Hermes Agent for customer support scores 7.4 out of 10 from me: excellent as a back-office assistant that sorts and drafts, weak as anything that speaks to customers unattended.
The gap is simple. Hermes guards risky commands with approvals, but nothing in the docs holds an outgoing message for a human check.
Below is the full scorecard, ten support jobs rated from the official documentation, then strengths, limits, who it suits and the final call.
Want a second opinion on your own support stack? Book a free SEO strategy session.
The Verdict In One Paragraph
Use Hermes if your support lives in email, Slack or Telegram, your answers are written down, and someone will approve drafts every day.
Pass on it if you run Zendesk, need replies going out around the clock with nobody checking, or have nobody to look after a self-hosted install.
These ratings are my editorial judgment from reading the Hermes Agent docs and the catalogs at v0.23.0, not a lab test.
Each score comes with its reason, so you can disagree on the facts.
The Scorecard: Ten Support Jobs Rated
| Support job | Score | Why, from the docs |
|---|---|---|
| Inbox triage on a schedule | 8/10 | Bundled himalaya and email-inbox-triage skills plus cron; reading and sorting need no outbound step. |
| Direct email replies to customers | 5/10 | The gateway replies in-thread by itself; no approval step holds the reply. |
| Channel coverage | 9/10 | One gateway covers Slack, Teams, Telegram, WhatsApp, SMS, email and more. |
| Policy answers from skills | 9/10 | Skills load on demand, and skill edits can be gated behind approval. |
| Human handoff | 7/10 | Bot Mode escalates to you with @user; chat handover needs a custom hook. |
| Help-desk integrations | 6/10 | Freshdesk community plugin and Intercom MCP only; no Zendesk. |
| Outbound safety controls | 6/10 | Untrusted MCP servers and some plugins ask first; core messaging does not. |
| Access control | 9/10 | Allowlists, pairing codes and polite declines per platform. |
| Scheduled summaries | 9/10 | Cron delivers to any configured chat; dangerous commands denied by default. |
| WhatsApp for customers | 6/10 | Official API works but needs Meta setup and templates after 24 hours. |
Add those up and divide by ten and you get 7.4.
I weighed four things for each row: how safe the default is, how much setup a small team faces, how clearly the docs explain it, and how often a typical support team would use it.
A 9 means a careful non-specialist could set it up from the docs.
A 5 means it works, but I wouldn't let it near a customer as documented.
Middle Score: Human Handoff Works, With Caveats
Handing a conversation to a person is possible in two documented ways, and neither is a one-click switch.
In Bot Mode, Bots escalate real judgment calls to you with @user, and the group chat shows a "needs you" badge until you respond.
Gateway group chats keep running when the desktop app is closed, so an escalation doesn't vanish overnight.
For live customer chat, the hooks page lists human handover as a use for the pre_gateway_dispatch hook, which can take in customer messages silently while the owner answers by hand.
That hook is plugin code, though, so a non-developer can't set it up from a settings screen.
Good design, real gaps for small teams: a 7.
Strength: One Gateway Reaches Every Channel Your Customers Use
The messaging gateway page lists about twenty platforms, from Telegram, WhatsApp, Slack and Microsoft Teams to Signal, SMS through Twilio, email and a browser chat.
It runs as a single background process that handles sessions, cron jobs and voice messages for all of them at once.
Version 0.23.0 tightened this further: each machine now runs one gateway that owns every session, so the desktop app, the terminal and a messaging bot all see the same conversation.
The release notes say that change fixes messages being written twice or going missing between surfaces.
For a support team, that means a draft started in Slack and finished at a desk is one thread, not two.
Channel coverage gets a 9 because almost any small business already uses at least one of these apps.
Strength: Access Control Is Closed By Default
This is where Hermes earns trust.
The email page says that with no allowlist set, unknown senders are ignored silently, and with decline they get one polite refusal, then nothing for 24 hours.
The security page adds DM pairing: a stranger gets an 8-character code and stays locked out until the owner approves it from the command line.
Email goes further, acting only on mail whose sender domain authenticates through DMARC or aligned SPF/DKIM.
For a support desk, this means a forged message from a "customer" can't steer the agent.
Strength: Your Policies Become Reusable Skills
A refund policy, a shipping table and a tone guide can live in one skill that loads only when a ticket needs it.
Slack can preload a skill whenever a session starts in a channel, and the Slack docs name a support triage channel as a fitting use.
The catch, which the docs state plainly, is that the agent may edit or delete any skill.
The fix is equally documented: skills.write_approval: true stages every edit for review.
That pairing of a strong default and a clear off-switch is why skills score 9.
🔥 See how members score and set up their support agents Inside the AI Profit Boardroom you get step-by-step video trainings, the installable Agent OS, four coaching calls a week and 3,400+ members sharing what holds up in real inboxes. → Join the AI Profit Boardroom
Strength: Scheduled Summaries Are Low-Risk And Useful
A daily or weekly support report is the job Hermes does best with the least supervision.
Cron accepts plain-English schedules, attaches skills to the job, and posts results to the origin chat, local files or any configured platform.
Unattended jobs deny dangerous commands by default through cron_mode: deny.
Because the report goes to the owner rather than a customer, the missing message approval doesn't matter here.
Limit: Nothing Checks An Outgoing Message
This is the reason the overall score isn't higher.
Hermes approvals are built for dangerous shell commands. The documented switch, approvals.mode, doesn't cover a reply to a customer.
The webhooks page advises keeping approvals on for outbound operations, but that's advice; no setting provides it for chat or email.
There are three opt-in exceptions.
An MCP server marked trust: untrusted asks before each write-capable call, per the MCP config reference.
The Freshdesk plugin sends its write tools through Hermes human approval.
And Nous Research's labs plugin for Telegram Business, hermes-telegram-business, DMs you each draft with Send, Edit and Discard, so nothing reaches a customer until you tap Send.
Outside those, write "draft only" into every support job.
Limit: Few Help Desks Are Covered
Only two help desks have a dedicated catalog entry.
Freshdesk is a community plugin from an outside maintainer, and its entry says it isn't a Freshworks product.
Intercom is a Nous-reviewed MCP catalog entry that connects to Intercom's own hosted server.
Zendesk, Help Scout and Chatwoot have no entry, so teams on those tools are left with email forwarding or building something custom.
That's why help-desk integrations get a 6.
Limit: Customer-Facing WhatsApp Takes Paperwork
The WhatsApp Cloud API page lists a Meta Business account, a dedicated business number and a public HTTPS address before anything works.
Replies more than 24 hours after a customer's last message need a pre-approved template, a Meta rule rather than a Hermes one.
The alternative Baileys bridge needs none of that, but the docs call it unofficial and ban-prone, so I wouldn't run a business line on it.
There's also a community whatsapp-agent-platform plugin for Meta's WhatsApp Agent Platform API, which by default only lets the agent's creator message it.
Limit: You Own The Upkeep
Hermes is open source under the MIT license, published on GitHub, and it runs on hardware you control.
That's a plus for data control and a cost in attention.
Someone has to install updates, re-read the release notes, and check that allowlists, approvals and skill gates are still set the way you left them.
Catalog plugins add another layer, since the plugin catalog docs mark most entries as community tier: human-reviewed before they're listed, but maintained by their own authors.
None of this is unusual for self-hosted software, but it belongs in the score.
A team without a technical owner will feel it more than the feature list suggests.
The Setup I'd Recommend If You Go Ahead
- Start with scheduled triage that reads and sorts, delivered to a staff-only channel.
- Move your FAQ and policies into one skill, with skill-write approval switched on.
- Add drafting in a private channel, with "draft only" written into every prompt.
- Connect Freshdesk or Intercom only once drafts are reliable, with every write behind an approval.
- Add a customer-facing channel last, and only through a draft-and-approve route such as the Telegram Business labs plugin.
Follow that order and every row you rely on is one that scores 8 or 9.
Who Should Use It, And Who Shouldn't
Use it if you are
- A shop or studio on Freshdesk or Intercom that wants a reader and drafter behind the team.
- A service business whose questions arrive by email and whose answers already sit in a policy document.
- An agency that runs client support in Slack and wants drafts in an internal channel.
- A salon or clinic on Telegram Business that's happy to tap Send on every reply.
Pass on it if you are
- Teams on Zendesk, Help Scout or Chatwoot that want the agent working inside the help desk.
- Anyone after a fully unattended reply bot.
- A business with no one to own the install, the updates and the weekly check.
📞 Want us to score your support setup the same way? Book a free SEO strategy session and we'll go through your channels, your help desk and your policies with you. → Book the free session
How it compares with a hosted assistant
No official source compares Hermes with hosted support assistants, so this is my reading of each tool's docs.
Hermes gives you control, your own hardware and a wide channel list; a hosted assistant gives you less setup.
Our Grok Bot for customer support verdict rates the hosted side with the same approach.
Final Verdict
7.4 out of 10: buy it as a triage desk and draft writer, not as a reply bot.
Start with the 8 and 9 rows, keep a person on every send, and add help-desk writes only behind an approval.
If you want the trainings and the Agent OS to set it up, the AI Profit Boardroom has both.
Also On Our Network
- 🌐 The 8-step draft-only help desk setup, config blocks included
- 🌐 Six small-business support jobs and the risks an owner should weigh
- 🌐 Five copy-paste draft-only prompts for a support desk in your Agent OS
- 🌐 Which AI model to pin to triage, drafts and hard support cases
- 🌐 The complete Hermes Agent for Customer Support guide on the AI Profit Boardroom blog
FAQ: Hermes Agent For Customer Support Verdict
What overall score does Hermes get for customer support?
7.4 out of 10 here, the average of ten support-job scores based on the official docs and catalogs at v0.23.0.
Why do direct email replies score only 5?
The email gateway replies in-thread without a review step, and Hermes has no built-in approval for outgoing messages.
Which support job scores highest?
Channel coverage, policy skills, access control and scheduled summaries each score 9, because the defaults are safe and the setup is documented.
Is the Freshdesk plugin made by Freshworks or Nous?
Neither. It is a community plugin from an outside maintainer, and its catalog entry says it is not a Freshworks product.
📺 Video notes + links to the tools 👉
🎥 Learn how I make these videos 👉
🆓 Get a FREE AI Course + Community + 1,000 AI Agents 👉
About Julian
I'm Julian Goldie, an SEO entrepreneur, author and founder of the AI Profit Boardroom, which has 3,400+ members.
I help business owners scale with AI agents, automation and SEO.
- I've built a 7-figure SEO and link building agency, Goldie Agency, with a team of 70+ SEO experts.
- I've grown a YouTube channel to 400,000+ subscribers.
- I wrote "Link Building Mastery".
- My Udemy courses have taught over 29,000 students.
→ Get my best AI training inside the AI Profit Boardroom
Score your own support jobs against this table, and book a free strategy session if you want a second view before you commit to Hermes Agent for customer support.
