OneCLI is an open-source credential gateway with a built-in vault designed to keep sensitive secrets out of AI agents. It allows AI tools to securely access external services without exposing underlying API keys, offering developers a safer way to manage authentication in automated workflows.