← Back to Skills Marketplace
eddieguan801-oss

Hermes Minimax Oauth

by eddieguan801-oss · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
177
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install hermes-minimax-oauth
Description
Add MiniMax OAuth authentication support to Hermes Agent. Use when integrating MiniMax OAuth into Hermes, fixing MiniMax auth issues, or adding new OAuth pro...
README (SKILL.md)

Hermes MiniMax OAuth Skill

为 Hermes Agent 添加 MiniMax OAuth 登录支持。

功能

通过 hermes auth add minimax-oauth 命令实现 MiniMax 全球版或中国区 OAuth 登录。

工作原理

OAuth 流程(user_code + PKCE)

MiniMax 使用非标准的 user_code OAuth 流程,区别于常见的 device_code 流程:

1. POST /oauth/code          → 获取 user_code + verification_uri
2. 用户在浏览器打开 verification_uri,输入 user_code
3. POST /oauth/token         → 用 user_code + PKCE verifier 兑换 access_token
4. access_token 保存到 ~/.hermes/auth.json

关键差异:

  • 端点:/oauth/code/oauth/token(不是 /v1/oauth/*
  • grant_type:urn:ietf:params:oauth:grant-type:user_code
  • 需要 PKCE(S256 code_challenge)
  • scope:group_id profile model.completion

修改的文件

hermes_cli/auth.py

  • 新增常量DEFAULT_MINIMAX_OAUTH_*(portal URL、端点、client_id、scope)
  • 新增函数
    • _generate_pkce_pair() — 生成 PKCE verifier/challenge
    • _minimax_device_code_login() — 完整 OAuth 流程
    • resolve_minimax_oauth_runtime_credentials() — 运行时凭证解析
    • get_minimax_oauth_auth_status() — 登录状态查询
    • _refresh_minimax_access_token() — access_token 刷新
    • _is_minimax_token_expiring() — 过期检查
  • 新增 ProviderRegistry 条目minimax-oauthminimax-cn-oauth

hermes_cli/runtime_provider.py

  • _resolve_explicit_runtime() 中添加 minimax-oauth / minimax-cn-oauth 处理块

agent/auxiliary_client.py

  • OAuth provider 路由中添加 MiniMax 处理路径

hermes_cli/auth_commands.py

  • auth_add_command 支持 hermes auth add minimax-oauthhermes auth add minimax-cn-oauth

使用方法

# 全球版
hermes auth add minimax-oauth

# 中国版
hermes auth add minimax-cn-oauth

# 查看状态
hermes auth list

端点信息

区域 Portal Base Code Endpoint Token Endpoint
Global https://api.minimax.io /oauth/code /oauth/token
China https://api.minimaxi.com /oauth/code /oauth/token
  • Client ID: 78257093-7e40-4613-99e0-527b14b39113
  • Scope: group_id profile model.completion
  • Inference URL: https://api.minimax.io/v1 (global) / https://api.minimaxi.com/v1 (CN)

注意事项

  • MiniMax 没有标准的 device_code OAuth(/v1/oauth/* 是错的)
  • 必须使用 PKCE S256,user_code 需配合 code_verifier 使用
  • 登录后 token 通过 refresh_token 刷新,无需每次重新授权
Usage Guidance
This SKILL.md is a developer-facing implementation guide rather than executable code. If you plan to apply these changes: review any code changes before merging, confirm the client_id and endpoints with MiniMax documentation, ensure all requests use HTTPS and PKCE S256 as described, securely store tokens (restrict file permissions for ~/.hermes/auth.json), implement safe refresh/expiry handling, and test in a staging environment. Because the skill is instruction-only, it cannot act on your machine by itself, but any code you add following it will change the agent's authentication behavior — perform normal code review and security checks.
Capability Analysis
Type: OpenClaw Skill Name: hermes-minimax-oauth Version: 1.0.1 The skill bundle describes the implementation of MiniMax OAuth authentication for the Hermes Agent using a standard PKCE and user_code flow. The documentation in SKILL.md outlines legitimate modifications to authentication logic and credential storage in ~/.hermes/auth.json, with no evidence of malicious intent, data exfiltration, or suspicious network activity beyond the official MiniMax endpoints (api.minimax.io and api.minimaxi.com).
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description describe adding MiniMax OAuth and the SKILL.md only discusses adding OAuth-related constants, functions, and provider entries to Hermes source files — these requirements are coherent with the stated purpose. No unrelated binaries, env vars, or services are requested.
Instruction Scope
The instructions are scoped to implementing a specific OAuth flow (user_code + PKCE) and modifying Hermes code paths; referenced files (e.g., ~/.hermes/auth.json) and endpoints are consistent with an auth implementation. There are no instructions to read unrelated system files, access other credentials, or transmit data to unexpected endpoints.
Install Mechanism
There is no install spec and no code files — this is a textual implementation guide only, which is low-risk because it does not write or execute code by itself.
Credentials
The skill declares no required environment variables or credentials. It documents a public client_id and specific MiniMax endpoints, which is appropriate for implementing OAuth. No excessive or unrelated secrets are requested.
Persistence & Privilege
The skill does not request 'always' presence or system-wide configuration changes. It describes storing tokens in the agent's own auth file (~/.hermes/auth.json), which is expected for an auth provider implementation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hermes-minimax-oauth
  3. After installation, invoke the skill by name or use /hermes-minimax-oauth
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
**MiniMax OAuth login support integrated for Hermes Agent.** - Added MiniMax OAuth authentication ("minimax-oauth" & "minimax-cn-oauth") with PKCE + user_code flow. - Provided correct OAuth endpoints, client_id, and scope for both Global and China regions. - Implemented new auth functions for login, token refresh, and status checking. - Allowed `hermes auth add minimax-oauth` / `hermes auth add minimax-cn-oauth` CLI commands for simple OAuth login. - Dropped the OpenClaw OAuth implementation reference; docs now reference MiniMax endpoints and process directly.
v1.0.0
Initial release: Add MiniMax OAuth support to Hermes Agent with PKCE + user_code flow
Metadata
Slug hermes-minimax-oauth
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Hermes Minimax Oauth?

Add MiniMax OAuth authentication support to Hermes Agent. Use when integrating MiniMax OAuth into Hermes, fixing MiniMax auth issues, or adding new OAuth pro... It is an AI Agent Skill for Claude Code / OpenClaw, with 177 downloads so far.

How do I install Hermes Minimax Oauth?

Run "/install hermes-minimax-oauth" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hermes Minimax Oauth free?

Yes, Hermes Minimax Oauth is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Hermes Minimax Oauth support?

Hermes Minimax Oauth is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hermes Minimax Oauth?

It is built and maintained by eddieguan801-oss (@eddieguan801-oss); the current version is v1.0.1.

💬 Comments