1password
Connects Claude and other MCP clients to 1Password vaults via service accounts. Exposes eight tools covering the full credential lifecycle: vault and item listing, password CRUD operations, secure generation (random or memorable passphrases), and lookups via secret references like op://vault/item/field. Ships with four guided prompts for common workflows like credential rotation and vault audits. Best suited for managing automated or disposable credentials in CI/CD pipelines, dev environments, and bot accounts rather than high-stakes personal secrets. Secrets flow through the LLM in plaintext, so treat this like any other automation tooling. Supports macOS Keychain integration to keep tokens out of config files.
- GitHub stars
- 22
- tools
- 15
- auth
- Secret needed
- transport
- STDIO
- env vars
- 3
- last updated
- Jul 4, 2026
Tools
15 toolsPublic tool metadata for what this MCP can expose to an agent.
vault_listList vaults the service account can access (id, name, description, type), limited to the allow-list if one is set.
List vaults the service account can access (id, name, description, type), limited to the allow-list if one is set.
No parameter schema in public metadata yet.
item_lookupSearch a vault by title substring; optional `limit` (max 200).
Search a vault by title substring; optional `limit` (max 200).
No parameter schema in public metadata yet.
item_listList every item in a vault (id, title, category, tags, `updatedAt`) — never secrets.
List every item in a vault (id, title, category, tags, `updatedAt`) — never secrets.
No parameter schema in public metadata yet.
item_getFull item: title, category, tags, notes, fields. Secret-bearing values stay hidden unless `reveal: true`; notes are returned as-is.
Full item: title, category, tags, notes, fields. Secret-bearing values stay hidden unless `reveal: true`; notes are returned as-is.
No parameter schema in public metadata yet.
password_readRead one field (default `password`) via `op://…` or ids. Metadata-only unless `reveal: true`.
Read one field (default `password`) via `op://…` or ids. Metadata-only unless `reveal: true`.
No parameter schema in public metadata yet.
op_check_refValidate `op://vault/item/field` and return non-secret metadata only (vault, item, field).
Validate `op://vault/item/field` and return non-secret metadata only (vault, item, field).
No parameter schema in public metadata yet.
password_createCreate a Login or Password item (username, URL, tags, notes). `returnSecret` defaults to `false`.
Create a Login or Password item (username, URL, tags, notes). `returnSecret` defaults to `false`.
No parameter schema in public metadata yet.
note_createCreate a Secure Note with optional tags and custom fields.
Create a Secure Note with optional tags and custom fields.
No parameter schema in public metadata yet.
password_updateRotate a password / concealed field (creates the field if missing).
Rotate a password / concealed field (creates the field if missing).
No parameter schema in public metadata yet.
item_editUpdate title, notes (empty string clears), tags, URL; upsert or remove fields. Unreferenced fields stay untouched.
Update title, notes (empty string clears), tags, URL; upsert or remove fields. Unreferenced fields stay untouched.
No parameter schema in public metadata yet.
password_generateCryptographically secure random password (length 8–128; symbols/numbers/uppercase toggles).
Cryptographically secure random password (length 8–128; symbols/numbers/uppercase toggles).
No parameter schema in public metadata yet.
password_generate_memorableMemorable passphrase from a ~500-word list (word count, separator, number/symbol suffixes).
Memorable passphrase from a ~500-word list (word count, separator, number/symbol suffixes).
No parameter schema in public metadata yet.
op_runRun a local command (`command` or `argv`) with env vars; `op://…` values are resolved into the child process only and redacted from output (best effort).
Run a local command (`command` or `argv`) with env vars; `op://…` values are resolved into the child process only and redacted from output (best effort).
No parameter schema in public metadata yet.
item_archiveMove an item to the archive (hidden from normal views).
Move an item to the archive (hidden from normal views).
No parameter schema in public metadata yet.
item_deletePermanently delete an item — cannot be undone.
Permanently delete an item — cannot be undone.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
OP_SERVICE_ACCOUNT_TOKENsecretThe Service Account Token from 1Password (required unless OP_KEYCHAIN_SERVICE is used on macOS)
OP_KEYCHAIN_SERVICEmacOS only: Keychain service name to read the 1Password service account token from when OP_SERVICE_ACCOUNT_TOKEN is not set
OP_KEYCHAIN_ACCOUNTmacOS only: Optional Keychain account name to narrow the lookup used with OP_KEYCHAIN_SERVICE
Readme
1Password MCP Server
Give your AI assistant a locked door to 1Password — not a pile of passwords in the chat.
@takescake/1password-mcp is a community Model Context Protocol (MCP) server. It lets Claude, Cursor, VS Code Copilot, OpenAI Codex, Gemini, and other MCP clients manage vaults and credentials through a 1Password Service Account.
Details
- Repository
- github.com/cakerepository/1password-mcp
- Package
@takescake/1password-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active