Hermes Multi-Tenant Isolation Architecture
Shared host, per-client profiles and tool boundaries: how external clients reach their own Hermes workspaces without seeing another tenant's tools or data.
Hermes Multi-Client Isolated Profiles Architecture
Option 3, the core multi-tenant setup: per-token entry points, one gateway per client, and isolated Hermes profiles running in separate containers.
Full FlowZap Code
Copy and paste the following FlowZap code into a project in your FlowZap account to see this template diagram.
external_tenants { # External Tenants
n1: circle label:"Client A User"
n2: circle label:"Client B User"
hermes_profiles.n6.handle(right) -> execution_sandboxes.n8.handle(left) [label="Docker / Modal"]
hermes_profiles.n5.handle(right) -> execution_sandboxes.n7.handle(left) [label="Docker / Modal"]
client_gateways.n4.handle(right) -> hermes_profiles.n6.handle(left)
client_gateways.n3.handle(right) -> hermes_profiles.n5.handle(left)
external_tenants.n2.handle(right) -> client_gateways.n4.handle(left) [label="Token B"]
external_tenants.n1.handle(right) -> client_gateways.n3.handle(left) [label="Token A"]
}
client_gateways { # Per-Token Entry Points
n3: rectangle label:"Gateway A"
n4: rectangle label:"Gateway B"
}
hermes_profiles { # Isolated Profiles
n5: rectangle label:"Profile: acme"
n6: rectangle label:"Profile: beta"
}
execution_sandboxes { # Execution Boundaries
n7: rectangle label:"Sandbox A"
n8: rectangle label:"Sandbox B"
}
Install the MCP packagenpm install -g flowzap-mcpMCP documentation
Related templates
Hermes Single Client, Single Department Architecture
Option 1 of the Hermes multi-tenant setup: one external actor, one gateway, one isolated workspace inside an execution sandbox, and a single client profile.
Hermes Single Client, Multi-Department Routing Architecture
Option 2: one client with several entry points, a prefix router that maps /eng or /support to a mode, and a single unified Hermes profile behind the gateway.
Hermes Full Multi-Tenant with Department Routing
Option 4: external participants, per-client gateways and routers, department prefixes inside each tenant, and a sandbox per client.
Hermes Kanban Agent Coordination Workflow
A planner decomposes the request on a shared board, specialized workers claim tasks, and the orchestrator delivers once every card is closed.
Agentic Taste Evaluation Loop
Legacy executor, LLM-as-judge evaluator and next-gen consumer: an evaluator scores the full trajectory, rejects structural sloppiness and forwards only validated payloads.