Onecli

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent.

Website · Docs · Discord

---

Quick Start

Cloud-hosted: onecli.sh

Self-hosted

git clone https://github.com/onecli/onecli.git && cd onecli
pnpm install
pnpm run setup

Open http://localhost:10254

On Kubernetes, install the Helm chart instead: helm install onecli oci://ghcr.io/onecli/charts/onecli. The self-hosting guide covers both.

What is OneCLI v2?

OneCLI is an open-source platform for running AI agents as a team. You create an agent per person, give each agent the access it needs, and it works in a sandbox, routed through a gateway that injects the credentials and enforces your policy.

Why we built OneCLI?

OneCLI started as a credential vault for AI agents, built in Rust. We found that most of the demand came from individuals and teams running autonomous agents like Hermes, OpenClaw and NanoClaw. People wanted agents that do real work for the person running them, but two parts were missing:

1. managing secrets and permissions.
2. and for teams - multiplayer management.

Every autonomous agent out there is built for one person. And for one person, they're great. The moment you need to replicate that across a team, it gets messy: spinning up each agent, deciding what each one can and cannot do, hosting them, keeping track of whose agent is whose.

So we shifted, and built OneCLI v2.

Built for teams

• Your identity provider, integrated: provision agents on behalf of each employee's identity, straight from the company IdP.
• An agent per person: everyone in the workspace gets their own sandboxed agent, reachable from the dashboard or Slack.
• One policy, enforced everywhere: manage the team policy in one place, that any agent in the workspaces would be enforced by.
• Deterministic human-in-the-loop approvals: in the chat itself, for things you need 100% control over, like sending the email, deleting the Linear ticket, emptying an S3 bucket.
• Shared connections: connected once at the team level, like LLM keys or service accounts, granted per agent without ever being handed to one.

The agent

An agent is a durable thing, not a single prompt. It has: