Hermes Paperclip Adapter
@marketintellabs/hermes-paperclip-adapter · by justinltodd
MarketIntelLabs fork of the Paperclip adapter for Hermes Agent — with adapter-owned status transitions, an in-process MCP tool server (paperclip-mcp) that replaces curl-in-prompt with structured tool calls, MIL heartbeat prompt templates, and OpenRouter m
No known CVEs
No license
Actively maintained
Last commit 9d ago
Works with most clients
Transport: stdio
1 tool · ~79 tok
Grade A · 0.0% of 200K ctx
This server has been archived and is no longer actively maintained.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"hermes-paperclip-adapter": {
"args": [
"-y",
"@marketintellabs/hermes-paperclip-adapter"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/hermes-paperclip-adapter)
Read me
What Hermes Paperclip Adapter does
Actively maintained by MarketIntelLabs. This > package is a MarketIntelLabs fork of the > upstream hermes-paperclip-adapter > by Nous Research, published to npm as > @marketintellabs/hermes-paperclip-adapter. > All production deploys at MarketIntelLabs consume this fork. Upstream credit > for the core adapter design goes to Nous Research; all fork-specific > behaviours (listed under MIL-specific features > below) are maintained here. See UPSTREAM.md for the fork > point, divergence list, and s
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@marketintellabs/hermes-paperclip-adapter' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
76/100across 5 weighted dimensions
0255075100
27
20
15
10
−24
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-53869high · fixedCVSS 7.5
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
Hermes Agent before 0.16.0 contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation. FastAPI HTTP middleware does not execute for WebSocket upgrade requests on /api/pty, /api/ws, /api/pub, and /api/events endpoints, enabling attackers to exploit DNS rebinding and inject malicious commands or read terminal output.
CVE-2026-53870medium · fixedCVSS 5.5
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
Hermes Agent before 0.16.0 creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644), exposing conversation history and HMAC secrets to local users. Attackers with local filesystem access can read these files directly to obtain sensitive data including conversation history, tool payloads, prompts, and per-route HMAC secrets.
Inventory
Tools (1)
Click any tool to inspect its schema.
~79 tokens total
Inventory
Prompts (1)
builtin:mil-heartbeat-v3Prefers the new update_issue_status tool over the RESULT marker for issue status transitions
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Hermes Paperclip Adapter safe to use?
- Hermes Paperclip Adapter has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
- How do I install Hermes Paperclip Adapter?
- Hermes Paperclip Adapter supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Hermes Paperclip Adapter do?
- Hermes Paperclip Adapter provides 1 tool: update_issue_status. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Hermes Paperclip Adapter?
- Hermes Paperclip Adapter is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Hermes Paperclip Adapter actively maintained?
- Hermes Paperclip Adapter is actively maintained — last commit was 9 days ago. It has 6 GitHub stars.
Related
Similar servers
Others in ai-ml / developer-tools
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
6.0k 1
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
58.2k 2
Jscpd97Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.
5.8k 1
XcodeBuildMCP97A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
6.0k 2
MCP Security Weekly
Get CVE alerts and security updates for Hermes Paperclip Adapter and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.