# Egress proxy

> Optional outbound credential-injection firewall for remote terminal sandboxes.

- 网址：https://funcoding.ai/agents/hermes-agent/user-guide/egress/
- 来源：Hermes Agent 官方文档原文（英文），MIT 许可，同步于 2026-10-11
- 官方原文：https://hermes-agent.nousresearch.com/docs/zh-Hans/user-guide/egress

---
Optional outbound credential-injection firewall for remote terminal sandboxes. The sandbox only ever holds opaque proxy tokens; real API keys never leave the host.

- [iron-proxy](https://funcoding.ai/agents/hermes-agent/user-guide/egress/iron-proxy/) — single-binary TLS-intercepting proxy from [ironsh/iron-proxy](https://github.com/ironsh/iron-proxy), lazy-installed and managed by `hermes egress`.