What’s best and safest way to give Hermes access to tools , apis , mcps for Google cloud, meta, and marketing stack tools