browser_* tools through Kernel cloud browsers and handles browser creation and cleanup for you.
Install the plugin
Install and enable the plugin from the Kernel repository:- A current Hermes Agent installation with browser-provider plugin support
- A Kernel API key
- Node.js 20 or newer for Hermes’s
agent-browserdependency
Some Hermes versions prompt for
KERNEL_API_KEY during plugin installation and some don’t. Selecting Kernel as the browser provider doesn’t set the API key.Configure Hermes Desktop
- Open Capabilities → Tools → Browser Automation.
- Select Kernel.
- If
agent_browserisn’t installed, click Run setup and wait for the one-time installation to finish. - Open the three-dot menu next to
KERNEL_API_KEYand enter your Kernel API key. - Optionally set
KERNEL_PROXY_NAMEandKERNEL_PROFILE_NAMEfrom their three-dot menus. - In a terminal, run the following command so Hermes’s cleanup timer matches the plugin’s 10-minute Kernel browser timeout:
- Restart any running Hermes chat or gateway so it reads the updated settings.
Configure the Hermes CLI
Select Kernel and match Hermes’s cleanup timeout to the plugin’s browser timeout:KERNEL_API_KEY to the active Hermes profile’s .env file. This command prints the file’s location:
agent-browser once if Hermes hasn’t installed it yet:
Configure a default profile or proxy
The Kernel provider supports these settings in the active Hermes profile:
When you set
KERNEL_PROFILE_NAME, the plugin saves browser changes back to that profile when the browser ends. This preserves cookies, logins, and other session state for future runs.
Understand browser cleanup
The plugin creates every Kernel browser with a 10-minute inactivity timeout. Hermes also maintains its own browser cleanup timer, which defaults to two minutes and refreshes whenever Hermes runs abrowser_* tool. Matching it to 10 minutes prevents Hermes from deleting the browser before Kernel’s timeout.
When Hermes cleans up a session, it closes agent-browser, deletes the Kernel browser, and removes the session from its local registry. Hermes also runs this cleanup when its process exits normally. Kernel’s 10-minute timeout remains the remote fallback if Hermes crashes or loses its connection.
Kernel standby incurs zero browser usage cost only when no CDP, WebDriver, live-view, or computer-controls client is connected. Hermes maintains an
agent-browser CDP session while it tracks the browser, so a longer Hermes cleanup timeout improves continuity but can also keep the browser active longer.Verify browser routing
Start Hermes with browser tools enabled:UseA successful run has these results:browser_navigate, not web search, to open https://example.com. Callbrowser_snapshot, report the exact title andstealth_features, and tell me whether any cloud fallback warning occurred.
- The page title is
Example Domain. stealth_featuresincludesstealth.- The tool result has no
fallback_warning. - A matching browser appears in the Kernel Dashboard.
- Exiting Hermes or waiting for cleanup removes the browser.
Update the plugin
Pull the latest version and restart Hermes Desktop, your active chat, or the gateway:Next steps
- Use Live View to inspect an active Hermes browser
- Create reusable browser state with Profiles
- Configure a named Proxy
- Learn how Kernel terminates browser sessions