OneCLI: Secure Credential Gateway for AI Agents
Open source solution to keep sensitive data safe from AI agents.
1Introduction
OneCLI is an open source network gateway that sits between AI agents and the services they use, keeping credentials secure. Unlike traditional vaults, it maintains control over how secrets are used after delivery to agents.
2Problem
AI agents need sensitive information like API keys to perform tasks. However, storing these in agent memory or local files creates vulnerabilities. Malicious actors can manipulate agents to disclose these credentials.
3Solution
OneCLI prevents direct credential access by agents. It matches requests by host/path, verifies access permissions, replaces placeholders with actual credentials, and forwards requests. All secrets remain encrypted at rest.
4Technology
The Rust-written proxy features a Next.js dashboard. It uses AES-256-GCM encryption and runs in Docker containers. Integrates with popular password managers like Bitwarden or 1Password. Compatible with any AI agent framework.
5Use Cases
Users can require human approval for sensitive operations. For example, an agent can review PRs but can't merge without approval. Companies currently use it mostly for coding agents, preventing permission escalation attempts.
6Significance
AI model behavior can't be fully trusted. OneCLI maintains control through deterministic rules. While agents may find creative solutions, tight security policies minimize risks by balancing their capabilities with necessary restrictions.
Original article: Hacker News: Show HN — OneCLI: AI Ajanlar İçin Güvenli Kimlik Bilgisi Ağ Geçidi