diff --git a/hermes_cli/tools_config.py b/hermes_cli/tools_config.py
index 0423cf01b3..a01345c976 100644
--- a/hermes_cli/tools_config.py
+++ b/hermes_cli/tools_config.py
@@ -777,6 +777,16 @@ def _get_platform_tools(
     else:
         enabled_toolsets.update(explicit_mcp_servers)
 
+    # Honor agent.disabled_toolsets from config.yaml — allows users to
+    # globally suppress specific toolsets (e.g. "memory") across all
+    # platforms without per-platform toolset configuration.  This runs
+    # last so it overrides everything above.
+    agent_cfg = config.get("agent") or {}
+    disabled_toolsets = agent_cfg.get("disabled_toolsets") or []
+    if disabled_toolsets:
+        disabled_set = {str(ts) for ts in disabled_toolsets}
+        enabled_toolsets -= disabled_set
+
     return enabled_toolsets
 
 
diff --git a/tests/hermes_cli/test_tools_config.py b/tests/hermes_cli/test_tools_config.py
index 6f5bc644a5..deab21fc2e 100644
--- a/tests/hermes_cli/test_tools_config.py
+++ b/tests/hermes_cli/test_tools_config.py
@@ -17,6 +17,50 @@ from hermes_cli.tools_config import (
 )
 
 
+def test_agent_disabled_toolsets_suppresses_across_platforms():
+    """agent.disabled_toolsets in config.yaml should remove those toolsets
+    from the enabled set, regardless of platform defaults or explicit config.
+    """
+    config = {
+        "agent": {"disabled_toolsets": ["memory"]},
+    }
+
+    cli_enabled = _get_platform_tools(config, "cli")
+    discord_enabled = _get_platform_tools(config, "discord")
+
+    assert "memory" not in cli_enabled
+    assert "memory" not in discord_enabled
+
+
+def test_agent_disabled_toolsets_with_explicit_platform_config():
+    """agent.disabled_toolsets should still suppress even when the platform
+    has an explicit toolset list that includes the disabled toolset.
+    """
+    config = {
+        "agent": {"disabled_toolsets": ["memory"]},
+        "platform_toolsets": {"cli": ["web", "terminal", "memory"]},
+    }
+
+    enabled = _get_platform_tools(config, "cli")
+
+    assert "memory" not in enabled
+    assert "web" in enabled
+    assert "terminal" in enabled
+
+
+def test_agent_disabled_toolsets_empty_list_is_noop():
+    """Empty or missing disabled_toolsets should not change behavior."""
+    config_empty = {"agent": {"disabled_toolsets": []}}
+    config_none = {"agent": {}}
+    config_missing = {}
+
+    default = _get_platform_tools({}, "cli")
+
+    assert _get_platform_tools(config_empty, "cli") == default
+    assert _get_platform_tools(config_none, "cli") == default
+    assert _get_platform_tools(config_missing, "cli") == default
+
+
 def test_get_platform_tools_uses_default_when_platform_not_configured():
     config = {}