Onecli
lastmod 2026-03-22created 2026-03-221 edits
A secret gateway for AI agents
About
- A security proxy gateway that sits between AI agents and external APIs, injecting API keys automatically at request time instead of exposing them directly
- Actual keys are kept in an internal AES-256-GCM encrypted store
- Consists of a fast Rust-based HTTP gateway + a Next.js web dashboard
- Supports per-agent token-based access control and permission scopes
- Automatic per-API secret routing via host/path pattern matching
- Vault integration such as Bitwarden enables on-demand injection without server-side storage
- Choose between local single-user mode or Google OAuth team mode
- Runs the full stack with a single Docker Compose (Gateway + Web + PostgreSQL)
- An AI security hub that handles API key management, rotation, and usage tracking in one place