Show HN: OneCLI – OSS credential gateway that keeps secrets out of AI agents

OneCLI is an open-source credential gateway that allows AI agents to make API calls without directly accessing sensitive credentials. Instead of embedding real API keys in agents, users store credentials once in OneCLI and provide agents with placeholder keys; the gateway transparently intercepts requests, authenticates with access tokens, and injects the actual credentials before sending requests to external services. The system uses a Rust-based HTTP gateway with AES-256-GCM encryption to keep secrets secure while giving administrators centralized control over access management and key rotation.