OneCLI puts a credential gateway between AI agents and your secrets
Jonathanfishner · hn · 2026-07-23
OneCLI is a new open-source credential gateway for AI agents.
- Instead of handing secrets directly to an agent, OneCLI sits between the agent and the services it calls.
- It matches requests by host/path, verifies access, swaps in the real credential, and forwards the request.
- Secrets can be stored encrypted at rest or fetched live from Bitwarden / 1Password.
- The makers say the design is meant to reduce the risk of secrets ending up in agent memory, local files, or being exfiltrated through prompt injection.
More from coding & agent
- NVIDIA says Nemotron 3 Ultra hit 97.1% on agentic RTL chip-design tasks — NVIDIAAI · 2026-07-27
- Tokyo Agent Forge hackathon shipped production-ready AI agents in one day — DavidBennett__ · 2026-07-27
- Long-running agents will need immutable event logs, this thread argues — sebpaquet · 2026-07-27
- Agentic Data Science in Practice: Agents Write Code but Answer Wrong Questions — hugobowne · 2026-07-27
- A VS Code extension adds Markdown-style highlighting to Alchemy string templates — samgoodwin89 · 2026-07-27
- Claude’s Stripe MCP connector is being called unusable after repeated disconnects — evielync · 2026-07-27