2h ago

Nous Research's Hermes Agent integrates Bitwarden Secrets Manager to retrieve API keys at startup, replacing multiple plaintext credentials in ~/.hermes/.env with a single machine-account token

Credential rotation now requires one Bitwarden update before next restart.

——0——
Original post
OPTeknium 🪽#259Teknium 🪽@TEKNIUM

We got BitWarden now, to make it easy to manage your keys, rotate them quickly, and coordinate access with your team.

10:45 AM · May 22, 2026 View on X
Reposted by
Teknium 🪽#259@TEKNIUM
REPLYTeknium 🪽#259Teknium 🪽@TEKNIUM

Docs:

nousresearch.com
Bitwarden Secrets Manager | Hermes Agent
Pull API keys from Bitwarden Secrets Manager at process startup instead of storing them in plaintext inside ~/.hermes/.env. One bootstrap secret (a machine-account access token) replaces N per-provider keys, and rotating a credential becomes a single change in the Bitwarden web app.
Teknium 🪽Teknium 🪽@Teknium

We got BitWarden now, to make it easy to manage your keys, rotate them quickly, and coordinate access with your team.

5:45 PM · May 22, 2026 · 14.7K Views
5:45 PM · May 22, 2026 · 1.4K Views
REPLYTeknium 🪽#259Teknium 🪽@TEKNIUM

@altryne Not yet

Alex VolkovAlex Volkov@altryne

@Teknium what about 1P?

5:52 PM · May 22, 2026 · 251 Views
5:52 PM · May 22, 2026 · 230 Views
REPLYAlex Volkov#1245Alex Volkov@ALTRYNE

@Teknium what about 1P?

Teknium 🪽Teknium 🪽@Teknium

We got BitWarden now, to make it easy to manage your keys, rotate them quickly, and coordinate access with your team.

5:45 PM · May 22, 2026 · 14.7K Views
5:52 PM · May 22, 2026 · 251 Views
Nous Research's Hermes Agent integrates Bitwarden Secrets Manager to retrieve API keys at startup, replacing multiple plaintext credentials in ~/.hermes/.env with a single machine-account token · Digg