Hermes MCP client setup

Hermes is a high-confidence OAuth client because its MCP config supports OAuth 2.1 PKCE, metadata discovery, DCR, token exchange, and refresh.

OAuth config

mcp_servers:
  orkestia_workflow:
    url: "https://mcp.orkestia.dev/mcp"
    auth: oauth

Header-token config

mcp_servers:
  orkestia_workflow:
    url: "https://mcp.orkestia.dev/mcp"
    headers:
      Authorization: "Bearer ${ORKESTIA_AGENT_TOKEN}"

Use OAuth for human-operated sessions. Use headers for unattended or non-browser environments.

Smoke test

1. Start Hermes with the MCP server enabled.
2. Complete OAuth.
3. Confirm whoami and list_workflow_types work.
4. Confirm refresh works after token expiry.

Official docs

• Hermes MCP config reference