Hermes Agent for sales scores 7.2 out of 10 from me, rated job by job from the official documentation for Hermes v0.23.0.
It's excellent at the quiet work behind a sale: scheduled follow-up drafts, call briefs and alerts in the chat your reps already use.
It's weakest at the loud part: there's no built-in approval for outgoing messages, and the CRM list is short.
Want my team's take on whether it fits your pipeline? Book a free SEO strategy session.
Use Hermes for sales if you want a self-hosted assistant that prepares the work and leaves the sending to people.
Skip it if your pipeline lives in HubSpot, Pipedrive or GoHighLevel and you need the agent to write there.
The ratings are my editorial judgement from reading the Hermes Agent docs and the v0.23.0 catalogs, not a lab test.
Every score below comes with a one-line reason, so you can argue with the facts rather than the number.
The Scorecard
| Sales job | Score | Why, from the docs |
|---|---|---|
| Follow-up scheduling | 9/10 | Plain-English or cron schedules, skills attached, output delivered to a chat, a file or email. |
| Rep access from chat | 9/10 | One gateway covers Slack, Teams, Telegram, SMS, email and more, with per-platform allowlists. |
| Lead research | 8/10 | A real browser tool plus subagents for long lists; quality depends on the skill you write. |
| Inbound lead triggers | 8/10 | Signed webhooks that can fire an existing scheduled job; needs a reachable server and config edits. |
| Internal email desk | 7/10 | Works with any IMAP/SMTP host, but needs a dedicated account, an app password and an authserv pin. |
| Outreach drafting | 7/10 | Drafts are easy to request; review cards exist only as a Desktop community plugin. |
| Team of sales Bots | 7/10 | Named Bots with their own model, memory and skills, but the setup lives in the Desktop app. |
| CRM connections | 6/10 | Attio and Close via MCP, Twenty CRM via a community plugin; no HubSpot, Pipedrive or GoHighLevel. |
| Cold email compliance | 6/10 | A community plugin checks recipients against several national laws, but sends addresses to its own service. |
| Sending safety | 5/10 | Approvals cover dangerous commands and untrusted MCP writes, not replies or cron deliveries. |
Add the ten scores and divide by ten, and you get 7.2.
Each score weighs four things: setup effort for a small team, how safe the defaults are, how clearly the docs explain the feature, and how often a typical sales team would use it.
Follow-Up Scheduling: 9/10
This is the feature that earns Hermes a place in a sales stack.
The scheduled tasks page lets you write a job like "every weekday at 8am" and attach one or more skills to it.
Take a commercial cleaning company that sends quotes for office contracts.
- A manager writes a job that reads the quotes sheet each morning.
- The job drafts a follow-up for every quote with no response after four days, and the prompt ends with "draft only".
- The drafts land in the managers' Slack channel, where someone sends the good ones by hand.
Unattended runs also deny dangerous commands by default, which keeps a scheduled job from wandering into the terminal.
Rep Access From Chat: 9/10
The gateway page lists Slack, Teams, Telegram, WhatsApp, Signal, SMS, email and many other apps, all handled by one background process.
Access is closed by default: each platform has an allowlist, such as SLACK_ALLOWED_USERS or SMS_ALLOWED_USERS.
Different channels can even run different models through channel_overrides, so a quick-question channel and a proposal channel don't need the same one.
Lead Research: 8/10
Prospect sites get read through browser_exec, the tool Hermes uses to control an actual browser session.
For a recruiter building a list of local firms that are hiring, delegation splits the list across subagents, and only their summaries return.
It loses a point because the output is only as good as the skill, and the research playbook is one you write yourself.
Inbound Lead Triggers: 8/10
The webhooks adapter validates HMAC signatures and turns a payload into a run.
A route can fire an existing cron job with the event as extra context, so a website enquiry and the morning queue share one well-tested prompt.
It drops two points for the work involved: a reachable server, YAML edits and a sender that can sign requests.
The docs add a fair warning: a valid signature proves who sent the request, not that the text inside is safe, so narrow templates and fewer tools on webhook runs matter.
🔥 Want to see the 9/10 jobs running inside a real Agent OS? Inside the AI Profit Boardroom you get step-by-step video trainings, the installable Agent OS, four coaching calls a week and 3,400+ members testing setups like these. → Join the AI Profit Boardroom
Internal Email Desk: 7/10
The email gateway works over IMAP and SMTP and answers in the same thread.
With EMAIL_ALLOWED_USERS set, only listed senders get processed, which suits a desk where reps forward leads and get drafts back.
The setup is fussier than the rest: a dedicated account, an app password for Gmail, and an EMAIL_AUTHSERV_ID pin, without which authenticated mail is dropped.
Outreach Drafting: 7/10
Asking for a draft is trivial; reviewing it neatly is the gap.
A community plugin called Draft Cards shows email and chat drafts as editable cards in Hermes Desktop, and the plugin itself never sends anything.
Another community plugin, Gmail, adds a confirm step before send, reply or archive, though one setting can skip those dialogs.
Without either, you get drafts in chat and copy them out yourself, which is fine for a small team.
Team Of Sales Bots: 7/10
Bot Mode turns profiles into named Bots with their own role, model, memory and skills, and they can work together in group chats.
A researcher Bot and a drafting Bot in one room is a tidy pattern, and gateway group chats keep running after the Desktop app closes.
It scores lower because the setup lives in the Desktop app, which not every server-based team will want.
CRM Connections: 6/10
The Nous-approved MCP catalog includes Attio and Close, both vendor-hosted servers with OAuth sign-in.
Twenty CRM connects through a third-party community plugin maintained by TREE-Ind.
There's no dedicated HubSpot, Pipedrive or GoHighLevel entry, and Salesforce appears only as a Chatter messaging plugin, not a connector for CRM data.
That gap is why this row sits at 6.
Cold Email Compliance: 6/10
Precleared, a community plugin, checks each new cold email recipient against UK PECR, UK GDPR, CAN-SPAM, CASL and German, French, Irish, Dutch and Australian rules, and sends anything not cleared to Hermes's approval prompt.
It's useful, but it's third-party and sends recipient addresses and your pitch to precleared.dev for the check, so it suits teams comfortable with that.
Sending Safety: 5/10
This is the row to read twice.
The security page covers approval for dangerous commands, and an MCP server set to trust: untrusted must ask before every write-capable call, per the MCP config reference.
Email replies, chat posts and cron deliveries have no built-in approval step.
The fix is design, not a switch: send drafts to your own team and write "draft only" into every outreach job.
📞 Want a second opinion before you commit a sales team to it? Book a free SEO strategy session and my team will go through your stack and the trade-offs. → Book the free session
How The Scores Hold Up In Three Real Businesses
Scores on a table are easy to agree with, so here is how they play out for three different small firms.
An insurance broker renewing business policies.
- The broker keeps renewal dates in a spreadsheet and connects it with the bundled google-workspace skill.
- A weekly job lists every policy renewing in the next 45 days and drafts a check-in note per client, marked draft only.
- The drafts arrive in the broker's Telegram chat, and the broker sends the ones that still apply.
This uses the two 9/10 rows and never touches the 5/10 one, which is why it's the safest place to start.
A B2B bakery supplying cafés.
- The owner forwards each new café enquiry to the agent's dedicated mailbox.
- Hermes replies in-thread to the owner with a short brief on the café and a draft welcome note.
- The owner rewrites the note in their own voice and sends it from the bakery's main address.
This leans on the 7/10 email desk row, and the setup work around authentication is the part to budget for.
A freelance web designer with a few Attio deals.
- The designer installs the Attio MCP server and sets it to untrusted.
- A Friday job reads open deals and drafts one next step for any deal with no recent activity.
- Any attempt to edit a record stops at an approval prompt, so the review stays read-only unless the designer says otherwise.
Here the 6/10 CRM row is fine, because Attio is one of the supported systems.
Swap Attio for Pipedrive and that same plan stops working, which is the whole story of that score.
Strengths, Limits And Who Should Use It
Strengths:
- Schedules and chat access are simple, well documented and closed to strangers by default.
- Each job, Bot and channel can run its own model, so heavy and light work don't compete.
- Untrusted MCP servers and the bundled approval prompt give CRM writes a real checkpoint.
Limits:
- No approval gate on outgoing messages, so the safety lives in your delivery targets and prompts.
- A short CRM list, with most sales plugins coming from third-party maintainers rather than Nous.
- Someone has to look after the server, the schedules and the config files.
Use it if you run a small B2B team with a repeatable follow-up process, a CRM on the supported list or a spreadsheet, and someone comfortable editing config files.
Use it if data control matters, since Hermes is MIT-licensed and runs on a machine you pick.
Skip it if you need automated sending at volume with a vendor-managed approval queue.
Skip it if nobody on the team will maintain a server and its schedules.
The Final Verdict
At 7.2, Hermes is a strong sales assistant and a weak sales robot, and that's the right way round for most small businesses.
If you're weighing a hosted option, our Grok Bot for sales review covers the same ground from that side.
Everything here was checked against the v0.23.0 release, "The Hearth Release", dated 5 November 2026.
For the walkthroughs and a room full of people running it, the AI Profit Boardroom is the place to go.
Also On Our Network
- 🌐 A seven-step operator build for a draft-only Hermes sales desk
- 🌐 Five owner-sized sales jobs and whether Hermes is worth setting up
- 🌐 Five copy-paste prompts that keep every sales draft in your hands
- 🌐 Which AI model to pin to pitch pages, drafts and sales Bots
- 🌐 The complete Hermes Agent for Sales guide on the AI Profit Boardroom blog
FAQ: Hermes Agent For Sales Verdict
What overall score does Hermes get for sales?
It gets 7.2 out of 10 here, the average of ten job scores based on the official Hermes v0.23.0 documentation.
Which sales job does Hermes do best?
Follow-up scheduling and rep access from chat both score 9, because cron and the messaging gateway are simple to set up and closed by default.
Why is sending safety only 5 out of 10?
Hermes approvals cover dangerous commands and untrusted MCP writes, but not email replies, chat posts or cron deliveries, so drafts must go to your own team.
Is Salesforce supported as a CRM?
Only as a messaging surface. The salesforce-chatter community plugin lets you talk to Hermes from Chatter; it is not a connector for CRM records.
📺 Video notes + links to the tools 👉
🎥 Learn how I make these videos 👉
🆓 Get a FREE AI Course + Community + 1,000 AI Agents 👉
About Julian
I'm Julian Goldie, an SEO entrepreneur, author and founder of the AI Profit Boardroom, which has 3,400+ members.
I help business owners scale with AI agents, automation and SEO.
- I've built a 7-figure SEO and link building agency, Goldie Agency, with a team of 70+ SEO experts.
- I've grown a YouTube channel to 400,000+ subscribers.
- I wrote "Link Building Mastery".
- My Udemy courses have taught over 29,000 students.
→ Get my best AI training inside the AI Profit Boardroom
Score your own pipeline against this table, and book a free strategy session if you want help deciding where Hermes Agent for sales fits.
