# NousResearch/hermes-agent · Expose read-only MCP tools in code execution sandbox

## Open now

- 1 issue, 2 PRs open on GitHub.
- #97044: feat(code-execution): expose MCP tools inside execute_code (hermes_tools stubs) — design + gates
- PR #98615: feat(code-execution): expose read-only MCP tools
- PR #103604: feat(code-execution): expose read-only MCP tools in execute_code sandbox (#97044)

These items concern designing and implementing a mechanism to expose read-only MCP tools (via hermes_tools stubs) inside the execute_code sandbox environment. The work spans design, gating, and implementation phases.

## TL;DR

- 3 member(s): 1 open issue(s), 0 closed issue(s), 2 open PR(s), 0 merged PR(s), 0 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #97044: feat(code-execution): expose MCP tools inside execute_code (hermes_tools stubs) — design + gates

## Prior & competing PRs

- **#98615: feat(code-execution): expose read-only MCP tools**. open
  - maintainer direction: category `silent_close`; implication `active`
  - files: `cli-config.yaml.example`, `hermes_cli/config_defaults.py`, `model_tools.py`, `tests/tools/test_code_execution_mcp.py`, `tests/tools/test_code_kernel.py`, `tests/tools/test_code_kernel_remote.py`, `tests/tools/test_mcp_dynamic_discovery.py`, `tests/tools/test_mcp_multiplex_connection_keys.py`, `tests/tools/test_mcp_schema_cache.py`, `tests/tools/test_mcp_tool.py`, `tools/code_execution_rpc.py`, `tools/code_execution_tool.py`, `tools/code_kernel.py`, `tools/code_kernel_remote.py`, `tools/mcp_tool.py`, `tools/mcp_tool_discovery.py`, `tools/mcp_tool_health.py`, `tools/mcp_tool_registration.py`, `website/docs/user-guide/configuration.md`, `website/docs/user-guide/features/code-execution.md`
- **#103604: feat(code-execution): expose read-only MCP tools in execute_code sandbox (#97044)**. open
  - maintainer direction: category `duplicate_of`; implication `duplicate`; refs `#98615`, `#97044`
  - files: `hermes_cli/config_defaults.py`, `model_tools.py`, `tests/tools/test_code_execution_mcp.py`, `tools/code_execution_rpc.py`, `tools/code_execution_tool.py`, `tools/mcp_tool.py`, `tools/mcp_tool_discovery.py`

## Fix status

- No merged fix on record.
- Subsystem: `agent`