OneCLI CLI

CLI for OneCLI — manage agents, secrets, rules, and configuration from the terminal.

Install

curl -fsSL onecli.sh/cli/install | sh

Or download from GitHub Releases, or build from source:

go install github.com/onecli/onecli-cli/cmd/onecli@latest

Quick Start

onecli auth login --api-key oc_...
onecli agents list
onecli secrets list
onecli agents create --name "My Agent" --identifier my-agent

Commands

Agents

onecli agents list                                     List all agents
onecli agents get-default                              Get the default agent
onecli agents create --name X --identifier Y           Create a new agent
onecli agents delete --id X                            Delete an agent
onecli agents rename --id X --name Y                   Rename an agent
onecli agents regenerate-token --id X                  Regenerate access token
onecli agents secrets --id X                           List assigned secrets
onecli agents set-secrets --id X --secret-ids a,b      Set assigned secrets
onecli agents set-secret-mode --id X --mode selective  Set secret mode

Secrets

onecli secrets list                                    List all secrets
onecli secrets create --name X --type anthropic ...    Create a new secret
onecli secrets update --id X --value Y                 Update a secret
onecli secrets delete --id X                           Delete a secret

Rules

onecli rules list                                      List all policy rules
onecli rules get --id X                                Get a single rule
onecli rules create --name X --host-pattern Y ...      Create a new rule
onecli rules update --id X [--action block] ...        Update a rule
onecli rules delete --id X                             Delete a rule

Organization

Organization-level resources are shared by every project in the org. Authenticate with an organization API key (oc_org_...); project selection is not required.

onecli org secrets list|create|update|delete           Manage org-level secrets
onecli org rules list|get|create|update|delete         Manage org-level rules
onecli org rules permissions get|set --provider X      Layered app permissions
onecli org connections list [--provider X]             List org connections
onecli org connections rename --id X --label Y         Rename an org connection
onecli org connections delete --id X                   Delete an org connection
onecli org apps configured|get|configure|remove|toggle Manage org BYOC app credentials
onecli org apps connect --provider X --field k=v       Connect an app org-wide (API-key apps)
onecli org apps authorize --provider X                 Get the OAuth authorize URL (open in a browser)
onecli org apps blocklist list|activate|add|...        Manage org app blocklists
onecli org settings get|set                            Organization settings

Auth

onecli auth login [--api-key oc_...]                   Store API key
onecli auth logout                                     Remove stored API key
onecli auth status                                     Check current auth state

Authentication is only required when the server enforces it. In local mode, commands work without logging in.

Config

onecli config get <key>                                Read config value
onecli config set <key> <value>                        Write config value

Environment Variables

Variable	Description
ONECLI_API_KEY	API key (overrides stored key)
ONECLI_API_HOST	API base URL (default: https://api.onecli.sh)
ONECLI_ENV	dev or production

Output

All output is JSON. Filter with --fields, extract single values with --quiet:

onecli agents list --quiet id
onecli agents list --fields id,name,secretMode

License

Apache 2.0