YC S26's OneCLI open-sources personal AI agents with on-demand credential injection

OneCLI, a Y Combinator S26 company, launched an open-source platform giving each employee a personal AI agent on their own infrastructure. A gateway injects credentials on demand from Bitwarden or 1Password, storing nothing server-side. Agents run outbound-only with no inbound ports. Destructive actions require human approval in chat. YC listed OneCLI in its S26 batch in late July 2026.