Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Windows Tipps & SecurityDave Plummer Has Made the Task Manager of Your Dreams(21.09.2026 um 21:20 Uhr)
Sichere ProgrammierungSubqueries and CTEs: Asking a Question Inside a Question(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungTVL Trend Analysis & Liquidity Risk Assessment: Lido(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungReact is Officially Dead in 2026 (Thanks to AI)(21.09.2026 um 21:01 Uhr)
Sichere ProgrammierungUsing SHA256 to Build Trustworthy Data Portals in Brazil(21.09.2026 um 21:01 Uhr)
Sichere Programmierung🚀 I reached 1,001 views on DEV!(21.09.2026 um 21:03 Uhr)
Sichere ProgrammierungReact Mental Models 2(21.09.2026 um 21:05 Uhr)
Sichere ProgrammierungAustralian RAM and SSD prices climb as stock tightens(21.09.2026 um 21:09 Uhr)
Windows Tipps & SecurityDave Plummer Has Made the Task Manager of Your Dreams(21.09.2026 um 21:20 Uhr)
Sichere ProgrammierungSubqueries and CTEs: Asking a Question Inside a Question(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungTVL Trend Analysis & Liquidity Risk Assessment: Lido(21.09.2026 um 21:00 Uhr)
Sichere ProgrammierungReact is Officially Dead in 2026 (Thanks to AI)(21.09.2026 um 21:01 Uhr)
Sichere ProgrammierungUsing SHA256 to Build Trustworthy Data Portals in Brazil(21.09.2026 um 21:01 Uhr)
Sichere Programmierung🚀 I reached 1,001 views on DEV!(21.09.2026 um 21:03 Uhr)
Sichere ProgrammierungReact Mental Models 2(21.09.2026 um 21:05 Uhr)
Sichere ProgrammierungAustralian RAM and SSD prices climb as stock tightens(21.09.2026 um 21:09 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I taught Hermes Agent to predict which API changes will break my system

This is a submission for the Hermes Agent Challenge: Build With Hermes Agent What I Built Drift Detective is an MCP server that turns Hermes Agent into an API contract mutation tracker. It probes your microservices on a cron…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

This is a submission for the Hermes Agent Challenge: Build With Hermes Agent






What I Built



Drift Detective is an MCP server that turns Hermes Agent into an API contract mutation tracker. It probes your microservices on a cron schedule, stores response shapes (fields, types, nesting depth), and classifies changes when they happen: additive, breaking, or cosmetic.



The interesting part: it learns. After you mark a few changes as "safe" or "breaking," it starts predicting. Week one it's noisy. Week three it knows that your payments service adding nullable fields is always fine, but your auth service changing any field name will break downstream consumers.






Demo







The demo runs against a local API server with four mutation stages:



Stage 1 (baseline): Agent records the shape of /api/users, /api/payments, /api/health.



Stage 2 (additive change): New fields appear. Agent flags them as low-urgency additive drift. I mark them "safe."



Stage 3 (breaking change): Fields get renamed and removed. Agent flags these as high-urgency breaking drift. I mark them "breaking."



Stage 4 (prediction fires): More fields get removed. This time the agent predicts "likely breaking" before I say anything. It recognized the removal pattern from my stage 3 feedback.



After a few interactions the alert quality is visibly different from probe 1. That's the whole point.






Code










Drift Detective



API contract mutation tracker that learns what breaks things.


Drift Detective probes your APIs on a schedule, stores response shapes, detects structural changes, and classifies them. It learns YOUR system's patterns from your feedback. Alerts get smarter, not noisier.



What It Does





  1. Probes API endpoints, extracts JSON response shape (field names, types, nesting)


  2. Detects shape changes between probes


  3. Classifies changes: additive (new field) or breaking (removed/renamed/type-changed)


  4. Learns from your feedback. Mark changes as "safe" or "breaking" and it remembers.


  5. Predicts future changes using accumulated knowledge



Hermes Features Used
































Feature How
MCP Server Custom stdio server providing probe/classify/learn tools
Cron Scheduler Periodic endpoint probing, no manual intervention
Persistent Memory Endpoints, shapes, and learned patterns survive across sessions
Learning Loop / Skills Writes skill docs about your system's change patterns
AGENTS.md Context Defines alert behavior and classification rules


Demo Walkthrough





1. Start the demo API





python demo/api_server.py



Local API with…











My Tech Stack



Drift Detective's stack:




  • Python 3.11+ (runtime)

  • MCP SDK (mcp>=1.0.0) for the stdio server protocol

  • httpx for probing API endpoints

  • SQLite for persistence (shapes, history, learned patterns)

  • Hermes Agent as the orchestrator (MCP client, cron, memory)

  • Demo API: stdlib http.server (no dependencies)






How I Used Hermes Agent



This isn't a wrapper that calls the LLM once. Five Hermes capabilities do actual work here:



MCP Server (custom stdio): The core engine. Five tools: probe_endpoint, list_endpoints, get_drift_history, record_verdict, get_learned_patterns. All state lives in SQLite. The agent reasons about when and how to call them.



Cron Scheduler: Fires every 30 minutes (configurable). The agent probes all registered endpoints, compares shapes, and delivers a report to Telegram/Discord/wherever you talk to it. No human in the loop for routine checks.



Persistent Memory: Endpoint registry, shape history, and learned patterns survive across sessions. The agent picks up where it left off even after a restart.



Learning Loop / Skills: When the agent accumulates enough feedback, it writes a skill document describing your system's change patterns. That skill loads into future sessions, giving the agent prior context before it even runs a probe.



AGENTS.md Context: Defines classification rules, alert urgency levels, and when to include predictions vs. ask for feedback. Shapes the agent's behavior without touching code.






How It Works (Technical)



The MCP server extracts a structural "shape" from any JSON response:




{"users": [{"id": 1, "name": "Alice"}], "total": 1}






Becomes:




$.total         → integer
$.users[] → array
$.users[].id → integer
$.users[].name → string






When a shape changes, the diff engine classifies each field-level change:




  • New field added → additive

  • Field removed or renamed → breaking

  • Type changed (string→integer) → breaking



The learning system stores verdicts keyed by endpoint + change category. After one verdict for a pattern, predictions fire on the next similar change. It generalizes: if "removed field: name" was breaking, then "removed field: email" on the same endpoint gets the same prediction. The patterns are simple and domain-specific, so one data point is enough to be useful.






What I'd Build Next




  • Webhook mode: listen for deploy events from CI/CD, probe immediately after deploys

  • Consumer registry: know which downstream services depend on which fields, route alerts accordingly

  • Schema diffing beyond JSON: gRPC protobuf changes, GraphQL schema introspection

  • Multi-endpoint correlation: "every time auth-service changes, payments-service breaks 2 hours later"






Source Code



GitHub link




drift-detective/
├── mcp_server/server.py # MCP server with probe/classify/learn tools
├── demo/api_server.py # Mutable demo API
├── skills/drift-detective-patterns.md
├── AGENTS.md
└── pyproject.toml






Install: pip install -e ., add the MCP config to ~/.hermes/config.yaml, done.

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I taught Hermes Agent to predict which API changes will break my system

Thematisch verwandte Begriffe: taught, Hermes, Agent, predict · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-94494 | jshERP through 3.6 contains a tenant isolation bypass vulnerability that…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick