Skip to main content
The Community edition is free and open source. It ships as the ghcr.io/onecli/onecli image with a Docker Compose file that bundles PostgreSQL, so a single command brings up the full stack.

​
Quick start

The fastest path is the installer:
Or run it manually:
Open http://localhost:10254, create an agent, add your secrets, and point your agent’s HTTP proxy at localhost:10255.
By default the instance runs in single-user mode: no login screen, no .env required. Anyone who can reach port 10254 has admin access, so the compose file binds to 127.0.0.1. To enable multi-user mode with Google OAuth, set NEXTAUTH_SECRET and the Google credentials.

​
Pin a version

The compose file tracks latest by default. Pin a release with the ONECLI_VERSION variable:
Releases are listed on GitHub.

​
Upgrading

Database migrations run automatically when the new container starts. Back up PostgreSQL first: docker compose -f docker/docker-compose.yml exec postgres pg_dump -U onecli onecli > backup.sql.
Releases from mid-2026 replace secret modes and per-agent assignment lists with agent grants. The upgrade converts your existing setup automatically on first boot — every agent keeps exactly the credentials it had, expressed as grants — and the retired endpoints answer 410 Gone with a pointer to their replacement.Two things to know:
  • Upgrade within the conversion window. The automatic converter ships for six months of releases after the change. If your instance is older than that, upgrade in two hops: first to any release inside the window (the conversion runs), then onward to current.
  • Scripts using the retired surface need updating. Anything calling PATCH /agents/{id}/secret-mode, agents set-secrets, or the project policy rules writes should move to the grants endpoints — see the retirement inventory.

​
What’s different from Enterprise

The Community edition includes the full dashboard, the community app integrations (connected with your own OAuth credentials), and full per-agent access: grants with per-tool allow and block lists. Premium app integrations, manual approvals, the organization policy console, and the boot-time organization API key are part of the Enterprise edition, available under a commercial agreement — contact us.

​
Next steps