Skip to content

Keep your agent safe: a checklist

Your agent uses your AI credit, holds your keys and can act on your behalf. Go through this list once after setup, and again whenever you add a channel, a key or a new person.
Time needed 15 minutes
You need Your client area login, and access to your AI provider's console
Result Your keys are safe, only the right people can talk to the agent, and you know what not to click

Keys, tokens and passwords

  • Treat your AI API key like a password. Anyone with it can use your AI credit. Do not paste it in chats, emails or screenshots. (Connect Hermes to Claude)
  • Know how to replace a leaked API key. Delete it in your provider's console and create a new one. Then:
    • Hermes and OpenClaw: paste the new key in the client area Settings → API key and click Save and apply (My agent stopped answering).
    • n8n: open Credentials, click your credential (for example Anthropic account) and paste the new key (n8n first steps).
  • Set a spending limit with your AI provider. Choose an amount you are comfortable with. When it is reached, the agent stops answering until you add credit or raise the limit. (How much will the AI cost me?)
  • Treat bot tokens like passwords. Anyone with a bot token controls your bot. If one leaks:
    • Telegram: open @BotFather, send /mybots, choose the bot and tap Revoke current token, then save the new token in the client area Settings (Connect Telegram) or in your n8n Telegram credential (contact form recipe).
    • Discord: in the Developer Portal, go to Bot → Reset Token and save the new token in Hermes (Connect Discord).
  • Keep the "Your agent is ready" email private. It contains your service password. Do not forward it or share a screenshot of it. If someone else may have seen it, change the password in the client area (Change Password). (The "Your agent is ready" email)
  • Keep your client area password in a password manager. (Order an AI agent)
  • Put keys in credentials, not in n8n steps. An exported n8n workflow contains everything you typed into its steps, including a password pasted directly into a step. (Download a workflow and import it back)

Who can talk to your agent

  • Hermes on WhatsApp and Telegram: approve only people you know. A new person gets a pairing code; check who it is on the Pairing page before you click APPROVE. Remove someone with the × next to their name, and use CLEAR PENDING to drop requests you do not want. (Choose who can talk to your agent)
  • Hermes on Discord: list only the user IDs you trust in ALLOWED DISCORD USER IDS. (Connect Discord)
  • Telegram bot in the client area: only the accounts in Authorised Telegram IDs can talk to the bot. (Your agent in the client area)
  • Use a separate number for WhatsApp. WhatsApp can restrict or ban numbers that behave like bots. Use a spare SIM or a new number with WhatsApp Business, never your personal number. (Connect WhatsApp)

Web addresses that anyone can call

  • Remember that n8n webhook addresses are open. A webhook works without a password unless you set Authentication in the Webhook step. Do not post the address in public places, and use a path that is hard to guess. (Receive data with a webhook)
  • Unpublish workflows you no longer use. The Production URL stops working until you publish again. (Receive data with a webhook)

Backups

  • Store Hermes backups like a password. The .zip contains your AI provider key, your bot tokens and the WhatsApp session. Never send it by email or chat, and delete old copies you no longer need. (Back up your Hermes agent)
  • Check n8n exports before you share them. They do not contain your credentials, but they do contain prompts, web addresses, webhook paths and email addresses. (Download a workflow and import it back)

The server and its buttons

  • Be careful as root. The Terminal and Files tabs work as the administrator: changes apply at once and there is no undo. Keep a copy of a file before you edit it. (Terminal and files in the browser)
  • Never use Reinstall to fix a problem. It deletes conversations, memory, workflows and connected channels, and cannot be undone. Use Restart, then Update. (Restart, Update or Reinstall)
  • Install skills and templates only from sources you trust. An OpenClaw skill can tell your assistant to run commands on your server (Skills in OpenClaw). n8n templates come from other people: read what one does before you connect your accounts, and test it by hand before you publish it (Start from a template).

Your data and what you share

Check that it worked

  • Your AI provider account has a spending limit.
  • The Hermes Pairing page lists only people you know under Approved users.
  • You know where your backup file is, and it is not in your email or chats.

Next steps