Aligned Software

Store credentials once. Let agents make requests. Never hand them the keys.

Internal tool. ASOneCLI runs only inside Aligned Software's AI infrastructure. It is not offered as a hosted service and there is no way to sign up.

The software itself is available for anyone to run under the Apache 2.0 license at github.com/deweysasser/onecli.

What it does

AI agents need to call outside services: source control, chat, cloud APIs, ticketing. Putting real API keys in an agent's environment means every prompt injection or misbehaving tool call can leak them. ASOneCLI sits between the agent and the network so the agent never holds a real secret.

Aligned Software has extended the base package beyond secret injection so that it also acts as a general network control layer: the gateway decides which hosts an agent may reach at all, whether or not a credential is involved.

  • Vault. Secrets are stored encrypted with AES-256-GCM and decrypted only at the moment a request is forwarded.
  • Gateway. Agents send ordinary HTTP requests carrying placeholder tokens. The gateway matches the destination host and path, swaps in the real credential, and forwards the request.
  • Host access control lists. Each agent is allowed to reach a specific list of hosts and nothing else. Requests outside the list are refused before any credential is involved.
  • Dashboard. Operators manage agents, secrets, and permissions in a web interface. Agents themselves never see it.

Built on OneCLI

ASOneCLI is a fork of OneCLI, an open-source credential gateway released under the Apache License, Version 2.0. Aligned Software maintains the fork to extend it from a secret-injection proxy into a general network control layer, starting with host access control lists, and to fit the tool to its own infrastructure.

The source for the fork is public at github.com/deweysasser/onecli under the same Apache 2.0 license. Anyone may run it on their own infrastructure. The instance Aligned Software operates is not available to anyone outside Aligned Software.

Status
Internal use only; source available
Upstream
onecli/onecli
Fork
deweysasser/onecli
License
Apache License 2.0
Operator
Aligned Software

Policies

Because ASOneCLI connects to third-party services on behalf of Aligned Software, those services may ask where our privacy and terms live. They are here:

Questions about ASOneCLI go to contact@alignedsoftware.com.