Files
hermes-mcp/product
Garfield 8d62e4d9d5 feat: multi-tenant credential isolation + architecture docs
- Add src/multitenancy/ with AES-256-GCM credential store, WhatsApp
  webhook router (phone_number_id -> customerId), and per-customer
  audit log (90-day Redis TTL)
- Add src/billing/ with plan definitions and meterMiddleware that
  resolves API key -> Customer object with getCredential() closure
- Refactor all src/clients/* to accept optional customer param,
  falling back to env vars for backward compat with single-user mode
- Thread customer through handleToolCall(name, args, customer?)
- Add customers table to MySQL schema initDatabase()
- Add /webhook/whatsapp (immediate 200 + async routing) and
  /api/connect/* onboarding endpoints to index.ts
- Add Redis 7 to docker-compose.yml; add REDIS_URL and
  CREDENTIAL_ENCRYPTION_KEY to hermes-k8s.yaml
- Add product/incubation/ with architecture write-up and PlantUML
  diagrams (system architecture + 5 user flows)
- Extend OpenAPI spec in manifest.ts with all platform endpoints

Verification: 3 isolation tests (credential, webhook routing, audit
log) passed against live Redis. Deployed to hermes.squaremcp.com.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-08 11:27:29 -04:00
..

SquareMCP

SquareMCP is the productization path for Hermes: a managed MCP gateway for internal tools.

Positioning

Expose internal tools to AI agents with:

  1. authentication
  2. tool permissions
  3. audit logs
  4. observability
  5. managed hosting

The product is aimed at teams building internal AI copilots that need speed, control, and governance.

Offer

Core product

SquareMCP, a managed MCP gateway for internal tools.

Primary buyer

Teams building internal support, operations, and workflow copilots.

Why they buy

  1. safer access to internal systems
  2. faster deployment of agent tooling
  3. auditability for regulated or high-trust environments

Packaging

Free

  1. 1 workspace
  2. 2 connectors
  3. limited monthly tool calls
  4. community support

Team

Price: $199 to $499 per month

  1. 10 connectors
  2. role based permissions
  3. audit logs
  4. retries and rate limits
  5. email support

Business

Price: $1,500 to $3,000 per month

  1. SSO
  2. private networking
  3. longer log retention
  4. alerts
  5. SLA
  6. advanced observability

Enterprise

Price: $20k to $100k+ per year

  1. VPC or on prem deployment
  2. compliance features
  3. dedicated support
  4. custom connectors
  5. architecture review

Revenue model

  1. subscription
  2. setup fee
  3. usage

Recommended starting offer:

  1. $5k to $10k setup
  2. $500 to $3k monthly

30-day launch sequence

  1. Ship the landing page with "Book a pilot" CTA
  2. Write and post the Show HN launch
  3. Post the short pitch on LinkedIn the same week
  4. Schedule Product Hunt after initial social proof

Repo layout

  • incubation/: product strategy and go-to-market notes
  • site/: landing page scaffold

Verification

Run the live site verification suite with:

  1. npm run test:product-site:verify
  2. npm run deploy:product-site:verify
  3. npm run test:product-site:cleanup

Verification notes live in:

  • site/VERIFICATION.md