How OneCLI works

Install with one command, put your keys in the vault, and every agent request goes through the gateway.

Drop-in security for any agent

One command. Zero code changes. Your agents stay secure.

$ curl -fsSL https://onecli.sh/install | sh
API keys scattered everywhere.One encrypted vault.
Agent sees raw keys.Agent never sees a key.
Revoking access means hunting down keys.Revoke once, everywhere.
What teams build with OneCLI

Coding Agents

Your Cursor or Claude agent pushes to GitHub, creates Jira tickets, and deploys to Vercel, all through OneCLI's gateway. Credentials injected, never exposed.

GitHubJiraVercelLinear

Autonomous Workflows

n8n, Dify, or custom pipelines call Slack, Google Calendar, and Stripe APIs. OneCLI injects OAuth tokens per-request. Revoke access instantly.

SlackGoogle CalendarStripeGmail

Team Governance

10 agents across 3 projects. Rate limits on the Slack API, approval rules for payment endpoints, full audit logs. One dashboard.

Multi-agentRate limitsApprovalsAudit logs

Security & Compliance

Show exactly which agent called which API, when, and what credentials were used. No keys in logs, no keys in prompts.

SOC 2Audit trailRevocationZero-trust
Don't take our word for it
Guillermo Rauch
Guillermo Rauch
@rauchg

CEO, Vercel

“Google has shipped a CLI for Google Workspace. 2026 is the year of Skills & CLIs.”

481K views3.2K likes
Peter Steinberger
Peter Steinberger
@steipete

OpenClaw creator

“Agents are really, really good at calling CLIs (actually much better than calling MCPs).”

186K views1.5K likes
Kyle Daigle
Kyle Daigle
@kdaigle

COO, GitHub

“GitHub Copilot CLI is generally available with custom agents, multi-model autopilot, and much more.”

1.2M views5.8K likes

Get started

Start securing your agents today

Free forever for up to 2 agents. No credit card required.

Get StartedRead the Docs