I built managed hosting for Hermes Agent so I could stop babysitting a VPS

Description and use

SEAOTTER offers a managed control plane for Hermes Agent, eliminating SSH and manual secret handling, providing per‑agent isolation with gVisor, and secure secret storage via Google Secret Manager.

Problem

Managing Hermes Agent on VPS required SSH access, manual secret handling, and exposed the system to security risks and operational overhead, especially for agencies handling multiple clients.

Outcome

SEAOTTER reduces operational overhead, enhances security through isolation and secret management, and provides a 5‑minute deployment time for new agents, making it attractive for agencies, power users, and hobbyists.

Workflow

• 1. POST /api/v1/agents or use "Create Agent" UI to request a new agent.
• 2. SEAOTTER provisions a dedicated namespace and installs Hermes via Helm.
• 3. A gVisor sandbox is started for the agent, ensuring isolation.
• 4. DNS/TLS is configured and a dashboard URL is returned.
• 5. Users can pause, restart, restore, and view logs through the API or dashboard without SSH.

Evidence

SEAOTTER is a managed control plane for Hermes Agent: Per-agent isolation – each agent runs in its own namespace with a gVisor sandbox, so one client's agent can't see or touch another's.

Source

Operate without SSH — pause, restart, restore, and read logs through an API instead of a terminal.

Source