dilim/hermes-agent
1
0 Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-11-06 05:17:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(catalog): review disclosure for mqtt

Browse Source
This commit is contained in:
Teknium committed 2026-11-02 14:59:26 -08:00
1 parent f8ecf1568b
commit 6ec44d2b65
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
plugin-catalog/mqtt.yaml
+1 -1
View File
@@ -1,7 +1,7 @@
name: mqtt
repo: https://github.com/JasonSwindle/hermes-mqtt
sha: 103ec28e9e2f68b080fd8e8074d0e5a98750e06e
description: "MQTT as a Hermes platform: one authenticated broker connection, per-topic routing (deliver, agent, job, drop) and JSON replies published outside the consumed namespace; ships its own standard-library MQTT 3.1.1/5.0 client over TCP or TLS (verified by default, optional private CA/mTLS) with keepalive, reconnect and opt-in burst coalescing, and drops unmatched topics. Disclosure — holds one outbound broker connection and its reconnect loop, reads the MQTT username/password through Hermes's scoped secret route and optional TLS files at operator-provided paths, and enables trusted_inbound (the broker's authentication is the trust boundary): any publisher the broker's ACL admits can start agent turns, while payload text can never issue gateway commands; no telemetry, no shell, no writes."
description: "MQTT as a Hermes platform: one authenticated broker connection, per-topic routing (deliver, agent, job, drop) and JSON replies published outside the consumed namespace; ships its own standard-library MQTT 3.1.1/5.0 client over TCP or TLS (verified by default, optional private CA/mTLS) with keepalive, reconnect and opt-in burst coalescing, and drops unmatched topics. Disclosure — holds one outbound broker connection and its reconnect loop, reads the MQTT username/password through Hermes's scoped secret route and optional TLS files at operator-provided paths, and enables trusted_inbound (the broker's authentication is the trust boundary): any publisher the broker's ACL admits can start agent turns, and on topics you map to deliver or job it can post text to the chat you name on another connected platform or run the cron job you name, while payload text can never issue gateway commands; job and cross-platform delivery go through Hermes internals (tools.cronjob_tools, the gateway runner), so a Hermes update can disable them; no telemetry, no shell, no writes."
maintainer: JasonSwindle
tier: community
category: platform