# Connect Hermes to Tandem

Hermes Agent connects over OAuth. The first time it runs, it opens a browser for you to sign in.

## Steps

1. Add Tandem to Hermes's config file, then start Hermes.

**~/.hermes/config.yaml**

```
mcp_servers:
  tandem:
    url: "https://api.tandemcrm.app/mcp"
    auth: oauth
```

## How it signs in

Hermes signs in with OAuth: it registers itself with Tandem, opens your browser, and you sign in, choose a workspace and approve what it may do (read, suggest, write, delete). It gets `crm:read` and `crm:write` unless you approve less. Disconnect it any time under **Agents** in Tandem.

## Try it

Ask Hermes: "Which Tandem workspace are you connected to, and what can you do there?" Then try "Add acme.com to Tandem with the details from its website."

See the [tools reference](/docs/tools) for everything Hermes can do, and [permissions](/docs/permissions) for what each scope allows.