// HACKER NEWS — CYBERSECURITY
Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams
The agent harness built for teams.
A pro assistant for companies. Give every employee a secured, sandboxed personal agent.
OneCLI is an open-source platform for running AI agents as a team. You create an agent per person, give each agent the access it needs, and it works in a sandbox, routed through a gateway that injects the credentials and enforces your policy.
OneCLI started as a credential vault for AI agents, built in Rust. We found that most of the demand came from individuals and teams running autonomous agents like Hermes, OpenClaw and NanoClaw. People wanted agents that do real work for the person running them, but two parts were missing:
Every autonomous agent out there is built for one person. And for one person, they're great. The moment you need to replicate that across a team, it gets messy: spinning up each agent, deciding what each one can and cannot do, hosting them, keeping track of whose agent is whose.
An agent is a durable thing, not a single prompt. It has:
Agents run on your own infrastructure. The runner is outbound-only and holds no inbound ports, so a laptop, a homelab, or a VPC behind NAT all work with no ingress and no tunnel.
That's the whole setup: pnpm dev generates .env with every required secret, starts PostgreSQL, applies migrations, and runs the full stack. Prerequisites, the command reference, project structure, and configuration live in docs/development.md.
Contributions are welcome. Read the Contributing Guide and Code of Conduct before getting started. Contributions are accepted under the terms of the Contributor License Agreement.
To report a vulnerability, please follow our Security Policy. Do not open a public issue for security reports.
Apache-2.0, with one exception: the ee/ directories hold
enterprise features under the OneCLI Enterprise License,
each carrying a notice that points at it. That license is free for development,
testing and evaluation, and requires a subscription for production use.
Everything else is Apache-2.0 and can be self-hosted in production with no
commercial license. LICENSE-ENTERPRISE carries the
authoritative list of licensed paths.