Skip to main content

kiwi

❖ Communityv1.2.2★ 0

Source suppliers and negotiate purchases through the Kiwi Buyer MCP server — an open-source A2A commerce runtime (pinned @harrylabsj/kiwi@0.12.5 over npx stdio), with the kiwi-buyer sourcing workflow skill bundled. Sourcing is dual-source: Kiwi Network results come from kiwi_search, and internet e-commerce listings are reported through the host's own web tools when the session has them (a host capability, not a plugin guarantee). Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH. No credentials required; Kiwi never handles payments.

Open in Hermes Desktop
hermes plugins install kiwi

README

From the reviewed commit 5d23517 ↗; it updates when the author re-pins.

hermes-plugin-kiwi

Source suppliers and negotiate purchases from Hermes Agent through Kiwi's buyer MCP server — an open-source A2A commerce runtime for supplier discovery, RFQ fan-out, negotiation, non-binding agreements and trade handoff. Kiwi never handles payments and never places orders.

Sourcing searches are dual-source: Kiwi Network results come from kiwi_search, and — when the session has web search / page-reading tools enabled — the skill also reports internet e-commerce listings as a separate, labelled section. The internet path is a host capability, not a guarantee of this plugin: when those tools are unavailable the skill says the internet side was not searched instead of implying it was.

This is a portable Agent Plugins v1 package. One install ships:

  • mcp.json — the Kiwi Buyer MCP server entry (kb), registered for every new session while the plugin is enabled. No mcp_servers edits in config.yaml.
  • skills/kiwi-buyer/ — the sourcing workflow skill: when to use which tool, the search → RFQ → negotiate → agreement → handoff loop, dual-source rules (source separation, network_search query status, price kinds, the ban on sending internet listings into an RFQ), CommerceIntent rules, and the authorization/error-handling contract. English is the default and authoritative version (SKILL.md); a Chinese translation ships as SKILL.zh-CN.md.

Install

hermes plugins install kiwi       # from the Nous plugin catalog
hermes plugins enable kiwi

Alternatively, install straight from this repo:

hermes plugins install https://github.com/harrylabsj/hermes-plugin-kiwi
hermes plugins enable kiwi

Then start a new Hermes session. The skill is available via skill_view (skills_list shows the exact agent-plugin-kiwi-… name). Node.js/npm must be on PATH (the server is launched with npx -y @harrylabsj/kiwi@0.12.5 mcp serve). The first launch downloads the pinned package.

Health check without Hermes:

npx -y @harrylabsj/kiwi@0.12.5 mcp serve <<'EOF'
{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"probe","version":"0"}}}
EOF

What you get

The pinned runtime (@harrylabsj/kiwi@0.12.5) exposes 13 tools: kiwi_search (supplier discovery, Kiwi Network only), kiwi_request_quotes (RFQ), kiwi_get_task, kiwi_negotiate, kiwi_accept_agreement, kiwi_get_agreement, kiwi_handoff, the kiwi_approve / kiwi_reject approval gates, and the merchant pull-subscription tools (kiwi_follow_merchant / kiwi_unfollow_merchant / kiwi_list_follows / kiwi_get_follow_updates). The tool set always follows the pinned version, not this README.

Hermes exposes them as mcp__kb__<tool> (the server key is kb; Hermes does not namespace MCP tools by plugin).

How it works

  • The buyer discovers merchants through the public Kiwi catalog (https://catalog.kiwi.harrylabsj.com, built-in default) and then talks to merchants directly over A2A. No local marketplace daemon required.
  • kiwi_accept_agreement and kiwi_handoff default to ask — the agent must show you candidate, terms and amount, and only proceeds after your explicit confirmation (kiwi_approve). The built-in policy sets payment to never; Kiwi produces a handoff entry (checkout/PO/contact), it does not pay or order.
  • State lives in a local SQLite store (default ~/.kiwi/mcp/dsh.sqlite, HOME based). Override with KIWI_MCP_DB, KIWI_PRINCIPAL, KIWI_BUYER_AGENT environment variables if needed. No credentials are required at install time.

Version pinning

mcp.json pins @harrylabsj/kiwi@0.12.5. Bumping the pin is a commit to this repo followed by a reviewed SHA bump in the hermes-agent plugin catalog. @latest is deliberately not used.

Attribution

Kiwi and the Kiwi Buyer MCP server are part of the open-source harrylabsj/kiwi project (Apache-2.0). This packaging plugin is Apache-2.0 as well.

eatwise❖ Community★ 0

Eatwise (外卖营养教练) — local-first Chinese dietary coach: deterministic meal nutrition reviews, personal daily energy/nutrient targets, and consented on-device profile and meal history through 9 MCP tools over a bundled open food database (TFND + USDA FNDDS). No network, no accounts, no payments; profile schema rejects name/phone/ID/medical fields by design. Engine pinned to an immutable git commit (cbc08f6) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 22.5+ on PATH. Disclosure — the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first.

Tools
freight-reconciliation❖ Community★ 0

Payer-side freight reconciliation: import carrier bills and trip ledgers into a deterministic local core (SQLite, WAL, no cloud), re-calculate against contracted rates and produce evidence-linked difference lists for human review — 14 MCP tools over uvx stdio (engine pinned to the immutable commit e8cd259c, release v0.4.1), with 3 bilingual workflow skills bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs uv on PATH. Never approves payments, sends messages or writes back to ERP/TMS; final confirmations route through a local admin page the model cannot reach. Disclosure — the optional freight-admin page listens on 127.0.0.1 and is where a human confirms mappings, rules, matches and exports; nothing leaves the machine.

Tools
good-student❖ Community★ 0

Wrong-question diagnosis and study-action loop for parents and students — deterministic local core (SQLite, no cloud), host-model recognition gated by parent confirmation. Portable Agent Plugins v1 package (mcp.json + skills/); good-student MCP server pinned to immutable commit 2469cbb over uvx, with the good-student workflow skill bundled. Needs Python 3.10+ via uv. No credentials required; all data stays on-device and nothing is uploaded.

Tools
healthcare❖ Community★ 0

Local-first personal health records: encrypted on-device Vault (AES-GCM) for vitals, medications, activities, emotions, sleep, encounters, diagnosis mentions, medication plans and reminders, served through a Keychain-paired local daemon with 24 scoped MCP tools. Zero-config first run: the plugin bootstraps Vault + daemon + agent pairing automatically under PLUGIN_DATA. Engine pinned to an immutable PyPI release (healthcare-mcp==0.2.1) over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), macOS only, Python 3.11+. Zero network by default; the optional LLM report-import endpoint stays off unless the user configures it. Approval-gated deletes, tamper-evident audit chain. Disclosure — personal health record-keeping, not medical advice (the skill forbids diagnoses and dosage changes); first run has uvx fetch healthcare-mcp==0.2.1 from PyPI; the optional report-import path posts report images to Alibaba DashScope (qwen-vl-max) unless HEALTHCARE_LLM_ENDPOINT points elsewhere, and only when HEALTHCARE_LLM_API_KEY is set.

Tools
reading-buddy❖ Community★ 0

Local-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in fictional demo mode for previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only after user confirmation. Disclosure — live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent's WeRead agent gateway) and nothing else; the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine's npm dependencies resolve as caret ranges at first launch.

Tools
wechat-social-assistant❖ Community★ 0

Local-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no cloud), and serves contact briefs, follow-up planning, outreach drafts and weekly relationship reports through 32 MCP tools. Engine pinned to the immutable PyPI release wechat-social-assistant==1.5.1 over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs uv on PATH. All data confined to PLUGIN_DATA via WSA_ALLOWED_ROOT + path enforcement. Never reads WeChat databases, never injects into WeChat, never sends messages — outreach is drafts for human review only. Disclosure — reads WeChat only by screenshotting/OCR-ing and walking the macOS Accessibility tree of the frontmost window (not WeChat's databases or a bot API), compiles bundled Swift helpers with swiftc into ~/Library/Caches/wechat-social-assistant/bin on first use, and needs Screen Recording (optionally Accessibility) permission for the host terminal; no network egress, never sends messages.

Tools

← Back to the catalog · catalog built Oct 14, 2026