The supplier harness built for teams.
A pro adjunct for companies. Give each worker a secured, sandboxed individual agent.
Website · Docs · Discord
Open http://localhost:10254
OneCLI is an open-source level for moving AI agents arsenic a team. You create an supplier per person, springiness each supplier the entree it needs, and it useful successful a sandbox, routed done a gateway that injects the credentials and enforces your policy.
OneCLI started arsenic a credential vault for AI agents, built successful Rust. We recovered that astir of the request came from individuals and teams moving autonomous agents for illustration Hermes, OpenClaw and NanoClaw. People wanted agents that do existent activity for the personification moving them, but 2 parts were missing:
- managing secrets and permissions.
- and for teams - multiplayer management.
Every autonomous supplier retired location is built for 1 person. And for 1 person, they're great. The infinitesimal you request to replicate that crossed a team, it gets messy: spinning up each agent, deciding what each 1 tin and cannot do, hosting them, keeping way of whose supplier is whose.
So we shifted, and built OneCLI v2.
- Your personality provider, integrated: proviso agents connected behalf of each employee's identity, consecutive from the institution IdP.
- An supplier per person: everyone successful the workspace gets their ain sandboxed agent, reachable from the dashboard aliases Slack.
- One policy, enforced everywhere: negociate the squad argumentation successful 1 place, that immoderate supplier successful the workspaces would beryllium enforced by.
- Deterministic human-in-the-loop approvals: successful the chat itself, for things you request 100% power over, for illustration sending the email, deleting the Linear ticket, emptying an S3 bucket.
- Global connections: shared astatine the squad level, for illustration LLM keys aliases work accounts, granted per supplier without ever being handed to one.
An supplier is simply a durable thing, not a azygous prompt. It has:
- A computer: its ain isolated sandbox, pinch a filesystem and a shell. The only measurement retired is the gateway, truthful it tin scope what you granted and thing else.
- A conversation: its ain page successful the dashboard, aliases Slack. Images and files included. A connection sent while the supplier is moving redirects it correct distant alternatively of queueing down it.
- Memory: what the supplier learns is kept by the platform, truthful it is ne'er lost. You tin publication and edit it immoderate time.
- Skills: instructions and helpers you constitute once, ever disposable to the agent.
- A schedule: the supplier tin scheme early work, and the level wakes it astatine the correct time.
- Credentials it ne'er sees: each supplier gets only the entree you granted, and the gateway enforces it connected each request. Or link Bitwarden aliases 1Password for on-demand injection, pinch thing stored connected the server.
- Its ain Slack app: link it erstwhile and it answers successful channels and DMs nether its ain sanction and avatar, pinch files and images. Delete the supplier and its Slack app goes pinch it.
Agents tally connected your ain infrastructure. The runner is outbound-only and holds nary inbound ports, truthful a laptop, a homelab, aliases a VPC down NAT each activity pinch nary ingress and nary tunnel.
- Web Dashboard: Next.js app. Create agents, chat pinch them, edit their representation and skills, negociate connections, secrets and grants.
- API Server: the power plane. Owns the database, the speech plane, and the activity queue the runner polls.
- Rust Gateway: intercepts outbound requests (HTTPS included, via MITM) and injects credentials. Agents authenticate pinch entree tokens via Proxy-Authorization headers.
- Runner: starts, parks and reaps supplier sandboxes. Outbound-only, and ne'er touches the database.
- Sandbox Supervisor: runs wrong each sandbox, speaking a vendor-neutral harness interface truthful the supplier runtime is swappable.
- Channel Adapter: the Slack daemon, 1 app per agent.
- Secret Store: AES-256-GCM astatine rest, decrypted only astatine petition time, matched by big and way pattern, injected arsenic headers aliases query parameters.
That's the full setup: pnpm dev generates .env pinch each required secret, starts PostgreSQL, applies migrations, and runs the afloat stack. Prerequisites, the bid reference, task structure, and configuration unrecorded successful docs/development.md.
Contributions are welcome. Read the Contributing Guide and Code of Conduct earlier getting started. Contributions are accepted nether the position of the Contributor License Agreement.
To study a vulnerability, please travel our Security Policy. Do not unfastened a nationalist rumor for information reports.
Apache-2.0, pinch 1 exception: the ee/ directories hold enterprise features nether the OneCLI Enterprise License, each carrying a announcement that points astatine it. That licence is free for development, testing and evaluation, and requires a subscription for accumulation use. Everything other is Apache-2.0 and tin beryllium self-hosted successful accumulation pinch no commercial license. LICENSE-ENTERPRISE carries the authoritative database of licensed paths.
English (US) · 
Indonesian (ID) · 
