OneCLI Hits 2.8K Stars With a Rust Proxy That Hands AI Agents Fake API Keys and Swaps in Real Ones at the Network Edge
OneCLI, an Apache-2.0 credential gateway that surfaced on Show HN, attacks a problem every agent builder has: agents need API access, and embedding live secrets in each agent multiplies exfiltration surface. Agents are issued placeholder keys; a Rust gateway on port 10255 intercepts outbound HTTP, matches host and path patterns against an AES-256-GCM-encrypted store (PostgreSQL via Prisma), and injects the real credential — 'agents never see the secrets.' It ships a Next.js dashboard on port 10254, scoped per-agent access tokens, and Bitwarden vault integration for on-demand injection. At 2.8k stars and 307 commits, it is the most concrete answer yet to a threat model this newsletter has covered repeatedly — a leaked GitHub admin token in a camera's HTML, AWS credentials exfiltrated in an S-1 disclosure — where the failure was always a live secret sitting somewhere it could be read.
↳ Follow the thread