init-onecli

Install OneCLI, migrate .env credentials to the Agent Vault, and verify setup.

Updated Apr 10, 2026

Search Tags:#secrets #credentials #environment-variables #gateway #onecli #agent-vault

Ready to run

npx skills add https://github.com/stevengonsalvez/nanoclaw-standalone --skill init-onecli-stevengonsalvez

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/stevengonsalvez/nanoclaw-standalone/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/stevengonsalvez/nanoclaw-standalone --skill init-onecli-stevengonsalvez

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill installs OneCLI, configures the Agent Vault gateway, and migrates any existing .env credentials into the vault, addressing the security risk of plain environment credentials and enabling per-agent policies.

Core Features & Use Cases

Install the OneCLI gateway and CLI and configure the local gateway URL for secure exposure.
Migrate credentials from .env to the OneCLI Agent Vault and remove raw keys from the environment.
Verify setup by listing secrets and restarting the gateway to apply policies and rate limits.

Quick Start

Run the init-onecli skill after updating Nanoclaw to enable OneCLI integration.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I migrate environment variables to a secure credential vault?▼

Migrate .env credentials to a secure vault by installing the OneCLI Agent Vault, transferring Anthropic and OpenAI keys, and removing raw secrets from the environment. This enforces per-agent policies and eliminates plain text credential exposure.

What is the best way to set up the OneCLI gateway from scratch?▼

Setting up the OneCLI gateway involves installing the CLI, configuring the local API host URL, migrating existing credentials into the vault, and restarting the gateway to apply rate limits and per-agent policies securely.

Does OneCLI Agent Vault work on WSL and Linux environments?▼

Yes, the OneCLI Agent Vault initialization supports macOS, Linux, and WSL environments, enabling secure credential management and per-agent policy enforcement across these platforms during Nanoclaw upgrades or fresh setups.

Why should I remove credentials from .env after setting up a vault?▼

Removing credentials from .env after vault migration eliminates the security risk of plain environment variables. The OneCLI vault enforces per-agent policies and rate limits, replacing raw key exposure with secure gateway routing.

How do I verify credentials are stored correctly in the Agent Vault?▼

Verify Agent Vault credentials by listing secrets through the OneCLI CLI and restarting the gateway. This confirms successful migration from .env files and ensures the gateway applies the correct per-agent policies.

Can I configure per-agent rate limits using OneCLI gateway?▼

Yes, configuring the OneCLI gateway enables per-agent policy enforcement and rate limits. By migrating environment credentials into the vault and restarting the gateway, you apply specific access controls to individual agents.