hermes - ✅(Solved) Fix RouterMint custom-provider requests can fail with Cloudflare 1010 when Hermes omits User-Agent [1 pull requests, 1 comments, 2 participants]

hermes2026-04-23 07:33:02

ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

GitHub issue URL

Helpful · Quick feedback

GitHub stats

NousResearch/hermes-agent#14439•Fetched 2026-04-24 06:17:17

View on GitHub

Comments

Participants

Timeline

Reactions

Author

ReginaldasR

Participants

alt-glitch

ReginaldasR

Timeline (top)

labeled ×4commented ×1cross-referenced ×1

Error Message

Observe a 403 with Cloudflare error code: 1010 on the blocked path.

Root Cause

There are multiple request paths in Hermes that talk to OpenAI-compatible endpoints:

the main runtime client in run_agent.py
generic /v1/models discovery / pricing helpers in hermes_cli/models.py
doctor health checks in hermes_cli/doctor.py

Some of those paths already set provider-specific headers for special endpoints, but RouterMint was not recognized and some generic probe paths still omitted User-Agent.

RAW_BUFFERClick to expand / collapse

Bug Description

Hermes can hit Cloudflare 1010 blocks against RouterMint because some OpenAI-compatible request paths do not send an explicit User-Agent header. RouterMint accepts the same request when sent with a normal client signature, but rejects the default Python/urllib fingerprint on some paths.

This shows up as a misleading custom-provider failure even though the API key, model, and payload are valid.

Steps to Reproduce

Configure Hermes to use a RouterMint custom provider, for example:
- base_url: https://api.routermint.com/v1
- model: anthropic/claude-sonnet-4-6
Use a RouterMint key that works with curl.
Trigger Hermes request paths that rely on provider-specific or generic /models probing / doctor checks.
Observe a 403 with Cloudflare error code: 1010 on the blocked path.

Expected Behavior

Hermes should identify itself consistently on custom OpenAI-compatible endpoint requests so reachable endpoints behind Cloudflare Browser Integrity Check are not rejected solely because of the client fingerprint.

Actual Behavior

Some Hermes paths send no explicit User-Agent, which falls back to a Python default signature. RouterMint can reject that with Cloudflare 1010, while the same request succeeds with a normal User-Agent.

Affected Component

Agent Core (conversation loop, client construction)
Configuration (custom OpenAI-compatible providers)
CLI (doctor / endpoint probing)

Operating System

macOS 15.x

Python Version

3.11.15

Hermes Version

0.10.0

Root Cause Analysis

There are multiple request paths in Hermes that talk to OpenAI-compatible endpoints:

the main runtime client in run_agent.py
generic /v1/models discovery / pricing helpers in hermes_cli/models.py
doctor health checks in hermes_cli/doctor.py

Some of those paths already set provider-specific headers for special endpoints, but RouterMint was not recognized and some generic probe paths still omitted User-Agent.

Proposed Fix

Add a RouterMint-specific header helper in run_agent.py and apply it when base_url matches api.routermint.com.
Ensure generic /models probe / pricing / doctor paths send Hermes' own User-Agent instead of relying on urllib/httpx defaults.
Add a regression test for the RouterMint header path.

extent analysis

TL;DR

Add a User-Agent header to Hermes requests to RouterMint to prevent Cloudflare 1010 blocks.

Guidance

Identify all request paths in Hermes that interact with OpenAI-compatible endpoints and ensure they set a User-Agent header.
Modify run_agent.py to include a RouterMint-specific header helper when the base_url matches api.routermint.com.
Update hermes_cli/models.py and hermes_cli/doctor.py to send a consistent User-Agent header for generic /models probe and doctor check requests.
Verify the fix by triggering the previously blocked requests and checking for a successful response.

Example

import httpx

# Set a consistent User-Agent header for Hermes requests
user_agent = "Hermes/0.10.0"

# Create a client with the custom User-Agent header
client = httpx.Client(headers={"User-Agent": user_agent})

# Use the client to make requests to RouterMint
response = client.get("https://api.routermint.com/v1/models")

Notes

The proposed fix assumes that adding a User-Agent header will prevent Cloudflare 1010 blocks. However, the root cause of the issue may be more complex, and additional debugging may be required.

Recommendation

Apply the workaround by adding a User-Agent header to Hermes requests to prevent Cloudflare 1010 blocks, as this is a targeted fix for the identified issue.

Vote matrix · Quick signals

Works

Did the solution work? Tap to confirm.

Easy Fix

Was it a quick fix?

Time Saver

Did it save you time?

Blocking

Was it severely blocking?

Common Issue

Are others likely hitting this too?

Flaky / Intermittent

Is it intermittent?

Verified / Reproducible

Can you reproduce it reliably?

#api #API middleware #SSR setup #ISR setup #authentication setup

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

hermes - ✅(Solved) Fix RouterMint custom-provider requests can fail with Cloudflare 1010 when Hermes omits User-Agent [1 pull requests, 1 comments, 2 participants]

Recommended Tools

GitHub issue graph ai analysis

Error Message

Root Cause

Fix Action

Fixed

PR fix notes

PR #14440: fix: send Hermes user agent to RouterMint and model probes

Description (problem / solution / changelog)

What does this PR do?

Related Issue

Type of Change

Changes Made

How to Test

Checklist

Code

Documentation & Housekeeping

Screenshots / Logs

Changed files