Right now, every Hermes session needs its own credentials for every MCP server it connects to. Once the agent has access, it has access to everything that server exposes.
Portkey's MCP Gateway changes that:
- Hermes authenticates once. The gateway handles credential injection for every server behind it
- Toggle specific tools on or off at the org or workspace level. Dangerous tools don't surface to the agent at all
- Every tool call logged with user, parameters, and full response
- Approval workflows for tools that need a human in the loop before they execute
- Your Hermes config doesn't change. The agent just calls tools through Portkey's endpoint.