Nous Tool Gateway: Unified Tool Access for Hermes Agent

Connect Hermes Agent to managed web search, image gen, TTS, and browser tools via one Nous subscription.

Tool Protocolsintermediate8 min readVerified Jul 27, 2026
Nous Tool Gateway: Unified Tool Access for Hermes Agent

The Nous Tool Gateway is a paid subscription feature of the Nous Portal that routes Hermes Agent tool calls for web search, image generation, text-to-speech, and cloud browser automation through infrastructure already run by Nous Research, eliminating the need for individual third-party API subscriptions. Once wired up, an agent can perform web searches and full-page extraction, generate images from nine models, produce speech via OpenAI TTS, and drive headless browser sessions, all using a single Nous Portal OAuth key and billing account.

What It Does

The Tool Gateway provides four categories of managed tools, each backed by a specific third-party service that Nous operates on behalf of subscribers:

  • Web search and extract: Agent-grade web search and full-page extraction powered by Firecrawl. The gateway handles scaling, so there are no rate limits to worry about.
  • Image generation: Access to nine image generation models under one endpoint, including FLUX 2 Klein 9B, FLUX 2 Pro, Z-Image Turbo, Nano Banana Pro (Gemini 3 Pro Image), GPT Image 1.5, GPT Image 2, Ideogram V3, Recraft V4 Pro, and Qwen Image. You can pick a model per-generation with a flag, or let Hermes default to FLUX 2 Klein 9B for speed.
  • Text-to-speech: OpenAI TTS voices wired into the text_to_speech tool. This enables dropping voice notes into Telegram, generating audio for pipelines, or narrating any content.
  • Cloud browser automation: Headless Chromium sessions via Browser Use, providing primitives such as browser_navigate, browser_click, browser_type, and browser_vision. No Browserbase account is required.

All four tool categories are pay-as-you-use, billed against your Nous subscription. You can use any combination: run the gateway for web and images while keeping your own ElevenLabs key for TTS, or route everything through Nous. The gateway operates at the tool-execution layer, not the CLI, so every interface that can call a tool (CLI, Telegram, Discord, Slack, IRC, Teams, the API server, and anything else) benefits from it transparently.

Setup

Diagram: Setup

There are three ways to enable the Tool Gateway, depending on where you are in the setup process. All commands are run in the terminal where Hermes Agent is installed.

Fresh install: one-command setup

If you are starting from scratch, run:

hermes setup --portal

This command performs three actions in one go: initiates Nous OAuth login, sets Nous as the inference provider, and turns on the Tool Gateway for all available tools.

Switching inference provider

If you already have Hermes installed and want to switch your inference provider to Nous Portal, run:

hermes model

Hermes then offers to turn on the gateway for all tools as part of the provider switch.

Per-tool enablement

For granular control, enable the gateway per-tool using:

hermes tools

This opens an interactive picker for each tool category. You can select a tool and pick "Nous Subscription" as the provider. You do not have to log in first: with hermes tools, the Nous-managed backends (Web search, Image, Video, TTS, Browser) are always listed, even if you have never signed into Nous Portal. Select one and Hermes runs the Portal login right there if you are not already authenticated. If your Nous OAuth is already active, selecting the backend enables it immediately with no extra prompt. This path only logs you in and turns on the one tool you picked; it does not switch your inference provider, and it does not prompt you to enable the gateway for every other tool.

Checking active status

To verify what is currently active, use any of these commands:

hermes portal info
hermes portal tools
hermes status

hermes portal info shows a section like:

◆ Nous Tool Gateway
Nous Portal ✓ managed tools available
Web tools ✓ active via Nous subscription
Image gen ✓ active via Nous subscription
TTS ✓ active via Nous subscription
Browser ○ active via Browser Use key

Tools marked "active via Nous subscription" are going through the gateway. Anything else is using your own keys.

Eligibility

The Tool Gateway is a paid-subscription feature. Free-tier Nous accounts can use Portal for inference but do not include managed tools. You must upgrade your plan to unlock the gateway. Some accounts are also entitled to a free tool pool, a small managed-tool allowance that covers gateway tool calls without a paid subscription. When a free pool is available, the gateway surfaces it and shows a setup prompt on first use, so you can opt in and start using managed tools right away.

Configuration Reference

Most users never need to touch configuration files directly, as hermes model and hermes tools cover every workflow interactively. The following is for writing config.yaml directly or scripting setups.

Per-tool use_gateway flag

Each tool's config block takes a use_gateway boolean. Here is an example config.yaml:

web :
  backend : firecrawl
  use_gateway : true

image_gen :
  use_gateway : true

tts :
  provider : openai
  use_gateway : true

browser :
  cloud_provider : browser - use
  use_gateway : true

Precedence: use_gateway: true routes through Nous regardless of any direct keys in .env. use_gateway: false (or absent) uses direct keys if available and only falls back to the gateway when none exist.

Disabling the gateway

To disable the gateway for a specific tool, set use_gateway: false in its config block:

web :
  use_gateway : false # Hermes now uses FIRECRAWL_API_KEY from .env

hermes tools automatically clears the flag when you pick a non-gateway provider, so this usually happens for you.

Self-hosted gateway (advanced)

If you are running your own Nous-compatible gateway, you can override endpoints in ~/.hermes/.env:

TOOL_GATEWAY_DOMAIN = your-domain.example.com
TOOL_GATEWAY_SCHEME = https
TOOL_GATEWAY_USER_TOKEN = your-token # normally auto-populated from Portal login
FIRECRAWL_GATEWAY_URL = https:// .. . # override one endpoint specifically

These knobs exist for custom infrastructure setups such as enterprise deployments or dev environments. Regular subscribers never set them.

Using individual image models

Image generation defaults to FLUX 2 Klein 9B for speed. You can override per-call by passing the model ID to the image_generate tool. The following table lists the available models and their IDs:

ModelModel IDBest for
FLUX 2 Klein 9Bfal-ai/flux-2/klein/9bFast, good default
FLUX 2 Profal-ai/flux-2-proHigher fidelity FLUX
Z-Image Turbofal-ai/z-image/turboStylized, fast
Nano Banana Profal-ai/nano-banana-proGoogle Gemini 3 Pro Image
GPT Image 1.5fal-ai/gpt-image-1.5OpenAI image gen, text+image
GPT Image 2fal-ai/gpt-image-2OpenAI latest
Ideogram V3fal-ai/ideogram/v3Strong prompt adherence + typography
Recraft V4 Profal-ai/recraft/v4/pro/text-to-imageVector-style, graphic design
Qwen Imagefal-ai/qwen-imageAlibaba multimodal

The set evolves over time. Run hermes tools and select Image Generation to see the current live list.

How It Works

The Tool Gateway operates as a routing layer between Hermes Agent and the underlying third-party APIs. When a tool call is made, Hermes checks the use_gateway flag for that tool. If true, the call is sent to Nous infrastructure, which forwards it to the appropriate backend (Firecrawl, FAL, OpenAI, Browser Use) using Nous's own API keys and billing agreements. The result is returned to Hermes as if the call had been made directly. This means the same backends are used as the direct-key route, just fronted by Nous. The gateway is per-tool, so you can mix and match: turn it on for just web and images while keeping your own keys for TTS, or route everything through Nous. You can switch any tool at any time via hermes tools. No config editing is required. If you are not logged into Nous Portal yet, picking Nous Subscription kicks off the Portal login inline.

Requirements and Limitations

  • The Tool Gateway is a paid-subscription feature. Free-tier Nous accounts can use Portal for inference but do not include managed tools. Upgrade your plan to unlock the gateway.
  • Some accounts are entitled to a free tool pool, a small managed-tool allowance that covers gateway tool calls without a paid subscription. This is surfaced by the gateway on first use.
  • If your subscription expires, tools routed through the gateway stop working until you renew or swap in direct API keys via hermes tools. Hermes shows a clear error pointing at the portal.
  • Modal (serverless terminal) is available as an optional add-on through the Nous subscription, not part of the default Tool Gateway bundle. Configure it via hermes setup terminal or directly in config.yaml.
  • You do not need to delete your existing API keys when you enable the gateway. Keep them in .env. When use_gateway: true, Hermes skips direct keys and uses the gateway. Flip the flag back to false and your keys become the source again. The gateway is not a lock-in.
  • The gateway is supported on any platform where Hermes Agent runs, as it operates at the tool-execution layer, not the CLI. Every interface that can call a tool (CLI, Telegram, Discord, Slack, IRC, Teams, the API server) benefits from it transparently.

Troubleshooting

No specific failure modes or troubleshooting steps are documented in the source material beyond the following:

  • Subscription expired: Tools routed through the gateway stop working. Renew your subscription or swap in direct API keys via hermes tools. Hermes shows a clear error pointing at the portal.
  • Free pool available but not active: The gateway surfaces the free tool pool and shows a setup prompt on first use. Opt in to start using managed tools right away.
  • Gateway not appearing in hermes tools: Ensure you have a paid subscription or a free tool pool entitlement. Free-tier accounts without a pool will not see the gateway options.
  • Self-hosted gateway not connecting: Verify that TOOL_GATEWAY_DOMAIN, TOOL_GATEWAY_SCHEME, and TOOL_GATEWAY_USER_TOKEN are correctly set in ~/.hermes/.env. The user token is normally auto-populated from Portal login, so if you are self-hosting, you must provide it manually.

Sources & References

This page was researched from 1 independent source, combined and verified for completeness.

Newsletter

The #1 AI Newsletter

The most important ai updates, guides, and fixes — one weekly email.

No spam, unsubscribe anytime. Privacy policy

Other Hermes Agent integrations