# NousResearch/hermes-agent · Allowing user-approved relay of one-time codes and passwords to the agent

## Open now

- 1 issue, 2 PRs open on GitHub.
- #130417: Allow user-approved relay of short-expiry one-time codes in chat instead of hard-forbidding it
- PR #130418: feat(browser): allow opt-in fresh OTP relay
- PR #139307: The agent types a password or code you hand it, then suggests the vault (no more refusals)

The three members appear to concern letting an agent accept short-lived one-time codes (and possibly passwords) that a user provides in chat or the browser, rather than refusing outright. One title also mentions suggesting a vault afterward; the details of implementation are not stated in the titles.

## TL;DR

- 3 member(s): 1 open issue(s), 0 closed issue(s), 2 open PR(s), 0 merged PR(s), 0 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #130417: Allow user-approved relay of short-expiry one-time codes in chat instead of hard-forbidding it

## Prior & competing PRs

- **#130418: feat(browser): allow opt-in fresh OTP relay**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`
  - files: `hermes_cli/config_defaults.py`, `tests/tools/test_browser_vault.py`, `tools/browser_vault_tool.py`
- **#139307: The agent types a password or code you hand it, then suggests the vault (no more refusals)**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `a12fd45743f5cb810daa2168168630e8f75154f4`
  - files: `model_tools.py`, `tests/fixtures/prompt_surface/surfaces.json`, `tests/fixtures/prompt_surface/tools/browser_exec.json`, `tests/fixtures/prompt_surface/tools/browser_type.json`, `tools/browser_vault_tool.py`

## Fix status

- No merged fix on record.
- Subsystem: `agent`