Install Hermes Agent natively on Android through Termux, with a browser-based Web UI and optional Tailscale remote access.
This is the Android counterpart to the desktop Hermes experience: one assistant that runs locally on your phone or tablet, controlled through a clean web interface.
- Hermes CLI installed in a Python venv
- Hermes Web UI on
http://127.0.0.1:8787 - Ollama Cloud configured as the default model provider
- Tailscale mesh VPN for remote SSH management
- Version-pinned Termux packages to avoid silent breakages from
pkg upgrade - SSH server on port 8022
- Web UI password enforcement during install
Note: This setup uses Ollama Cloud, not a local Ollama server. You do not need to install or run
ollamaon Android. For local models, install the separate Ollama Android app.
- Android 12 or newer
aarch64(ARM 64-bit) only- At least 6 GB RAM recommended
- Termux from F-Droid, not Google Play
See docs/PREREQUISITES.md for step-by-step screenshots.
TL;DR:
- Enable Install unknown apps for your file manager/browser.
- Install F-Droid from f-droid.org.
- From F-Droid, install Termux (link).
- From F-Droid, install Tailscale (link).
- Open Termux and run:
bash <(curl -fsSL https://raw.githubusercontent.com/ebey317/hermes-android/main/install.sh)
When the installer prompts, paste your Ollama Cloud API key from ollama.com/settings. The installer validates the key by sending a real test message.
On the Android device, open a browser and go to:
http://127.0.0.1:8787
Send a message. The assistant should reply.
After Tailscale is signed in, your tablet gets a stable IP like 100.x.y.z. From another machine on the same Tailscale network:
ssh -p 8022 -o ConnectTimeout=30 [email protected]Use the username that whoami prints inside Termux.
| Setting | Value |
|---|---|
| Web UI port | 8787 |
| Hermes CLI config | ~/.hermes/config.yaml |
| API keys | ~/.hermes/.env |
| Default provider | ollama-cloud |
| Default model | nemotron-3-super |
| SSH port | 8022 |
After install, these should all succeed:
hermes version
hermes doctor
hermes gateway statusAnd in the browser:
- Open
http://127.0.0.1:8787 - Create a new chat
- Type a message and press Enter
- You should get a reply from the model
- API keys are stored in plain text in
~/.hermes/.env. Restrict access:chmod 600 ~/.hermes/.env - The Web UI listens on
127.0.0.1by default and is not exposed to the public internet. - Tailscale provides encrypted, account-private remote access.
- Set a Web UI password if the device is shared. The installer requires this by default; see
docs/PERMISSIONS.md.
MIT — see LICENSE.
The public installer is the Community tier: free, cloud-only, automatic.
For local models, hybrid cloud+local, hands-off remote setup, or multi-device deployments, see PRICING.md.
Inquiries: [email protected]