OneCLI

OneCLI removes the security headache of managing API credentials across multiple AI agents. Rather than embedding secrets directly into agent code, configuration files, or environment variables where they might be exposed, OneCLI centralizes credential storage with enterprise-grade encryption. The gateway intercepts requests and swaps in the appropriate credentials at runtime based on your routing rules.

Highlights

• Centralized encrypted storage of API keys and authentication tokens with AES-256-GCM encryption
• Dynamic credential injection at request time, keeping agents free of embedded secrets
• Multi-agent and multi-user support with scoped access tokens and fine-grained permissions
• Host and path-based routing to match credentials against different APIs and endpoints
• Bitwarden vault integration for existing credential management workflows

OneCLI ships as a simple binary that runs locally or in your infrastructure. Authentication supports both single-user local mode and Google OAuth for team collaboration. The open-source Apache-2.0 license means full transparency and community-driven development. Perfect for teams building multi-agent systems, AI orchestration platforms, or anywhere security and auditability of credential access matters.