Show HN: OneCLI – OSS credential gateway that keeps secrets out of AI agents

Jonathan Fishner and Guy unveiled OneCLI on Hacker News—an open-source credential management tool addressing a key vulnerability in AI agent workflows. Agents typically store secrets in plain-text files and memory, making them vulnerable to manipulated prompts that trick them into exposing credentials. OneCLI acts as a network gateway, encrypting credentials at rest and sitting between agents and the services they access. When an agent makes a request, OneCLI checks it against your policies: if it's authorized, the credential gets swapped in; if not, the request is blocked. Even if an agent is tricked into attempting unauthorized actions, network-level enforcement ensures it simply cannot proceed. It works with any agent framework, integrates with password managers like Bitwarden and One Password, and can enforce human-in-the-loop approval for sensitive operations.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton