VQV Signal

RESEARCH WATCH TECHNICAL

Hermes adds an official security-review plugin and an MCP Serve plugin for chat access

According to a post on X by @Teknium, Nous Research's Teknium announced a new official Hermes plugin, built from @mark_s's security-review experience, that analyzes a codebase for security bugs. The post also cites a Japanese write-up describing the official MCP Serve plugin, installed with hermes plugins install mcp-serve. According to that write-up, MCP Serve lets Claude Code or Codex read and send messages in Telegram or Slack chats connected to Hermes, and it is described as never exposing terminal, file or code-execution access.

Source: Scobleizer News Pulse (X) · x.com Found via Robert Scoble’s Scobleizer News Pulse · a post on X, not independently verified Published 2026-11-08T20:35:00+00:00 Detected 2026-11-09T02:20:59+00:00
View original source

According to a post on X by @Teknium, Nous Research's Teknium announced a new official Hermes plugin, built from @mark_s's security-review experience, that analyzes a codebase for security bugs. The post also cites a Japanese write-up describing the official MCP Serve plugin, installed with hermes plugins install mcp-serve. According to that write-up, MCP Serve lets Claude Code or Codex read and send messages in Telegram or Slack chats connected to Hermes, and it is described as never exposing terminal, file or code-execution access.

AI-assisted summary based on the listed source.

Nous Research's Teknium announced a new official plugin by @mark_s, built from his security-review experience, that analyzes a codebase for security bugs. A Japanese write-up also notes the official MCP Serve plugin (hermes plugins install mcp-serve), which lets Claude Code or Codex read and send messages in the...

Developers who use Hermes alongside Claude Code or Codex could use the security reviewer to check their own codebases, and MCP Serve could let them reach connected Telegram or Slack chats from those coding tools. The source is a short social post and a snippet, not a full review of either plugin, so teams should read the official plugin documentation and check permissions before installing. Independent testing would show how well both plugins perform in practice.

Signal Strength 95% Technical label WATCH Public Interest 54 Category RESEARCH Reader Depth TECHNICAL

Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.

Public Interest components
Recognizable Entity Score 60 Practical Impact Score 28 Novelty Interest Score 94 Consequence Score 46 Curiosity Score 16 Shareability Score 63

VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Scobleizer News Pulse (X).