OneCLI hits 2.8K stars handing agents fake API keys and swapping in real ones at the network edge.

OneCLI, Apache-2.0, attacks a problem every agent builder has: agents need API access, and embedding live secrets in each agent multiplies exfiltration surface. Agents get placeholder keys; a Rust gateway on port 10255 intercepts outbound HTTP, matches host and path patterns against an AES-256-GCM-encrypted store (PostgreSQL via Prisma), and injects the real credential. "Agents never see the secrets." Ships a Next.js dashboard on port 10254, scoped per-agent access tokens, and Bitwarden integration. 2.8k stars, 307 commits. This is the most concrete answer yet to a threat model where the failure was always a live secret sitting somewhere readable.