Hermes Full Multi-Tenant with Department Routing
Option 4: external participants, per-client gateways and routers, department prefixes inside each tenant, and a sandbox per client.
Option 2: one client with several entry points, a prefix router that maps /eng or /support to a mode, and a single unified Hermes profile behind the gateway.
Copy and paste the following FlowZap code into a project in your FlowZap account to see this template diagram.
team_users { # Client Entry Points
n1: circle label:"Team User"
hermes_profile.n5.handle(right) -> department_modes.n7.handle(left) [label="if /support"]
hermes_profile.n5.handle(right) -> department_modes.n6.handle(left) [label="if /eng"]
entry_point.n4.handle(right) -> hermes_profile.n5.handle(left) [label="loads profile"]
entry_point.n3.handle(right) -> entry_point.n4.handle(left)
entry_point.n2.handle(right) -> entry_point.n3.handle(left)
team_users.n1.handle(right) -> entry_point.n2.handle(left) [label="/eng or /support"]
}
entry_point { # Bot & Routing
n2: rectangle label:"Shared Bot"
n3: rectangle label:"Gateway"
n4: diamond label:"Prefix Router"
}
hermes_profile { # Unified Profile
n5: rectangle label:"Profile: acme"
}
department_modes { # Internal Logic
n6: rectangle label:"Engineering Mode"
n7: rectangle label:"Support Mode"
}
Install the MCP packagenpm install -g flowzap-mcpMCP documentation
Option 4: external participants, per-client gateways and routers, department prefixes inside each tenant, and a sandbox per client.
Option 1 of the Hermes multi-tenant setup: one external actor, one gateway, one isolated workspace inside an execution sandbox, and a single client profile.
Shared host, per-client profiles and tool boundaries: how external clients reach their own Hermes workspaces without seeing another tenant's tools or data.
Option 3, the core multi-tenant setup: per-token entry points, one gateway per client, and isolated Hermes profiles running in separate containers.
A planner decomposes the request on a shared board, specialized workers claim tasks, and the orchestrator delivers once every card is closed.
Legacy executor, LLM-as-judge evaluator and next-gen consumer: an evaluator scores the full trajectory, rejects structural sloppiness and forwards only validated payloads.