OneCLI
OneCLI is an open-source credential gateway that sits between AI agents and the APIs they call, keeping real keys out of an agent's memory entirely. A Rust proxy matches each request by host and path, injects the real credential, and enforces per-agent policy before forwarding it.
Jonathan Fishner and Guy launched it as a Y Combinator-backed Show HN on March 12, 2026, reaching 161 points; the GitHub repo passed 2,800 stars within weeks. It resurfaced on July 23, 2026 with a second front-page Show HN, a Bitwarden Agent Access SDK integration, and a 1Password Marketplace listing.
NanoClaw, an open-source personal-agent runtime, adopted OneCLI's agent vault in March 2026 after an agent mass-deleted emails despite explicit instructions not to; agents now route Gmail and calendar calls through OneCLI with per-group rate limits instead of holding raw OAuth tokens.
Think of it as a hotel key card: each card opens only its scoped doors, and the front desk can revoke access instantly.
See nascent terms 7 days before everyone, unlock every stage filter, and get weekly early alerts.
Why is it emerging now?
AI agents now call dozens of APIs, and prompt injection makes handing them raw keys risky — OneCLI proxies those calls through a Rust gateway so agents never see a real credential. A March 12, 2026 launch reignited in July with a 1Password Marketplace listing and a second front-page Show HN.
Search Interest
-
Nascent0–7 days
-
Emergent8–30 days
-
Validating31–90 days
-
Rising ← now91–180 days
-
Established180 days +
Outlook
6-month signal projection and commercial timeline.
Bitwarden and 1Password integrations give OneCLI distribution into existing password-manager audiences without them building their own agent proxy.
Risk · 1Password or Bitwarden could ship a native agent-credential gateway and fold OneCLI's niche into their own product.
Analogs · agent-harness · webhook-secrets · ai-agent-identity
-
nowFree tier, OSS core, no ads
Free forever for up to 2 agents; dashboard and vault are the paid surface, no SERP ads yet.
-
3-6moVault-integration comparisons emerge
1Password and Bitwarden pairings invite 'best agent secrets vault' comparison content.
-
6-12moPassword managers add native rivals
Incumbent vault vendors may ship their own agent gateway, compressing OneCLI's differentiation window.
Competition & Opportunity for term “OneCLI”
Signals derived from the tracked queries, the term's monetization cards, and its cluster neighbors. Heuristic except where marked measured (Google KD).
Ideas for term “OneCLI”
Buildable pitches — turn this term into an article, site, product, post, newsletter, video, or course. Steal any card and run with it.
HN commenters already named these as alternatives; no head-to-head comparison exists yet for the agent-specific use case.
Search-intent explainer targeting teams hardening agent stacks after prompt-injection incidents; walks through the proxy pattern.
Both integrations shipped within weeks of each other; a practical setup comparison is missing from the SERP.
Pre-built rate-limit and approval policies per API (Gmail, Stripe, GitHub) that teams can import instead of writing rules from scratch.
A hosted overlay that turns OneCLI's per-agent access logs into SOC2-style audit reports for teams that can't self-host the analysis.
First-person build log; OneCLI's placeholder-token model has edge cases (OAuth refresh, streaming responses) worth documenting.
OneCLI keeps the real key off the agent's desk, but the placeholder token sitting in its place can still be stolen and replayed.
1Password and Bitwarden both shipped agent-facing integrations within the same month OneCLI relaunched.
What People Search
Long-tail queries from Google Suggest + Trends. Volume and competition are heuristics — directional, not audited. Content Type comes from query shape.
SERP of term “OneCLI”
What searchers see today — organic results on top, paid ads if anyone's bidding. Ad density is a real-time commercial signal.
FAQ
What is OneCLI?
OneCLI is an open-source credential gateway that sits between AI agents and the APIs they call, keeping real keys out of an agent's memory entirely.
Why is OneCLI emerging now?
AI agents now call dozens of APIs, and prompt injection makes handing them raw keys risky — OneCLI proxies those calls through a Rust gateway so agents never see a real credential. A March 12, 2026 launch reignited in July with a 1Password Marketplace listing and a second front-page Show HN.
When did OneCLI emerge?
Publicly emerged around 2026-03-12 (about 152 days ago as of 2026-08-11). EarlyTerms first recorded a pipeline signal on 2026-07-25.
Related Terms
Other terms in the same space — aliases, subtypes, competitors, and neighbors to explore next.
- Related ai-agent-identity AI Agent Identity is the emerging set of protocols and file formats that let an autonomous agent prove who it is, what it's authorized… →
- Related agent-harness An agent harness is the middleware between a large language model and the real world — code that runs the agent loop, calls tools,… →
- Related webhook-secrets A webhook secret is a shared string used to authenticate webhook deliveries: the sender computes an HMAC signature over the payload with… →
- Related agent-traps "Agent traps" is the shorthand English phrase that maps one-to-one to AI Agent Traps, the taxonomy Google DeepMind published on March… →
- Related mcp-server An MCP server is a small, standalone program that exposes one capability — a database, a filesystem, a security scanner, a trading API —… →
- Related managed-agents Managed Agents is an infrastructure paradigm where cloud platforms host, orchestrate, and operate AI agents as a service. →
- Related openclaw OpenClaw is an open-source self-hosted personal AI agent: a long-running runtime that connects to any LLM (Claude, GPT, DeepSeek, Kimi,… →
- Related dev-agents Dev Agents is a loose umbrella label for AI agents that write, review, and ship code on a developer's behalf — a near-synonym of the… →
- Also known as
- Part of
- Related
Sources
Primary URLs this report cites — open any to verify the claim yourself.
- 01 OneCLI — official site onecli.sh ↗
- 02 OneCLI blog: Why We Built OneCLI onecli.sh ↗
- 03 onecli/onecli — GitHub repo github.com ↗
- 04 Show HN: OneCLI – Vault for AI Agents in Rust news.ycombinator.com ↗
- 05 Show HN: OneCLI – OSS credential gateway that keeps secrets out of AI agents news.ycombinator.com ↗
- 06 OneCLI blog: Bitwarden Agent Access SDK integration onecli.sh ↗
- 07 NanoClaw Adopts OneCLI Agent Vault nanoclaw.dev ↗