feat(mcp): add 34 official vendor-hosted remote MCP servers to the catalog

Competitor-parity expansion (Perplexity Computer, Manus, Claude, ChatGPT
connector catalogs) limited to endpoints a generic MCP client can actually
use. Every entry was live-probed: initialize handshake for no-auth servers,
RFC 9728 protected-resource metadata -> AS metadata with a
registration_endpoint for OAuth servers (true DCR only).

No-auth (7): deepwiki, context7, microsoft-learn, exa, aws-knowledge,
wolfram, telnyx*
API key (3): github (PAT bearer - GitHub reserves browser OAuth for
pre-registered IDEs), perplexity, telnyx
OAuth 2.1 + DCR (24): canva, zapier, monday, clickup, todoist, dropbox,
wix, miro, calendly, ramp, plaid, fireflies, neon, prisma-postgres,
postman, globalping, buildkite, semgrep, attio, close, apify, cloudinary,
parallel-search, twelve-data, indeed

Deliberately excluded after probing OAUTH_NO_DCR (vendor requires a
pre-registered app; generic clients cannot connect): Box, Slack, HubSpot,
Zoom, PagerDuty, Brex, Docusign, Stack Overflow, Google Workspace.

optional-mcps/apify/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: apify
+description: Run 6,000+ Apify Actors for scraping and automation.
+source: https://docs.apify.com/platform/integrations/mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.apify.com
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - apify
+    - scraper
+  hosts:
+    - apify.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Apify (or run `hermes mcp login apify`). Approve access,
+  then restart the session so tools load.

optional-mcps/attio/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: attio
+description: CRM records, lists, and notes in Attio.
+source: https://attio.com/help/apps/other-apps/using-the-attio-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.attio.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - attio
+    - crm
+  hosts:
+    - attio.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Attio (or run `hermes mcp login attio`). Approve access,
+  then restart the session so tools load.

optional-mcps/aws-knowledge/manifest.yaml

@@ -0,0 +1,31 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: aws-knowledge
+description: Authoritative AWS docs, API references, and best practices.
+source: https://awslabs.github.io/mcp/servers/aws-knowledge-mcp-server/
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://knowledge-mcp.global.api.aws
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - aws docs
+    - aws knowledge
+  hosts:
+    - aws.amazon.com
+    - docs.aws.amazon.com
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.

optional-mcps/buildkite/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: buildkite
+description: CI/CD pipelines, builds, and test results from Buildkite.
+source: https://buildkite.com/docs/apis/mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.buildkite.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - buildkite
+    - ci
+  hosts:
+    - buildkite.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Buildkite (or run `hermes mcp login buildkite`). Approve access,
+  then restart the session so tools load.

optional-mcps/calendly/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: calendly
+description: Scheduling links, events, and invitees from Calendly.
+source: https://developer.calendly.com/calendly-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.calendly.com
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - calendly
+    - scheduling
+  hosts:
+    - calendly.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Calendly (or run `hermes mcp login calendly`). Approve access,
+  then restart the session so tools load.

optional-mcps/canva/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: canva
+description: Create, search, and manage Canva designs.
+source: https://www.canva.dev/docs/mcp/
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.canva.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - canva
+    - design
+  hosts:
+    - canva.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Canva (or run `hermes mcp login canva`). Approve access,
+  then restart the session so tools load.

optional-mcps/clickup/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: clickup
+description: Tasks, docs, and workspaces in ClickUp.
+source: https://developer.clickup.com/docs/connect-an-ai-assistant-to-clickups-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.clickup.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - clickup
+    - task
+  hosts:
+    - clickup.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  ClickUp (or run `hermes mcp login clickup`). Approve access,
+  then restart the session so tools load.

optional-mcps/close/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: close
+description: 'Sales CRM: leads, opportunities, calls, and emails.'
+source: https://help.close.com/docs/mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.close.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - close crm
+  hosts:
+    - close.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Close (or run `hermes mcp login close`). Approve access,
+  then restart the session so tools load.

optional-mcps/cloudinary/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: cloudinary
+description: Upload, search, and transform media assets in Cloudinary.
+source: https://cloudinary.com/documentation/cloudinary_llm_mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://asset-management.mcp.cloudinary.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - cloudinary
+    - media assets
+  hosts:
+    - cloudinary.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Cloudinary (or run `hermes mcp login cloudinary`). Approve access,
+  then restart the session so tools load.

optional-mcps/context7/manifest.yaml

@@ -0,0 +1,34 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: context7
+description: Up-to-date, version-specific library docs and code examples.
+source: https://context7.com/docs/resources/all-clients
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://mcp.context7.com/mcp
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - context7
+    - library docs
+  hosts:
+    - context7.com
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.
+
+  Works anonymously with rate limits; for higher limits create an API key
+  at context7.com/dashboard and add it as a Bearer header via
+  mcp_servers.context7.headers in config.yaml.

optional-mcps/deepwiki/manifest.yaml

@@ -0,0 +1,30 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: deepwiki
+description: Ask questions about any public GitHub repo (Devin's DeepWiki).
+source: https://docs.devin.ai/work-with-devin/deepwiki-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://mcp.deepwiki.com/mcp
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - deepwiki
+    - repo wiki
+  hosts:
+    - deepwiki.com
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.

optional-mcps/dropbox/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: dropbox
+description: Search, read, and manage files in Dropbox.
+source: https://help.dropbox.com/integrations/connect-dropbox-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.dropbox.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - dropbox
+  hosts:
+    - dropbox.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Dropbox (or run `hermes mcp login dropbox`). Approve access,
+  then restart the session so tools load.

optional-mcps/exa/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: exa
+description: AI web search, code search, and page reading powered by Exa.
+source: https://docs.exa.ai/reference/exa-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://mcp.exa.ai/mcp
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - exa
+    - web search
+  hosts:
+    - exa.ai
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.
+
+  Works anonymously with rate limits; an Exa API key lifts them (see
+  docs.exa.ai).

optional-mcps/fireflies/manifest.yaml

@@ -0,0 +1,34 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: fireflies
+description: Meeting transcripts, summaries, and action items.
+source: https://docs.fireflies.ai/getting-started/mcp-configuration
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://api.fireflies.ai/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - fireflies
+    - meeting notes
+    - transcript
+  hosts:
+    - fireflies.ai
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Fireflies (or run `hermes mcp login fireflies`). Approve access,
+  then restart the session so tools load.

optional-mcps/github/manifest.yaml

@@ -0,0 +1,40 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: github
+description: Repos, issues, PRs, Actions, and code search on GitHub.
+source: https://docs.github.com/en/copilot/how-tos/provide-context/use-mcp-in-your-ide/set-up-the-github-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only). Authenticates with an API
+# key/token sent as a Bearer Authorization header.
+
+transport:
+  type: http
+  url: https://api.githubcopilot.com/mcp/
+
+auth:
+  type: api_key
+  env:
+    - name: MCP_GITHUB_API_KEY
+      prompt: "GitHub Personal Access Token (github.com/settings/tokens)"
+      required: true
+      secret: true
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - github
+    - pull request
+    - issues
+  hosts:
+    - github.com
+
+post_install: |
+  Hermes prompts for the API key at install time and stores it in
+  ~/.hermes/.env. Restart the session so tools load.
+
+  GitHub's hosted MCP reserves browser OAuth for pre-registered IDEs, so
+  Hermes authenticates with a Personal Access Token sent as a Bearer
+  header. Create a (fine-grained) PAT at github.com/settings/tokens with
+  the scopes you want the agent to have.

optional-mcps/globalping/manifest.yaml

@@ -0,0 +1,34 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: globalping
+description: Ping, traceroute, DNS, and HTTP tests from global probes.
+source: https://github.com/jsdelivr/globalping-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.globalping.dev/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - globalping
+    - traceroute
+    - ping
+  hosts:
+    - globalping.io
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Globalping (or run `hermes mcp login globalping`). Approve access,
+  then restart the session so tools load.

optional-mcps/indeed/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: indeed
+description: Search jobs and listings on Indeed.
+source: https://docs.indeed.com/indeed-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.indeed.com/claude/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - indeed
+    - job search
+  hosts:
+    - indeed.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Indeed (or run `hermes mcp login indeed`). Approve access,
+  then restart the session so tools load.

optional-mcps/microsoft-learn/manifest.yaml

@@ -0,0 +1,31 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: microsoft-learn
+description: Official Microsoft, Azure, and .NET docs and code samples.
+source: https://learn.microsoft.com/en-us/training/support/mcp-get-started
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://learn.microsoft.com/api/mcp
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - microsoft docs
+    - azure docs
+    - msdn
+  hosts:
+    - learn.microsoft.com
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.

optional-mcps/miro/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: miro
+description: Read and edit Miro boards, diagrams, and frames.
+source: https://developers.miro.com/docs/connecting-to-miro-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.miro.com/
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - miro
+    - whiteboard
+  hosts:
+    - miro.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Miro (or run `hermes mcp login miro`). Approve access,
+  then restart the session so tools load.

optional-mcps/monday/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: monday
+description: Boards, items, docs, and workflows in monday.com.
+source: https://developer.monday.com/apps/docs/mondaycom-mcp-integration
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.monday.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - monday.com
+    - monday board
+  hosts:
+    - monday.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  monday.com (or run `hermes mcp login monday`). Approve access,
+  then restart the session so tools load.

optional-mcps/neon/manifest.yaml

@@ -0,0 +1,34 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: neon
+description: 'Neon serverless Postgres: projects, branches, and SQL.'
+source: https://neon.com/docs/ai/neon-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.neon.tech/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - neon
+    - postgres
+  hosts:
+    - neon.tech
+    - neon.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Neon (or run `hermes mcp login neon`). Approve access,
+  then restart the session so tools load.

optional-mcps/parallel-search/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: parallel-search
+description: Agent-native web search by Parallel.
+source: https://docs.parallel.ai/integrations/mcp/search-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://search-mcp.parallel.ai/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - parallel search
+  hosts:
+    - parallel.ai
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Parallel (or run `hermes mcp login parallel-search`). Approve access,
+  then restart the session so tools load.

optional-mcps/perplexity/manifest.yaml

@@ -0,0 +1,37 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: perplexity
+description: Real-time web search and research via Perplexity's Sonar API.
+source: https://docs.perplexity.ai/docs/getting-started/integrations/mcp-server
+
+# Official vendor-hosted remote MCP (URL-only). Authenticates with an API
+# key/token sent as a Bearer Authorization header.
+
+transport:
+  type: http
+  url: https://api.perplexity.ai/mcp
+
+auth:
+  type: api_key
+  env:
+    - name: MCP_PERPLEXITY_API_KEY
+      prompt: "Perplexity API key (perplexity.ai/settings/api)"
+      required: true
+      secret: true
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - perplexity
+    - sonar
+  hosts:
+    - perplexity.ai
+
+post_install: |
+  Hermes prompts for the API key at install time and stores it in
+  ~/.hermes/.env. Restart the session so tools load.
+
+  Requires a Perplexity API key (paid usage) from
+  perplexity.ai/settings/api.

optional-mcps/plaid/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: plaid
+description: 'Plaid dashboard: integrations, Items, and usage debugging.'
+source: https://plaid.com/docs/resources/mcp/
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://api.dashboard.plaid.com/mcp/
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - plaid
+  hosts:
+    - plaid.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Plaid (or run `hermes mcp login plaid`). Approve access,
+  then restart the session so tools load.

optional-mcps/postman/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: postman
+description: Postman workspaces, collections, environments, and APIs.
+source: https://learning.postman.com/docs/reference/postman-api/postman-mcp-server/postman-mcp-remote-server/
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.postman.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - postman
+    - api collection
+  hosts:
+    - postman.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Postman (or run `hermes mcp login postman`). Approve access,
+  then restart the session so tools load.

optional-mcps/prisma-postgres/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: prisma-postgres
+description: Create and manage Prisma Postgres databases.
+source: https://www.prisma.io/docs/postgres/integrations/mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.prisma.io/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - prisma
+  hosts:
+    - prisma.io
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Prisma Postgres (or run `hermes mcp login prisma-postgres`). Approve access,
+  then restart the session so tools load.

optional-mcps/ramp/manifest.yaml

@@ -0,0 +1,36 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: ramp
+description: 'Spend management: transactions, cards, reimbursements.'
+source: https://docs.ramp.com/developer-api/v1/guides/ramp-mcp-remote
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.ramp.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - ramp
+    - expenses
+  hosts:
+    - ramp.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Ramp (or run `hermes mcp login ramp`). Approve access,
+  then restart the session so tools load.
+
+  Multi-entity businesses use https://mcp.ramp.com/<business-id>/mcp —
+  override mcp_servers.ramp.url in config.yaml if needed.

optional-mcps/semgrep/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: semgrep
+description: Scan code for security vulnerabilities with Semgrep.
+source: https://semgrep.dev/docs/mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.semgrep.ai/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - semgrep
+    - static analysis
+  hosts:
+    - semgrep.dev
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Semgrep (or run `hermes mcp login semgrep`). Approve access,
+  then restart the session so tools load.

optional-mcps/telnyx/manifest.yaml

@@ -0,0 +1,37 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: telnyx
+description: Telephony, SMS, and voice API control via Telnyx.
+source: https://developers.telnyx.com/docs/mcp
+
+# Official vendor-hosted remote MCP (URL-only). Authenticates with an API
+# key/token sent as a Bearer Authorization header.
+
+transport:
+  type: http
+  url: https://api.telnyx.com/v2/mcp
+
+auth:
+  type: api_key
+  env:
+    - name: MCP_TELNYX_API_KEY
+      prompt: "Telnyx API key (portal.telnyx.com)"
+      required: true
+      secret: true
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - telnyx
+    - sms
+    - telephony
+  hosts:
+    - telnyx.com
+
+post_install: |
+  Hermes prompts for the API key at install time and stores it in
+  ~/.hermes/.env. Restart the session so tools load.
+
+  Requires a Telnyx API key from portal.telnyx.com.

optional-mcps/todoist/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: todoist
+description: Manage Todoist tasks and projects.
+source: https://www.todoist.com/help/articles/todoist-mcp-server
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://ai.todoist.net/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - todoist
+    - todo
+  hosts:
+    - todoist.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Todoist (or run `hermes mcp login todoist`). Approve access,
+  then restart the session so tools load.

optional-mcps/twelve-data/manifest.yaml

@@ -0,0 +1,33 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: twelve-data
+description: Stocks, forex, and crypto market data from Twelve Data.
+source: https://twelvedata.com/docs
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.twelvedata.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - twelve data
+    - stock price
+  hosts:
+    - twelvedata.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Twelve Data (or run `hermes mcp login twelve-data`). Approve access,
+  then restart the session so tools load.

optional-mcps/wix/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: wix
+description: Manage Wix sites, stores, bookings, and CMS content.
+source: https://dev.wix.com/docs/sdk/articles/use-the-wix-mcp/about-the-wix-mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.wix.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - wix
+  hosts:
+    - wix.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Wix (or run `hermes mcp login wix`). Approve access,
+  then restart the session so tools load.

optional-mcps/wolfram/manifest.yaml

@@ -0,0 +1,32 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: wolfram
+description: Wolfram|Alpha computation, math, and curated knowledge.
+source: https://www.wolfram.com/agent-tools/
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). No authentication required (verified live:
+# initialize succeeds anonymously).
+
+transport:
+  type: http
+  url: https://agenttools.wolfram.com/mcp
+
+auth:
+  type: none
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - wolfram
+    - wolfram alpha
+    - computation
+  hosts:
+    - wolfram.com
+    - wolframalpha.com
+
+post_install: |
+  No account or credentials needed — tools are available as soon as the
+  session restarts.

optional-mcps/zapier/manifest.yaml

@@ -0,0 +1,36 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: zapier
+description: Trigger actions across 8,000+ apps via Zapier.
+source: https://zapier.com/mcp
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry). Native OAuth 2.1 + Dynamic Client Registration
+# (verified live: RFC 9728 protected-resource metadata -> AS metadata with
+# registration_endpoint); Hermes's MCP client + mcp_oauth_manager handle
+# discovery, PKCE, token exchange, and refresh.
+
+transport:
+  type: http
+  url: https://mcp.zapier.com/api/mcp/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - zapier
+    - automation
+  hosts:
+    - zapier.com
+
+post_install: |
+  On first connection Hermes opens a browser to authorize with
+  Zapier (or run `hermes mcp login zapier`). Approve access,
+  then restart the session so tools load.
+
+  Pick which apps/actions the agent may use at mcp.zapier.com after
+  connecting.