OneCLI

Open-source credential gateway that lets AI agents access services without ever exposing your API keys.

OneCLI: Launched, open signup. Get it at onecli.sh.

OneCLI is an open-source credential gateway built for teams deploying AI agents that interact with external APIs and services. Designed for developers, security teams, and organizations running autonomous workflows, OneCLI acts as a secure proxy layer where agents communicate with OneCLI, and OneCLI communicates with the target service, ensuring API keys and secrets never reach the agent directly. The platform ships as a single Docker container combining an encrypted vault, a policy enforcement gateway, and a management dashboard. OneCLI supports MCP tool calls, CLI commands, curl requests, and code-generated API calls, enforcing rules at the network layer across all traffic types.