shipfeedAI news, curated daily

19:13:40 CET
27 JUL19:13:40shipfeed
pull to refreshlast sync
Just in — 30 new
§ agents · storyline

Show HN: OneCLI – OSS credential gateway that keeps secrets out of AI agents

OneCLI releases an open-source gateway that injects secrets into AI agent requests without storing credentials in memory.

Jul 23 · · primary fetch1 sourceupdated Jul 23 ·

hey HN, Jonathan and Guy here, creators of OneCLI (https://onecli.sh/). OneCLI is an open source vault for AI Agents.Traditional vaults are used to store your secrets and, on demand, provide them to you all in a secure way, trusting the person to keep them safe. We figured that in the agent's world, this is not the case, as you don't know what happens with the secret after it's delivered to the agent, or where it was saved. Or maybe someone even manipulated them to hand them over...From that understanding, we decided to build a network gateway that sits between your AI agents and the services they call.

OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real credential, and forwards the request. the secrets set inside the OneCLI vault, encrypted on rest, or could fetch in realtime from your bitwarden / 1password wallets.Demo - https://www.youtube.com/watch?v=5e5pbPEzZfY.We started working on this by accident, even though our careers were in the security space. We were working on a devtool called ChartDB, an open-source DB tool. When OpenClaw took off back in January…

read full article on github.com
§ sources1 publication · timeline below
  1. github.comShow HN: OneCLI – OSS credential gateway that keeps secrets out of AI agentsprimary