OneCLI – Vault for AI Agents in Rust
We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
OneCLI – Vault for AI Agents in Rust launched on March 12, 2026 with 161 votes, #205 of 23,380 launches that month and more than 95% of that year's launches.
In plain words
OneCLI is an open-source gateway that manages API credentials for AI agents without exposing actual secrets. It sits between agents and external services, storing real credentials in an encrypted vault while agents use placeholder keys instead. When an agent makes an HTTP request through the proxy, OneCLI verifies permissions, substitutes the real credential, and forwards the call—keeping secrets secure throughout the process. Built in Rust, it's designed for developers deploying AI agents that need safe access to external APIs.
written from the facts on this page · September 2026
From the sources
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent. - onecli/onecli
In the maker’s words, at launch
We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You…
Does a similar job
all alternatives →
keychains.devFeb 2026 · keychains.dev · ▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
Agent Vault – Open-source credential proxy and vault for agentsApr 2026 · github.com · ▲156Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-source-crede.... We built Agent Vault in response to a question that been plaguing the industry: How do we give agents secure access to services without them reading any secrets? Most teams building agents have run into this exact problem: They build an agent or agentic system and come to realize at some point…
MonoCloud for StartupsJul 2026 · monocloud.com · ▲167One identity layer for your customers, APIs, and agents
OneKey Agent GatewayApr 2026 · aiagenta2z.com · ▲6OneKey access for agents Ship APIs/MCP/Skills/CLI 10× faster
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 28d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
Littlebird▲709Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.
AI · Mar 2026 · littlebird.ai
