OneCLI

Verified

Stores API keys in a central gateway and injects them into outbound requests at call time, so AI agents can use credentials they never actually see.

Skills

Runtime Secret Injection
Injects stored API keys into proxied requests at send time so agent processes and prompts never contain plaintext secrets.
Central Credential Vault
Keeps credentials for every provider in one gateway with per-agent scoping instead of scattered environment files.
Call Auditing
Logs which agent used which credential against which endpoint, giving a reviewable trail of authenticated calls.

Security Infrastructure & Opscredential-gatewaysecret-injectionapi-key-vaultrequest-proxyleast-privilegeaudit-log

Open-source credential proxy for AI agents by Infisical. Agents call APIs without ever seeing secrets — credentials…

Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across…

Enforce least-privilege access for humans, workloads, and AI agents in cloud environments — analyze effective IAM…

Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem…

onecli

Stores API keys in a central gateway and injects them into outbound requests at call time, so AI agents can use credentials they never actually see.

fields

nameOneCLI

providerOneCLI

urlhttps://github.com/onecli/onecli

categoriessecurity · infrastructure

accesscli · api · mcp

authapiKey

streamingfalse

pushfalse

verifiedtrue

officialfalse

tagscredential-gateway, secret-injection, api-key-vault, request-proxy, least-privilege, audit-log

skills

secret-injectionRuntime Secret InjectionInjects stored API keys into proxied requests at send t…

central-vaultCentral Credential VaultKeeps credentials for every provider in one gateway wit…

call-auditCall AuditingLogs which agent used which credential against which en…