Hermes Agent recently added WeChat channel integration. This article covers its authentication mechanism, configuration fields, setup flow, and main constraints, for users who need to connect Hermes to WeChat.

Authentication Mechanism

The WeChat integration uses iLink Bot API QR-code scan login. It requires no Webhook and receives messages via Long Polling. Authentication happens locally, and credentials are automatically saved to ~/.hermes/weixin/accounts/, so you don’t need to scan again later.

Configuration Fields

Access Policies

Direct-message (DM) policy (WEIXIN_DM_POLICY):

• open: accepts DMs from anyone
• allowlist: only accepts whitelisted users
• disabled: turns off DMs
• pairing: requires pairing confirmation

Group-message policy (WEIXIN_GROUP_POLICY):

• open: accepts messages from all groups
• allowlist: only accepts whitelisted groups
• disabled: turns off group messages (default for personal accounts)

Setup Flow

Run it, choose Weixin, then follow the prompts to scan the QR code shown in the terminal with the WeChat mobile app and confirm the login on your phone. Credentials are saved automatically by hermes — no need to manually configure the token fields.

Media Capabilities

The adapter natively supports image, video, file, and voice messages. CDN transfers use AES-128-ECB encryption/decryption, handled internally by hermes and transparent to the user.

Main Constraints

• Single-instance limit: the same token can only be used by one hermes instance at a time. Multiple instances require multiple separate accounts.
• Group messages off by default: the default value of WEIXIN_GROUP_POLICY for personal WeChat accounts is disabled; you must set it explicitly to receive group messages.
• Automatic message splitting: replies longer than 4,000 characters are split and sent automatically at semantic boundaries.
• Dedup window: duplicate messages within 5 minutes are filtered to prevent duplicate processing.