Hermes Agent v0.16.0 ships a native desktop app, and that single fact changes who can use it. The release calls it "The Surface Release" for a reason: Hermes now meets you wherever you work.
The desktop app lives under apps/desktop/ and is built on Electron. It runs on macOS, Linux, and Windows. One-click install, in-app self-update, drag-and-drop files into the chat area, clipboard image paste, a Cmd+K command palette, and a model picker in the status bar. You can run concurrent multi-profile sessions. There is a full Simplified Chinese translation. You can connect to a remote Hermes gateway over OAuth or username/password. None of this existed a week ago. The team built it across 100 PRs and 159 commits in seven days.
If you have been describing Hermes to teammates as "a CLI agent" and watching interest drop, that pitch just changed. Send them an installer instead.
The web dashboard also grew a full browser-based administration panel covering the MCP catalog, messaging channels, credentials, webhooks, memory, and pluggable OIDC or username-password login. First-time setup gained a "Quick Setup via Nous Portal" path that takes you from install to first message in seconds.
The model picker is now fuzzy-searchable everywhere: desktop, web, TUI, and CLI. NVIDIA/skills joined the trusted Skills Hub taps. The default skill set was trimmed to essentials. And /undo finally lets you roll back the last N turns, which is the kind of small feature that removes a lot of friction during iterative work.
The security side is not minor. This release pins against CVE-2026-48710 (a Starlette vulnerability), hardens SSRF off-loop handling, and strips credentials from subprocess calls. Two P0 issues and 62 P1 issues are closed. Sixteen items carried security tags.
By the numbers: 874 commits, 542 merged PRs, 1,962 files changed, 205,216 insertions, 46,217 deletions, 399 issues closed, and 170 community contributors since v0.15.2.
What should you do today? If you manage a team that has avoided Hermes because of the terminal-only requirement, download the desktop installer and run the Quick Setup path. It takes seconds. If you are already running Hermes in production, apply the update for the security fixes alone. The Starlette pin and SSRF hardening are not optional for anything customer-facing.