OneCLI open-source proxy keeps AI agents from leaking secrets

OneCLI is an open-source credential gateway that sits between AI agents and the services they call, swapping placeholders for real secrets without exposing them to the agent. It matches requests by host/path, verifies access, and can enforce human-in-the-loop approval at the network layer. The proxy, written in Rust with a Next.js dashboard, encrypts secrets with AES-256-GCM and works with any agent framework.