What problem does it solve? Agents often need to call external services like Gmail, GitHub, Google Calendar, or Stripe, but handling OAuth tokens and API keys directly is risky and cumbersome. This Skill routes all outbound HTTPS traffic through the OneCLI gateway, which injects stored credentials at the proxy boundary so the agent never sees or handles secret values. ## Core Features & Use Cases - Transparent Credential Injection: Call real API URLs directly with curl, fetch, requests, or any HTTP client; the gateway adds authentication automatically via the HTTPS_PROXY environment variable. - Guided Error Recovery: When a request returns 401, 403, or app_not_connected, surface the connect_url from the error response so the user can link the service, then retry. - MCP Credential Stubs: Create placeholder credential files with "onecli-managed" values so MCP servers that require local credentials can start, while the proxy supplies real secrets at request time. - Use Case: A user asks the agent to summarize their latest unread emails; the agent calls the Gmail API directly, the gateway injects the Google OAuth token, and results return without any manual key setup. ## Quick Start Ask the agent to read your latest Gmail messages or list your GitHub repositories, and it will make the API request through the gateway automatically.