onecli/onecli

Health v2 · maintenance only

Adoption not part of the score

3511 stars · 234 forks observed · 2026-09-24

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OneCLI is an open-source platform that gives every employee a personal, sandboxed AI agent, with all tool calls routed through a gateway that injects scoped credentials and enforces team policy. Agents never see raw secrets, and human-in-the-loop approvals, IdP provisioning, and Slack access are built in.

Use cases

• give every employee a secure personal AI agent
• run AI agents without exposing API keys to the model
• enforce a single security policy across all team agents
• provision agents from a company identity provider
• require human approval for sensitive agent actions
• self-host a multi-user agent platform
• route agent tool calls through a credential-injecting gateway

When to choose

• you want to deploy agents across a team or company with per-person isolation
• your compliance posture requires that agents and LLMs never hold real credentials
• you need deterministic, network-level policy enforcement rather than prompt-based guardrails
• you want IdP integration, audit logs, and Slack access out of the box

When to avoid

• you are a solo user who just wants a personal agent with full machine access
• you need a lightweight agent framework library rather than a hosted/self-hosted platform
• you cannot run a gateway in front of your agents' network traffic

Facets

service · maturity active

agent-framework secrets-management security mcp api-gateway security developer-tools self-hosted self-hosted rust cli credential-vault sandboxed-agents human-in-the-loop team-agents policy-enforcement identity-provider slack-integration gateway-proxy sandboxing ai-agents docker nodejs web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="onecli/onecli")