# OneCLI

> Apache-2.0 team agent harness — sandboxed personal agents + credential gateway

**Category:** AI Agents  
**Pricing:** open-source  
**URL:** https://onecli.sh  
**GitHub:** https://github.com/onecli/onecli  
**Added:** 2026-09-19

---

## The Hook

OneCLI is the open-source harness for giving every teammate a sandboxed personal agent — credentials inject at a gateway so keys never live in the agent prompt.

## What's Good

Apache-2.0 (onecli/onecli). Self-host with pnpm; cloud at onecli.sh. Grew from a Rust credential vault into a multiplayer agent platform: per-person agents, sandbox, policy, and secret injection for stacks like Hermes / OpenClaw-class runners. The wedge is team ops — replicate one good personal agent across a company without copying API keys into every session.

## The Catch

Vs AgentBox / Daytona / E2B: OneCLI is the team harness + credential gateway story, not a generic cloud sandbox product. Vs Infisical: secrets are a means; the product is running agents safely for many people. You still bring model spend and decide which agent CLIs to wire. Cloud convenience is optional — OSS self-host is the forever path.

## Verdict

OSS team agent harness with credential injection. Sandbox + gateway for many personal agents; not just another secrets vault.