LibreAI / AI Agents / onecli
// agents · onecli/onecli

onecli

An open-source sandboxed agent harness for teams — a secured personal agent for every employee.

★ 3.6k stars⑂ 250 forksApache-2.0updated 2026-10
▦ visual — this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

onecli is an open-source ai agents project by onecli (onecli/onecli on GitHub). It has 3,565 GitHub stars and 250 forks, is released under the Apache-2.0 license, and was last updated on GitHub on 8 October 2026.

Repository
onecli/onecli
GitHub stars
3,565
Forks
250
License
Apache-2.0
Last updated on GitHub
8 October 2026
Category
AI Agents
Listing
Full install guide
Official site
Official site
// how it works

How it works

  1. Clarify your goal

    Decide the first concrete outcome you want from it, so you can pick the right example, template or mode instead of exploring everything at once.

  2. Get the project

    Clone the repository (or install the published package) and skim its README quick start for the requirements for your platform.

  3. Install and configure

    Run the documented install step and set any required configuration — such as provider keys, data sources or local services — before the first run.

  4. Run your first task

    Execute the smallest documented example end to end, confirm the output is what you expected, then adapt it to your real data or workflow.

// features

Why people love it

An agent per person

Each workspace member gets a sandboxed agent reachable from the dashboard or Slack, provisioned from the company IdP.

Credentials agents never see

The gateway injects secrets per request, matched by host/path; Bitwarden/1Password on-demand injection is supported.

Deterministic approvals

Human-in-the-loop approval in chat for sensitive actions like sending email or deleting resources.

Memory and skills

Platform-kept memory you can read and edit, plus reusable skills available to every agent run.

Scheduling

Agents can plan future work and are woken by the platform at the right time.

Team policy in one place

One policy enforced for every agent, with shared global connections granted per agent.

Advertisement
// run it

Run it yourself

  1. Clone the repository

    Get the source so you can inspect, configure and run it locally.

    git clone https://github.com/onecli/onecli.git
    cd onecli
  2. Self-host OneCLI

    Clone the repo, install dependencies and run the setup.

    git clone https://github.com/onecli/onecli.git && cd onecli
    pnpm install
    pnpm run setup
  3. Or develop locally

    Use mise for tooling, then run the dev stack.

    git clone https://github.com/onecli/onecli.git && cd onecli
    mise install
    pnpm install
    pnpm dev
// use cases

What you can build

Advertisement
// faq

Questions, answered

Who maintains onecli?

It is maintained by onecli on GitHub (onecli/onecli), where the source, issues and releases live.

Is it free to use?

Yes — it is free and open source under Apache-2.0, which permits use, modification and commercial redistribution, with licence/notice retention.

Does it need a paid API key?

You configure the team's own LLM keys and service accounts as global connections; OneCLI also offers a cloud-hosted option at onecli.sh.

How does it compare to running individual unmanaged agent CLIs per employee?

Compared with running individual unmanaged agent CLIs per employee, onecli's distinguishing focus is: an open-source sandboxed agent harness for teams — a secured personal agent for every employee. Pick it when that focus matches your need; the alternative may suit you better if its broader or different scope is the priority.

How do I get started?

Clone https://github.com/onecli/onecli (or install its published package), follow the README quick start to install and configure it, then run the smallest documented example — the Run section on this page mirrors those steps.

// keep exploring

Similar tools

AI Agents

moltis

Secure persistent personal agent server in one Rust binary — sandboxed, multi-provider, on your hardware

★ 2.9k starsMIT
View guide →
AI Agents

agentkit

Every AI agent deserves a wallet — onchain tools from Coinbase.

★ 1.3k starsNOASSERTION
View guide →
AI Agents

goclaw

OpenClaw rebuilt in Go — multi-tenant AI agent teams with 5-layer security in a single binary.

★ 3.6k starsCC BY-NC 4.0
View guide →
AI Agents

deepseek-harness

DeepSeek's plugin-based agent harness where everything is a plugin.

★ 245.5k starsMIT
View guide →
AI Agents

nanoclaw

A lightweight, container-isolated personal AI agent for WhatsApp, Telegram, Slack and more

★ 30.9k starsMIT
View guide →
AI Agents

deepagents

The batteries-included agent harness from the LangChain team.

★ 30.0k starsMIT
View guide →
// alternatives

Alternatives in AI Agents

The most-starred other AI Agents projects in the LibreAI catalogue — the realistic shortlist if onecli is not the right fit.

Get onecli

Free and open — grab the source, star the repo, and start creating.