---
title: "OneCLI: An Open-Source Sandboxed Agent Harness for Teams"
source: "Hacker News 热门（Algolia · 中文化）"
source_tier: "t2"
url: "https://github.com/onecli/onecli"
permalink: "https://feed.astralor.com/items/itm_11b62d30a27454a63bf08161"
published: "2026-08-19T16:29:02.000Z"
score: 72
channel: "ai"
tags: ["AI Agent","OneCLI","Y Combinator","Enterprise Security","Open Source","Sandbox"]
---

# OneCLI: An Open-Source Sandboxed Agent Harness for Teams

## AI commentary

> In the current flood of AI agents, OneCLI takes a smart angle by building "secure sandboxing" as team-level infrastructure. It deserves attention not only because of the YC badge, but because it turns the thorny issue of permission boundaries into a default capability. It's especially relevant for platform engineering and security teams, and the open-source approach leaves room for deep customization.

## At a glance

OneCLI, an open-source sandboxed agent harness from Y Combinator's S26 batch, aims to provide a secure personal AI agent for every employee in a team. Unlike generic agent frameworks, OneCLI emphasizes sandboxing and permission controls, allowing organizations to deploy AI agents without exposing sensitive data or critical systems. It integrates with existing development workflows, offering an isolated execution environment, auditability, and governance features. The project was launched on Hacker News and has attracted attention from engineers and enterprises seeking safe, team-wide AI adoption. By open-sourcing the harness, OneCLI enables customization and self-hosting, which is particularly appealing for security-conscious companies.

## Key points

- OneCLI is an open-source agent harness from YC S26, designed for team-wide deployment.
- It emphasizes sandboxing and permission controls to give each employee a secure personal agent.
- Self-hosted and customizable, it suits security-sensitive enterprises.
- The Hacker News launch has drawn attention as potential infrastructure for enterprise agent adoption.

## Full text

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent. - onecli/onecli

---

Verify against the original before citing; curated by Astral Feed: https://feed.astralor.com/items/itm_11b62d30a27454a63bf08161