YC Summer 2026 (S26) company

OneCLI

The Identity Gateway for AI Agents

b2bsecurityopen sourceinfrastructureaiopen source12 public signals

About OneCLI

OneCLI is a credential isolation gateway for AI agents. Agents see placeholder tokens instead of real API keys and OAuth credentials, the real secrets are injected at the network layer, so a compromised or misbehaving agent can never leak them. Teams get per-agent access control, full audit logs, and one-click integrations with Gmail, GitHub, Jira, Slack, and 50+ other apps. OneCLI is open source (2.5K+ GitHub stars, 300K+ downloads), Already the default credential layer for products like NanoClaw.

Public traction evidence

Each signal links to the public source used for attribution.

  1. GitHub

    GitHub signal from onecli/onecli

    onecli/onecli: Open-source credential gateway with a built-in vault. give your AI agents access to services without exposing keys. (TypeScript).

  2. LinkedIn

    OneCLI is backed by Y Combinator (S26) ✅

    OneCLI is backed by Y Combinator (S26) ✅

  3. X

    Every company is about to employ more agents than employees, and each agent needs credentials it can't be trusted to hold. That makes an ag…

    Every company is about to employ more agents than employees, and each agent needs credentials it can't be trusted to hold. That makes an agent-identity layer mandatory infra. OneCLI is already the default in NanoClaw and past 320K downloads on its way there.

  4. X

    Introducing OneCLI, lets AI agents do real work in companies without storing passwords. Here's how it works 🧵

    Introducing OneCLI, lets AI agents do real work in companies without storing passwords. Here's how it works 🧵

  5. GitHub

    The official node sdk

    The official node sdk

  6. GitHub

    onecli/onecli-cli

    onecli/onecli-cli

  7. X

    4/ One command covers Claude Code, Codex, Cursor, OpenClaw, Hermes, NanoClaw, and anything that can set HTTPS_PROXY. Single Docker contai...

    4/ One command covers Claude Code, Codex, Cursor, OpenClaw, Hermes, NanoClaw, and anything that can set HTTPS_PROXY. Single Docker container, AES-256-GCM at rest, IdP + org-wide policy for teams. +320K downloads. +2,500 GitHub stars. Default credential layer in NanoClaw (30K+...

  8. LinkedIn

    Guardrails Outside the Agent | Jonathan Haim Fishner posted on the topic | LinkedIn

    [Skip to main content](https://linkedin.com/posts/jonathanfishner_you-gave-me-tool-use-what-do-you-expect-activity-7468956240715542528-i67C#main-content)[LinkedIn](https://linkedin.com/?trk=[redacted-public-param]) * [Top...