Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setup Open http://localhost:10254 What is OneCLI v2? OneCLI is an open-source platform for running AI agents as a team. You create an agent per person, give each agent the access it needs, and it works in a sandbox, routed through a gateway that injects the credentials and enforces your policy. Why we built OneCLI? OneCLI started as a credential vault for AI agents, built in Rust. We found that most of the demand came from individuals and teams running autonomous agents like Hermes , OpenClaw and NanoClaw . People wanted agents that do real work for the person running them, but two parts were missing: managing secrets and permissions. and for teams - multiplayer management. Every autonomous agent out there is built for one person. And for one person, they're great. The moment you need to replicate that across a team, it gets messy: spinning up each agent, deciding what each one can and cannot do, hosting them, keeping track of whose agent is whose. So we shifted, and built OneCLI v2. Built for teams Your identity provider, integrated : provision agents on behalf of each employee's identity, straight from the company IdP. An agent per person : everyone in the workspace gets their own sandboxed ag…