feed that reads like a document — not a chat app bolted on.
§ 02 Two-axis security
Most tools make you choose between convenience and safety. Hermes doesn't.
Hermes separates permission modes (how often it asks you) from protected-pattern rules (what can never happen, no matter what). The two axes are genuinely independent — so YOLO mode can silence routine operations without ever silencing dangerous ones.
Axis 1 · Convenience
Permission modes
Choose how often Hermes asks you before acting. Strict prompts for every edit. Default lets routine edits through. YOLO silences everything — except what the guardrail says it can't.
Axis 2 · Guardrail
Protected patterns
Name the things Claude must never touch: .env files, specific vaults, git remotes, paths, commands. These rules fire regardless of permission mode — so dangerous actions always require explicit, informed consent.
The effect: you can turn auto-approve all the way up for the 95% of work that's safe, without ever lowering the bar on the 5% that matters. That's the differentiator.
§ 03 Open source
Hermes is open source under the MIT license. The full plugin lives on GitHub — read the code, file issues, send pull requests, or fork it and make it yours.
What sets Hermes apart from other Claude plugins is how it treats user protection. Safety isn't a checkbox buried in a menu; it's a full second axis, independent of convenience — so turning auto-approve all the way up never weakens the guardrails that matter.
Repositorypolleoai / hermes
LicenseMIT
HostObsidian
APIAnthropic · user key
Questions, feedback, or security reports: hermes@polleo.ai.