Hermex

Hermex is a narrow tool that does its one job carefully. It is not an agent, not a model, and not a cloud service — it's the iPhone client for an agent you already run through the open-source hermes-webui server. That framing matters, because every strength and every weakness follows from it. Strengths. The connection is direct: your phone talks to your own server, with no relay or third-party service in between, so conversations travel between your iPhone and your machine and nowhere else. The app has no analytics, ads, or tracking; the server URL is stored in the iOS Keychain and the password isn't kept after login. Day-to-day controls are the ones you actually reach for on a phone — open and manage sessions, stream responses in real time, switch models and profiles mid-session, adjust reasoning settings, attach files from the iPhone, and browse the remote workspace. The offline cache (7 days / 5,000 messages, clearable) is a genuinely useful touch: you can re-read what the agent said without a signal, even though sending messages needs a connection. It's free with no subscription and no in-app purchases, MIT-licensed with the full iPhone app source on GitHub, and rated 4.7 on the App Store. The setup guide is unusually honest — it documents where things break (tunnel URLs that rotate, Tailscale addresses that don't answer because the server was left bound to localhost-only, password mismatches, port 8787 collisions, and streams cut off by Cloudflare's free tier after ~100 seconds of silence). Weaknesses. Hermex is worthless without a server you run: hermes-webui on macOS, Linux, or Windows via WSL2 with Python 3.11+, and a Hermes Agent setup. Windows users need WSL2, not a native path. It is iPhone on iOS 18 or later only — no Android, no web client, no desktop client, and iPad support is still listed as coming soon. Binding the server to 0.0.0.0 for Tailscale also answers on your local network, so the server password is doing real work rather than being a formality. And the security picture around the agent itself is unsettled: August 2026 reporting found Hermes can be tricked into running malware and installed unowned code inside corporate networks, so this is not a stack to point at a corporate network without sandboxing and monitoring. Where it fits. Homelab operators and self-hosting enthusiasts who already run Hermes and want mobile access without handing conversations to someone else's cloud; developers who want to attach a file and check agent output while away from the desk; privacy-first buyers who refuse a relay between phone and agent. Where it doesn't. Buyers who want a cloud agent that works with zero self-hosting. Anyone without a Hermes Agent setup. Android users. Anyone who needs a web or desktop client rather than a phone app. Teams deploying agents into corporate networks without sandboxing. The comparison that matters is against cloud agent apps: they start faster and work from any device, while Hermex trades