OneCLI: Open-Source Gateway Lets AI Agents Use APIs Without Ever Seeing the Keys
Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams
OneCLI is an open-source credential gateway that sits between AI agents and the services they call. Instead of embedding real API keys in every agent, you store them once in OneCLI and give agents placeholder keys. When an agent makes an HTTP call, the gateway swaps the placeholder for the real key, decrypts it, and injects it into the request—so agents never see the secrets. Built with a Rust gateway and a Next.js dashboard, it supports AES-256-GCM encryption, host/path matching, multi-agent access tokens, and optional Google OAuth for teams.
Store once. Inject anywhere. Agents never see the keys.
- Cameri
How is OneCLI different from Databrick's Omnigent?
- ezzy-1630
Keeping the real credential out of model context is a meaningful improvement, but the gateway still becomes a confused-deputy boundary. How granular are policies below the endpoint level? An agent allowed to call a CRM API may still be tricked into exporting the wrong customer or changing a field it should only read. I'd be interested in whether policies can constrain method, path, request fields, resource ownership, and response volume, and how those rules are tested against prompt injection.
- aliasxneo
How do you even win in this space? I feel like every day I see either a paid or fully OSS version of this product being posted here. As an end user I've become so overwhelmed that I've just started to mostly ignore them at this point. I can't be the only potential customer feeling this way?