OneCLI

OneCLI runs as a local proxy and encrypted credential vault so agents can make authenticated API calls without directly handling raw secrets. It adds audit logs, revocation controls, and per-agent access constraints while fitting into existing HTTP-based agent workflows.