OneCLI brokers credentials before agents see keys

OneCLI is an open-source credential gateway with a built-in vault for giving AI agents service access without handing raw keys to the agent loop. Why it matters: Agent autonomy gets safer when secrets move behind a broker. The review surface shifts from prompt hygiene to scopes, audit trails, and which service actions the agent can actually request.

Try this: Test it with one low-risk service account, then inspect where tokens are stored, how access is approved, and whether keys appear in logs or transcripts.