guyb3

Re:Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams on Thursday August 20, 2026 @01:27AM (#49370683)

fair question and there are lots of overlap, here some diffs we found important for us - 1) the agent never holds your keys and all its traffic goes to onecli gateway. which adds the secret at the moment of the request. 2) our approval mechanism for risky actions like sending an email or deleting data need human approval. 3) each agent gets its own Slack app with a name, and its own avatar. QM uses one shared workspace bot for everyone, in onecli it will be three agents that look like three people in Slack, not one bot.

Re:Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams on Wednesday August 19, 2026 @02:35PM (#49365431)

It’s definitely a crowded space, totally agree about it. honestly for us we didn't want to commit to a specific provider, whether that's grok or openai. So we decided to go with a harness that lets us switch models easily when one is down, or when another provider comes out with a new improved model

Re:Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams on Wednesday August 19, 2026 @02:21PM (#49365207)

Honestly, we're not sure yet how we win this space. We both come from security backgrounds, and that's probably what led us to where we are today. basically we built the gateway first because we were afraid of using openclaw the way it came out of the box. we didn't even connect our gmail out of fear. then after a while working with agents behind the gateway, we just started building our own agent that integrates better with it, for me and my partner. So maybe it lands with the same kind of people as us, who worry about the security side and want that safe feeling. Still figuring out how many of us are out there.

Launch HN: OneCLI (YC S26) – OSS sandboxed agent harness for teams

Posted by guyb3 on Wednesday August 19, 2026 @12:29PM
from the github.com dept.

https://github.com/onecli/onecli

Hi HN, Jonathan & Guy here from OneCLI, an agent harness built for teams, giving every employee a secured, sandboxed personal agent.Here’s what you can do with it:1. get a sandboxed agent, with all the OneCLI capabilities in place like connect your GitHub account, Gmail, Notion, or Dropbox simply from the chat.2. deterministic human in the loop approval in the chat itself for things that...

( Read More... | 38 comments | 36 points | on HN )

Re:Show HN: OneCLI – Vault for AI Agents in Rust on Thursday March 12, 2026 @01:03PM (#47353932)

It's a good point, I don't think the placeholders we use will trigger a secret scanner, but we can adjust if it's an issue.

https://github.com/onecli/onecli/blob/942cfc6c6fd6e184504e01...

Show HN: OneCLI – Vault for AI Agents in Rust

Posted by guyb3 on Thursday March 12, 2026 @12:41PM
from the show-hn dept.

https://github.com/onecli/onecli

We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets."OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your...

( Read More... | 56 comments | 82 points | on HN )

Show HN: ChartDB Agent – Cursor for DB schema design

Posted by guyb3 on Wednesday October 01, 2025 @09:38AM
from the show-hn dept.

https://app.chartdb.io/ai

Last year we launched ChartDB OSS (https://news.ycombinator.com/item?id=44972238) - an open-source tool that generates ER diagrams from your database (via query/sql/dbml) without needing direct DB access.Now we’re launching the ChartDB Agent.It helps you design databases from scratch or make schema changes with natural language.You can:- Generate schemas by simply describing them in plain...

( Read More... | 36 comments | 66 points | on HN )