OneCLI puts a credential gateway between AI agents and your secrets
Jonathanfishner · hn · 2026-07-23
OneCLI is a new open-source credential gateway for AI agents.
- Instead of handing secrets directly to an agent, OneCLI sits between the agent and the services it calls.
- It matches requests by host/path, verifies access, swaps in the real credential, and forwards the request.
- Secrets can be stored encrypted at rest or fetched live from Bitwarden / 1Password.
- The makers say the design is meant to reduce the risk of secrets ending up in agent memory, local files, or being exfiltrated through prompt injection.
More from coding & agent
- ThoughtSpot launches SpotterCode, a hosted MCP server letting Claude Code query live instances — thoughtspotdev · 2026-10-26
- Non-developer stuck at 65% with Claude Code: rules files and CLAUDE.md weren't enough — jinguh · 2026-10-26
- HermesOBD: open-source macOS app pipes live car OBD-II data to a local Hermes agent — Teknium · 2026-10-26
- User Claims Codex Autonomously Reverse-Engineered Serum2 and Stripped Its License — Kyrannio · 2026-10-26
- colab-mcp lets AI agents control Google Colab notebooks directly — helloiamleonie · 2026-10-26
- Postiz, an open-source AI-agent social media manager, hits 37.9k GitHub stars — abhishek__AI · 2026-10-26