skills.rest
TylerSimons1127
TylerSimons1127COMMUNITY
Explore all skills by this author →
GitHub

hermes-mcp-oauth

Diagnose and fix Hermes MCP OAuth login hangs and failures on Windows.

Updated Aug 21, 2026
Search Tags:#authentication#troubleshooting#oauth#MCP#gmail#Windows#hermes
One-click install
npx skills add https://github.com/TylerSimons1127/vibe --skill hermes-mcp-oauth-tylersimons1127
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hermes-mcp-oauth
Source: https://github.com/TylerSimons1127/vibe/tree/main/skills/devops/hermes-mcp-oauth
Command: npx skills add https://github.com/TylerSimons1127/vibe --skill hermes-mcp-oauth-tylersimons1127

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gmail-mcp, and includes scripts (resource) and references (resource) components.

What problem does it solve? OAuth-backed MCP servers (Gmail, Notion, Google Workspace) often fail to connect in Hermes on Windows: the login flow freezes at "Starting OAuth flow...", Google consent returns invalid_state, or the hosted Gmail endpoint exposes no OAuth metadata. This Skill documents the root causes and proven workarounds for each failure mode. ## Core Features & Use Cases - Windows browser hang bypass: Set the SSH_CLIENT environment variable so Hermes skips webbrowser.open(), prints the auth URL, and waits for a manual paste. - Local gmail-mcp proxy setup: Run domdomegg's gmail-mcp as a local HTTP server that advertises proper OAuth metadata, since the hosted gmailmcp.googleapis.com endpoint does not. - Failure-mode fixes: Resolve invalid_state via incognito consent or a server-side session-store patch, and add test users to bypass Google's Testing-mode verification wall. - Use Case: You run hermes mcp login gmail and it hangs forever. This Skill walks you through verifying the local server is up, launching login with SSH_CLIENT set, completing consent in incognito, and registering the correct callback URI. ## Quick Start Ask the agent to fix my hanging Hermes Gmail MCP OAuth login on Windows using the SSH_CLIENT bypass and the local gmail-mcp server.

Frequently Asked Questions about hermes-mcp-oauth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix Hermes MCP login hanging at Starting OAuth flow on Windows?▼

Set the SSH_CLIENT environment variable when launching login, for example SSH_CLIENT=1.2.3.4:5678:9012 hermes mcp login <name>. Hermes then skips webbrowser.open(), which blocks indefinitely under automated Chrome, prints the auth URL, and waits for you to paste the redirect.

How to connect Gmail to Hermes MCP with OAuth?▼

Run domdomegg's gmail-mcp locally as an HTTP server with your Google OAuth client id and secret, then point Hermes at http://127.0.0.1:8080/mcp with auth set to oauth. The hosted gmailmcp.googleapis.com endpoint does not expose OAuth metadata, so Hermes discovery fails against it.

Why does Google OAuth callback return invalid_state?▼

Conflicting Google session cookies from multiple signed-in accounts cause Google to drop the state parameter on redirect. Complete consent in an incognito window with only the target account; if it persists, apply the server-side session-store patch requiring an exact state match.

Can I access Gmail without OAuth using an app password?▼

Yes, the Himalaya CLI authenticates to Gmail via IMAP and SMTP using a 16-character Google app password, avoiding OAuth consent entirely. Two-Step Verification must be enabled on the account, and the v2.1.0 config.toml schema with folder aliases is required.

Why does Google say the app has not completed the verification process?▼

The Google Cloud OAuth app is in Testing status and your email is not an approved tester. Add the exact Google account under APIs & Services, OAuth consent screen, Audience, Test users in the Cloud Console, then rerun the consent flow.

Related Skills

Explore More Software Engineering Skills→
weeglooapiweeglooapi
1

weegloo-service-login-google

Guides Google Cloud Console OAuth client setup for Weegloo ServiceLogin integration.

Community
Intermediate
xu1713xu1713

himalaya

Manage IMAP and SMTP email accounts from the terminal using the Himalaya CLI.

Community
Intermediate
dallaydallay

building-mcp-server-on-cloudflare

Build and deploy remote MCP servers on Cloudflare Workers with OAuth 2.1.

Official
Advanced
episvrepisvr

himalaya

Manage IMAP and SMTP email accounts from the terminal using the Himalaya CLI.

Community
Intermediate