dilim/hermes-agent
1
0 Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-11-06 05:17:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(catalog): review disclosure for webly

Browse Source
This commit is contained in:
Teknium committed 2026-10-25 13:03:38 -07:00
1 parent 19b3a863db
commit a776a328f9
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
plugin-catalog/webly.yaml
+1 -1
View File
@@ -3,7 +3,7 @@ title: Webly
repo: https://github.com/Webly-AI/webly-plugin
sha: e952ff954b23a2ea564e784e9807cc274fa9ba8b
subdir: hermes
description: "Publish a website, or share files and folders, at a live *.webly.site URL from Hermes Agent with no account, then sign in to claim it, edit it, and publish drafts the person approves through the hosted Webly MCP server (Streamable HTTP). Portable Agent Plugins v1 package (plugin.json + mcp.json + skills/). Disclosure — MCP tool calls go to api.webly.ai/v1/mcp, sending WEBLY_API_KEY as a bearer header when it is set. The bundled webly skill runs a local Node.js 20+ helper (scripts/webly.mjs) through the shell: it uploads only the files and folders the person asks to publish or share to api.webly.ai (sites are public unless password-protected), runs the project's npm/pnpm/yarn install and build first when the folder has a build script, opens the browser for sign-in and claim, and keeps its anonymous-site token and optional OAuth sign-in in ~/.webly (mode 0600). Its doctor command reads ~/.claude.json, ~/.claude/settings.json and ~/.codex/config.toml only to see whether a webly MCP server is configured there. Publishing, deleting and replacing sites are gated by skill instructions, not by Hermes approvals. The catalog copy has no update check."
description: "Publish a website, or share files and folders, at a live *.webly.site URL from Hermes Agent with no account, then sign in to claim it, edit it, and publish drafts the person approves through the hosted Webly MCP server (Streamable HTTP). Portable Agent Plugins v1 package (plugin.json + mcp.json + skills/). Disclosure — MCP tool calls go to api.webly.ai/v1/mcp, sending WEBLY_API_KEY as a bearer header when it is set, and the webly server is marked untrusted so Hermes asks before each Webly MCP tool that changes something. The bundled webly skill runs a local Node.js 20+ helper (scripts/webly.mjs) through the shell: it uploads only the files and folders the person asks to publish or share to api.webly.ai (sites are public unless password-protected), runs the project's npm/pnpm/yarn install and build first when the folder has a build script, opens the browser for sign-in and claim, and keeps its anonymous-site token and optional OAuth sign-in in ~/.webly (mode 0600). Its doctor command reads ~/.claude.json, ~/.claude/settings.json and ~/.codex/config.toml only to see whether a webly MCP server is configured there. Publishing, deleting and replacing sites through that helper are gated by skill instructions, not by Hermes approvals. The catalog copy has no update check."
maintainer: Webly
tier: community
category: tools