AgentsAutonomy & tool use
Cua plugin lets Nous Research's Hermes Agent run commands on disposable machines that users can watch live
A Cua-built plugin, cua-spaces, sends Hermes Agent's terminal commands, file edits and code to a separate, disposable Linux, macOS or Windows machine. Users and teams can watch that machine live and take it over. Full screen and browser isolation works only on Linux.
From the r/AISEOInsider (via last30days) article of October 27, 2026 and cited sources: The plugin acts as a terminal backend. [4] [8] [7]
SOURCES[4] Hermes plugin catalog: cua-spaces hermes-agent.nousresearch.com[8] trycua/hermes-cua-spaces (GitHub) github.com[7] AIaulis: Cua plugin runs Hermes Agent's commands on a… aiaulis.com
AT Pulse research deskPublished · Updated · 5 min read · AI-assisted analysisAI-assisted, not human-edited. Methodology Corrections Who owns this site
- Original source
- r/AISEOInsider (via last30days) article, independent perspective
- Brief by
- AT Pulse research desk AI-assisted; publisher and contact on the desk page
- When
- October 27, 2026 article published
- Covered
- Oct 28 edition
- Evidence
- 9 sources across 7 sites
- 1Hermes + Cua AI Agent: How I Watch My AI Work Livereddit.com
- 2Hermes Agent + Cua Spaces Is INSANE for AI Automation!reddit.com
- 3Linked video: Hermes + Cua AI Agent: How I Watch My AI…youtube.com
- 4Hermes plugin catalog: cua-spaceshermes-agent.nousresearch.com
- 5Launch HN: Cua (YC X25)hn.svelte.dev
- 6NousResearch/hermes-agent PR #142620github.com
RisingHow it’s measured
YouTube video · 3.4K views · 33 likes
Reach blends public engagement (views, likes, comments, shares, stars) from the platforms where the story or its original source lives: YouTube, Hacker News, GitHub, Substack and similar. A video and the article written from its transcript share one score, taken from the video. Platforms with no data are left out rather than counted as zero, and the age of a story never lowers its score.
The plugin acts as a terminal backend. Hermes keeps running where it already runs, and only its tool calls (commands, file work, code execution) go to a Space. A Space can run on the user's own hardware, in the user's own cloud account or in Cua's cloud. By default it is deleted when the session ends, but named Spaces or a setting can keep it. [4] [8] [7]
Inside Spaces that the plugin creates, Hermes skips its own approval prompts for risky commands, because the isolated machine is treated as the safety boundary. That argument gets weaker if a Space can reach networks, cloud credentials or paid APIs. [4] [7]
What the documentation shows: agent work runs off the host machine, and people can step in live.
Read the full assessment
What that means: teams get a low-cost way to supervise agents, but with no approval prompts, safety depends on tightly limiting each Space's network access and secrets.
Executive brief
Hermes Agent, Nous Research's open-source agent, now has a plugin called cua-spaces. It runs the agent's terminal commands, file edits and code on a separate, disposable machine that people can watch live and take control of. The most important fact for anyone weighing it is this: inside Spaces the plugin creates, Hermes skips its own approval prompts for risky commands, because the isolated machine is treated as the safety boundary (Hermes plugin catalog). The plugin is MIT-licensed and listed as "Verified" in the official catalog. The full screen and browser features work only on Linux Spaces.
What changed and event timeline
Cua launches on Hacker News
Cua, a Y Combinator X25 company, pitched an open-source, Docker-like runtime that lets AI agents operate full operating systems in isolated virtual machines. Commenters reported connection failures and weak results with small models ().
Plugin enters the Hermes catalog
Cua-spaces is listed with a "Verified" badge and requires Hermes 0.21.6 or later ().
Catalog bump to 0.3.0 opened, then closed
Nous's teknium1 proposed adding Windows/macOS Spaces and moving desktop and browser tools into Linux Spaces. The PR was closed while Cua fixed a conflict with Hermes core behavior (). The catalog now lists v0.4.0.
Trade coverage appears
AIaulis summarized the release and noted a free month of Cua's paid plan for the first 50 Hermes users, through November 15 ().
Promotional video and Reddit post
An AI avatar of agency owner Julian Goldie walks through the plugin and promotes paid coaching (;).
Capabilities and access
- Version: cua-spaces v0.4.0, last updated 2026-10-21. It needs Hermes 0.21.6 or later and the
cuaPython SDK (at least 0.5.0, below 0.8) (catalog). - Install:
hermes plugins install cua-spaces, thenhermes config set terminal.backend cua. - Where a Space runs: on your own hardware, in your own cloud account, or in Cua's cloud.
Read the full section
- Version: cua-spaces v0.4.0, last updated 2026-10-21. It needs Hermes 0.21.6 or later and the
cuaPython SDK (at least 0.5.0, below 0.8) (catalog). - Install:
hermes plugins install cua-spaces, thenhermes config set terminal.backend cua. - Where a Space runs: on your own hardware, in your own cloud account, or in Cua's cloud. You watch it in the Cua Spaces app or in a browser with
cua viewer(AIaulis). - Persistence: by default each session gets a throwaway Space that is deleted when it ends. Named Spaces, or setting
delete_on_exit: false, keep it.
Technical analysis for researchers and developers
- Architecture: the plugin is a terminal backend provider.
- Linux desktop mode: needs Hermes 0.22.2 or later. On first use it installs TigerVNC, Playwright Chromium and agent-browser into the Space.
- Windows Spaces: commands run in PowerShell, file tools in Git Bash.
Read the full section
- Architecture: the plugin is a terminal backend provider. Hermes itself keeps running where it already runs; only its tool calls (commands, file work, code) go to the Space (plugin repo).
- Linux desktop mode: needs Hermes 0.22.2 or later. On first use it installs TigerVNC, Playwright Chromium and agent-browser into the Space.
- Windows Spaces: commands run in PowerShell, file tools in Git Bash. On macOS and Windows Spaces, the browser and screen-control tools still run on your own machine.
- Testing: the 0.3.0 PR reported 64 tests passed and 49 skipped, and was explicitly not tested against a live Space. Validation also flagged a core override, where Windows Spaces wrap Hermes's file operations (PR #142620).
Claims and evidence
- Isolation and live takeover: documented by Cua and Nous (repo; catalog). No independent security test was found.
- "Nothing leaves your machine" for local Spaces; encrypted connection otherwise: this is vendor documentation, repeated in the video (5:04).
- "Simply can't break anything that matters": this is the video's own framing (1:40). The vendor documentation makes no such guarantee.
Read the full section
- Isolation and live takeover: documented by Cua and Nous (repo; catalog). No independent security test was found.
- "Nothing leaves your machine" for local Spaces; encrypted connection otherwise: this is vendor documentation, repeated in the video (5:04).
- "Simply can't break anything that matters": this is the video's own framing (1:40). The vendor documentation makes no such guarantee.
- Running several agents in parallel, one Space each: stated in the repo and the video (3:36). No benchmarks were published.
Context and prior work
- It builds on Lume, Cua's virtualization tool for macOS virtual machines on Apple Silicon, and ships an agent SDK that works with several model providers (Product Hunt).
- Competitors: at launch, Cua set itself apart from cloud sandboxes such as e2b mainly through native macOS support (Launch HN).
- Positioning: the video presents the plugin as removing the old trade-off between keeping control and handing work to an agent (5:52).
Read the full section
- Cua: MIT-licensed. It builds on Lume, Cua's virtualization tool for macOS virtual machines on Apple Silicon, and ships an agent SDK that works with several model providers (Product Hunt).
- Competitors: at launch, Cua set itself apart from cloud sandboxes such as e2b mainly through native macOS support (Launch HN).
- Positioning: the video presents the plugin as removing the old trade-off between keeping control and handing work to an agent (5:52).
Limitations, safety and contested findings
- No approval prompts inside plugin-created Spaces.
- Plugin interactions are unclear.
- On macOS and Windows Spaces the GUI and browser tools still run on your own machine, which the video acknowledges (5:16).
Read the full section
- No approval prompts inside plugin-created Spaces. If a Space can reach networks, cloud credentials or paid APIs, the "disposable machine" argument for skipping approvals gets weaker (catalog).
- Plugin interactions are unclear. AIaulis flags uncertainty about how sandbox mode interacts with other plugins' permission gates, for example Meshy's block on unsupervised paid operations (AIaulis).
- Partial isolation off Linux. On macOS and Windows Spaces the GUI and browser tools still run on your own machine, which the video acknowledges (5:16).
- Unresolved release work. There was an open core-override issue, and the 0.3.0 update had not been tested against a live Space (PR).
- Source bias. The video is promotional and voiced by an AI avatar (0:23). No independent evaluation was found.
Business and practitioner implications
- Easy, low-cost trial: both projects are MIT-licensed, and Spaces can run on hardware you already own.
- Team oversight: a shared live screen helps teams supervise agent work.
- Before production use:
Read the full section
- Easy, low-cost trial: both projects are MIT-licensed, and Spaces can run on hardware you already own. The main cost is setup time; the first Space takes a few minutes to download (video, 2:39).
- Team oversight: a shared live screen helps teams supervise agent work.
- Before production use:
- Treat each Space as an untrusted environment.
- Limit network access and secrets inside it.
- Pin plugin versions, since the catalog changed twice in two days.
- Prefer Linux Spaces if you need the browser and desktop isolated.
The source trail.
Sources (9)
Hermes + Cua AI Agent: How I Watch My AI Work Live
Feed excerpt only. A transcript of the video linked from this page is supplied (linked video auto captions; https://www.youtube.com/watch?v=qaIzc4zlSAU); automatic text may contain errors.
reddit.comHermes Agent + Cua Spaces Is INSANE for AI Automation!
Related coverage; assess separately
reddit.comLinked video: Hermes + Cua AI Agent: How I Watch My AI Work Live
linked video auto captions
www.youtube.com