OneCLI
Open-source credential gateway and encrypted vault for AI agents. Agents talk to OneCLI, OneCLI talks to the service — keys never leave the vault.
Where OneCLI ranks
Current edition · updated Oct 20, 2026About OneCLI
OneCLI is a credential isolation gateway for AI agents. Agents see placeholder tokens instead of real API keys and OAuth credentials, the real secrets are injected at the network layer, so a compromised or misbehaving agent can never leak them.
Teams get per-agent access control, full audit logs, and one-click integrations with Gmail, GitHub, Jira, Slack, and 50+ other apps. OneCLI is open source (2.5K+ GitHub stars, 300K+ downloads), Already the default credential layer for products like NanoClaw.
Products
Open-source credential gateway, encrypted vault, and dashboard deployed in one Docker container.
Security and compliance
As reported by OneCLI. Ask for audit reports before you buy.
- SOC 2Compliant
- Google API Services User Data Policy (Limited Use requirements)Compliant
- SOC 2
- Audit trail
- Revocation
- Zero-trust
- TLS encryption in transit and at rest
- Encrypted OAuth refresh tokens stored on servers
- Authentication tokens stored locally on user machine, never sent to servers
- Plugin content not stored, inspected, or logged
- Telemetry is opt-out
- Account data deletion on request
- Data export in portable format
Is this your company?
Claim the profile to keep facts current, answer buyers and submit evidence for the next ranking review.
Claim OneCLI