Hermes Single Client, Multi-Department Routing Architecture
Option 2: one client with several entry points, a prefix router that maps /eng or /support to a mode, and a single unified Hermes profile behind the gateway.
Option 4: external participants, per-client gateways and routers, department prefixes inside each tenant, and a sandbox per client.
Copy and paste the following FlowZap code into a project in your FlowZap account to see this template diagram.
client_users { # External Participants
n1: circle label:"Acme Users"
n2: circle label:"Beta Users"
hermes_profiles.n8.handle(right) -> execution_sandboxes.n10.handle(left) [label="executes"]
hermes_profiles.n7.handle(right) -> execution_sandboxes.n9.handle(left) [label="executes"]
hermes_profiles.n6.handle(right) -> execution_sandboxes.n9.handle(left) [label="executes"]
entry_gateways.n4.handle(right) -> hermes_profiles.n8.handle(left)
hermes_profiles.n5.handle(bottom) -> hermes_profiles.n7.handle(top) [label="if /support"]
hermes_profiles.n5.handle(right) -> hermes_profiles.n6.handle(left) [label="if /eng"]
entry_gateways.n3.handle(right) -> hermes_profiles.n5.handle(left)
client_users.n2.handle(right) -> entry_gateways.n4.handle(left) [label="general"]
client_users.n1.handle(right) -> entry_gateways.n3.handle(left) [label="/eng or /support"]
}
entry_gateways { # Client Gateways
n3: rectangle label:"Acme Gateway"
n4: rectangle label:"Beta Gateway"
}
hermes_profiles { # Routed Profiles
n5: diamond label:"Acme Router"
n6: rectangle label:"acme-eng"
n7: rectangle label:"acme-support"
n8: rectangle label:"beta"
}
execution_sandboxes { # Secure Runtimes
n9: rectangle label:"Acme Sandbox"
n10: rectangle label:"Beta Sandbox"
}
Install the MCP packagenpm install -g flowzap-mcpMCP documentation
Option 2: one client with several entry points, a prefix router that maps /eng or /support to a mode, and a single unified Hermes profile behind the gateway.
Shared host, per-client profiles and tool boundaries: how external clients reach their own Hermes workspaces without seeing another tenant's tools or data.
Option 1 of the Hermes multi-tenant setup: one external actor, one gateway, one isolated workspace inside an execution sandbox, and a single client profile.
Option 3, the core multi-tenant setup: per-token entry points, one gateway per client, and isolated Hermes profiles running in separate containers.
A planner decomposes the request on a shared board, specialized workers claim tasks, and the orchestrator delivers once every card is closed.
Legacy executor, LLM-as-judge evaluator and next-gen consumer: an evaluator scores the full trajectory, rejects structural sloppiness and forwards only validated payloads.