Hermes Plant

Agent Action Safety for autonomous shell, Git, SQL, infrastructure, deploy, x402, and MCP actions: deterministic preflight, conditional review triage, signed receipts, and auditable status. Finance and validation endpoints remain available as utility tools.

Skills

• Agent Action Safety Quick Gate
  AI agent action safety: one-cent deterministic preflight for every consequential agent command. Returns risk, matched rule ids, and an exact machine-readable escalation call: full DestructGuard evidence for medium risk or the complete Action Safety workflow for high and critical risk.
  agent-safetypreflightai-agentsx402approval-routingai-agent-action-safetyloop-callableloop-callable
• Agent Action Safety Loop
  Complete AI agent action safety workflow for consequential agent actions. Runs the complete DestructGuard evidence score, conditionally creates ReviewQueue triage for high or critical risk, returns an honest allow or needs_review decision, a signed receipt, and a free 30-day status record. Human approval itself requires a connected approval system or hosted Assurance plan.
  agent-safetyapproval-workflowai-agentsx402review-triageai-agent-action-safetysigned-receiptloop-callable
• x402 Demand Provenance Check
  Deterministic provenance analysis for caller-supplied x402 payment records. Excludes duplicate transaction hashes, separates declared owner wallets from candidate external payers, measures concentration and evidence coverage, and states limitations explicitly. It does not fetch the chain or claim wallet independence.
  x402provenanceai-agentsdemand-analysisanti-sybilrevenue-opsper-analysis
• DestructGuard Command Score
  Deterministic risk scorer for autonomous-agent commands. Scores a shell, SQL, or git action for destructive, deployment, and data-mutation risk before execution and returns a risk level, the matched policy rules, and an approve-or-block recommendation. Pure rules, evidence per match, no fabrication.
  agent-safetydestructive-actionsai-agentsx402destructguardloop-callable
• ReviewQueue Agent Submit
  Submit an autonomous-agent command for paid risk triage and human-approval routing. Returns a deterministic risk decision, a request id, whether a human is required, and a recommended action — pause-and-escalate on critical risk. Evidence-backed, nothing fabricated.
  agent-safetyapproval-workflowsai-agentsx402reviewqueueloop-callable
• Payment Policy Decision API
  Preflight an x402 payment before an autonomous agent signs it. Checks resource binding, method, scheme, network, asset, amount vs expected price, payTo, facilitator, timeout, replay and idempotency readiness, metadata leakage, buyer spend limits, allow-lists, and optional service-risk signals. Returns allow / deny / needs_review with evidence-backed findings and a redacted, log-safe record. Deterministic policy engine — loop it over every payment your agent makes.
  x402payment-policyai-agentsagent-commerceagent-securityloop-callable
• Evidence Verification API
  Verify an agent-commerce evidence bundle before trusting a paid result. Checks x402 challenge, receipt, policy-decision, and service-response artifacts; endpoint, method, network, payTo, and price binding; artifact source, freshness, hashes, and synthetic-proof leakage. Returns verified / needs_review / rejected / insufficient_evidence with per-rule evidence. Deterministic — loop it over every paid call in an agent run.
  x402evidenceai-agentsverificationagent-commerceauditloop-callable
• Assurance Attest
  Signed receipt for one agent action. Post an x402 payment intent or MCP tool call (optional policy + settlement outcome) and get a canonical HMAC-signed record: binding hash, verdict, findings, and a free public verify URL third parties can check without trusting your agent's logs. Loop it after every payment or tool call to build a tamper-evident audit trail. Canonicalization hermes-stable-json-v1; org history and probes available on Assurance plans.
  assurancesigned-receiptsai-agentsx402audit-trailagent-commercecomplianceloop-callable
• MCP Server Risk Analyzer
  Analyze an MCP server manifest for security risk before install — destructive actions, over-broad scopes, sensitive-data egress, weak auth, prompt-injection surface, and permission diff. Returns per-tool, per-factor findings with severity, why, and a concrete fix (not just a score).
  mcpagent-securityai-agentsx402tool-securitymcp-riskloop-callable
• WalletGuard
  Wallet risk scoring of caller-supplied signals only: sanctions hits, exposure tags, labels, transfers, and funding context. Positive findings receive a 0-100 score; absent risk findings return riskLevel unknown and riskScore null, requiring independent evidence and review. No chain lookup, independent sanctions screening, compliance clearance, or verified wallet identity is provided.
  wallet-risk-scoringwallet-screeningai-agentsx402amlsanctionscounterparty-riskcrypto-compliancepreflightloop-callable
• EmailGuard
  Email validation API for AI agents. Validates one email per call: RFC 5322 syntax, disposable and temporary domain detection, role-based address, free-provider classification, typo suggestion (gnail.com -> gmail.com), plus-alias normalization to canonical form, and a deliverability score with per-rule evidence. Deterministic - the same record always gets the same answer - no data feed, no network calls. Loop it over your contact list to validate, dedupe, and normalize every record. Signed response receipt included.
  emailvalidationenrichmentai-agentsx402data-qualityloop-callable
• PortfolioGuard
  Deterministic portfolio risk analysis and quality scoring. Computes riskScore, riskLevel, volatility, sharpe, maxDrawdown, concentrationHHI, diversification, effectiveHoldings plus per-rule findings with fixes and sector/position breakdown. Pure math only from caller holdings and returns. No external data.
  portfolio-risk-analysisriskai-agentsx402financeportfolioscoringper-analysis
• CashflowLens
  Deterministic cash flow analysis and return analytics in one call: NPV, IRR (periodic), XIRR (dated), MOIC / DPI / TVPI, payback period, plus an optional DCF valuation (enterprise value, equity value, implied share price) with Gordon-growth or exit-multiple terminal value. Pure math from caller-provided cashflows — no market-data feed, no fabrication. Every metric is accompanied by evidence-backed findings and a signed response receipt.
  financeirrai-agentsx402dcfxirrnpvmoiccash-flow-analysiscashflowvaluationper-analysis
• WaterfallLens
  Deterministic LP/GP distribution waterfall for private equity, venture, and real estate. Allocates distributable cash through the standard tiers — return of capital, preferred return (hurdle), GP catch-up, carried-interest split — and returns the exact LP/GP split, per-tier breakdown, LP MOIC, GP carry, and effective carry %. The catch-up is solved so the GP lands at exactly its carry % of total profit. Pure math from caller-provided terms — no data feed, no fabrication.
  financewaterfallai-agentsx402private-equitycarried-interestpreferred-returnlp-gpreal-estateper-analysis
• BondLens
  Deterministic fixed-income & loan analytics. Bond mode: solve price<->yield-to-maturity, current yield, Macaulay & modified duration, and convexity from the bond's terms. Loan mode (send principal + annualRate + termMonths): level-payment amortization with monthly payment, total interest/paid, and the full schedule. Pure math from caller-supplied terms — no market-data feed, no fabrication.
  financebondai-agentsx402fixed-incomeyield-to-maturitydurationconvexityloanamortizationper-analysis
• OptionLens
  Deterministic Black-Scholes-Merton European option pricing and Greeks. Returns price, d1/d2, full Greeks (delta, gamma, vega, theta, rho) in canonical and conventional display units (vega per 1%, theta per day, rho per 1%), plus intrinsic value, time value, and moneyness. Supports continuous dividend yield. Pure math from caller-supplied parameters — no market-data feed, no fabrication.
  financeoptionsai-agentsx402black-scholesgreeksdeltagammavegathetaderivativesper-analysis
• DealAnalyzer
  Premium deal underwriting in one deterministic call: a DCF valuation (enterprise value, equity value, implied share price; Gordon-growth or exit-multiple terminal), equity returns (IRR/XIRR, NPV, MOIC, payback), a discount-rate × terminal-assumption sensitivity grid, and the LP/GP distribution waterfall on the proceeds. Pure math from caller-provided inputs — no market-data feed, no fabrication — with evidence-backed findings on every section and a signed response receipt.
  financedcfai-agentsx402valuationirrwaterfallsensitivityprivate-equityunderwritingper-analysis
• Agent Spend Assurance
  One signed preflight combining caller-supplied wallet risk signals, Payment Policy challenge validation, and internal evidence binding. Unknown wallet risk requires review, not permission to pay. No external chain-intelligence or sanctions lookup, independent screening clearance, or settlement verification is supplied.
  agent-spendx402ai-agentswallet-screeningpayment-policyevidencesigned-receiptpreflightper-analysis
• Investment Evidence Bundle
  CashflowLens return and DCF analytics plus PortfolioGuard concentration and risk scoring in one paid call, with structured internal evidence and a tamper-evident signed receipt. Pure math from caller-provided cashflows, holdings, and returns; no market-data feed and no claim that inputs are independently verified.
  investment-analysiscashflowai-agentsx402portfolio-riskdcfirrevidencesigned-receiptper-analysis

How to call

Listed in

Directories this entry was found in.