1Password Agent MCP
About
Local AI access to approved 1Password fields without exposing plaintext secrets.
Details
- Author
- gambadio
- Categories
- Productivity
Jump to
Setup
Install 1Password Agent MCP in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/gambadio/onepassword-agent-mcp
Follow the installation instructions in the repository README, then restart your MCP client.
Local MCP access to approved 1Password items and profile data for AI agents.
npm package·setup guide·security model·uninstall guide
Agents receive encrypted local handles, not plaintext 1Password secrets. At the moment of copy or paste, the MCP resolves the selected field locally through the 1Password CLI and sends it to the OS clipboard or active app.
The repo contains no personal 1Password data. Every install connects to that user's own 1Password CLI and local approval policy.
Not affiliated with or endorsed by 1Password.
- Create a dedicated 1Password vault namedMCPVAULT.
- Copy or move selected logins, passwords, API credentials, credit cards, secure notes, or other supported items from your normal vaults intoMCPVAULT.
- Approve exactMCPVAULTfields for specific websites.
- Connect Claude Code, Codex, GitHub Copilot, or another MCP client.
- The agent can paste approved fields without seeing the plaintext in its response.
The MCP tools only expose approved fields from the configured agent vault. The local profile-data section can also expose user-entered values such as email, phone, address, name, and company.
Run the friendly installer. It detects supported MCP clients, shows what it found, and asks before changing their user configuration. On macOS it separately offers the optional visible menu-bar shortcut:
npm install -g github:gambadio/onepassword-agent-mcp
Prefer explicit commands? Check your setup and connect clients manually:
Connect every detected MCP client with one command:
No. Installing the npm package itself adds commands only. It does not install a launch agent, daemon, background service, startup item, browser extension, or hidden resident process.
- onepassword-agent-mcp adminruns the local approval console only while that terminal process is alive.
- onepassword-agent-mcp mcpis a stdio MCP server. MCP clients such as Claude Code, Codex, or VS Code launch it as a child process when they need it.
- onepassword-agent-mcp setup ... --applyonly writes MCP client configuration. Existing JSON files are backed up before a merge.
- The optional macOS menu-bar companion is installed only when you explicitly choose it. Its icon is visible whenever it is running.
- Launch at login is a separate choice and is off by default. Even when enabled, the visible menu-bar app does not start the admin server until you chooseOpen Admin Console.
- Restarting the computer does not auto-start this project unless you enabled the optional menu-bar login item or another app starts an MCP client that then launches the stdio server.
- Persistent local state is limited to approvals and the local encryption key in~/.onepassword-mcp.
On macOS, the guided installer can add a clearly labeled1Pitem to the menu bar. You can also enable it later underMac Menu Bar Shortcutin the local admin page.
The companion is built locally from the readable Swift source innative/MenuBarApp.swift. No opaque app binary is shipped in the npm package. The generated app uses the project's teal shield logo, is placed at~/Applications/1Password Agent MCP.app, and never asks for administrator access.
onepassword-agent-mcp menubar status onepassword-agent-mcp menubar install onepassword-agent-mcp menubar launch onepassword-agent-mcp menubar remove onepassword-agent-mcp menubar install --launch-at-login onepassword-agent-mcp menubar login on onepassword-agent-mcp menubar login off onepassword-agent-mcp menubar uninstall --apply
Usemenubar removeto close the visible shortcut without uninstalling it, andmenubar launchto show it again. Usemenubar installafter uninstalling it. The local admin page offers the same installation controls underMac Menu Bar Shortcutwhile the admin console is running.
The menu containsOpen Admin Console,Stop Admin Console,Launch Menu Bar at Login,Remove From Menu Bar, andUninstall Menu Bar Shortcut.Open Admin Consolestarts the console when needed and then opens it, so there is no separate Start action.Remove From Menu Baronly closes the visible helper; it stays installed and can be reopened.Uninstall Menu Bar Shortcutremoves the helper and its login item after confirmation. Neither action changes MCP client configuration, local approvals,MCPVAULT, or 1Password items.
The admin console itself has explicit process controls:
onepassword-agent-mcp admin status onepassword-agent-mcp admin stop
- Node.js 20+
- 1Password CLI (op)
- 1Password desktop app integration, or anOP_SERVICE_ACCOUNT_TOKEN
- An MCP client that supports local stdio servers
Enable the 1Password desktop integration:
- Open 1Password.
- Go toSettings > Developer.
- Turn onIntegrate with 1Password CLI.
- When your agent or terminal asks for access, approve only clients you trust.
The console is a simple left-to-right vault flow:
- Agent Vault Setupchecks whetherMCPVAULTexists and can create it.
- Choose From 1Passwordsearches your normal vaults and can filter by item type.
- Approve Agent Itemsis the right-sideMCPVAULTarea. Drag an item from the left list onto it, then chooseCopyorMove.
- Copied items are grouped into simple checklists for logins, API keys, credit cards, notes, and other fields already inMCPVAULT.
- Allowed For Agentsis the final allow list MCP clients can use.
- Profile Data For Agentsstores profile values agents may read directly, such as email, phone, address, name, or company.
Copy is the safe default. Copy now uses 1Password's revealed JSON clone pipe so the destination item keeps the original fields. Move is available, but 1Password creates a new item in the destination vault and deletes the original item from the source vault.
After copying, nothing is shared with agents yet. InAll Fields, copied items stay compact so the page remains easy to scan. ClickReview Detailson an item, tick only the details the agent may use, then clickApprove Selected. Credit cards show normal checkout details separately from sensitive details like CVV or PIN. Blank allowed-sites fields mean the approved item may be used on all URLs. Items inMCPVAULTcan also be deleted from the approval console after a confirmation prompt.
When agents are allowed to create new credentials, those items are saved intoMCPVAULTfirst. InApprove Agent Items, open the saved item and useSave this item to another vaultto copy or move it into a normal 1Password vault. Copy keeps the agent-vault version. Move removes it fromMCPVAULTand removes local approvals for that copied item.
The setup CLI prints a dry run by default. It detects Claude Code, Claude Desktop, Codex, VS Code, Xcode coding agents, and Raycast AI when they are installed:
The command uses absolute executable paths so GUI apps do not depend on Terminal'sPATH. Claude Desktop and VS Code JSON are merged with timestamped backups. Xcode's private Codex and Claude configuration folders are handled separately because Xcode does not use the normal CLI configuration.
Raycast stores MCP configuration in app-managed storage and does not expose a supported external config writer. The CLI opens Raycast's officialImport Serversscreen; review the prepared entry and confirm it once in Raycast. This is the only interactive client-specific step.
onepassword-agent-mcp setup claude-code --apply
claude mcp add --scope user onepassword-agent-mcp -- onepassword-agent-mcp mcp
onepassword-agent-mcp setup codex --apply
codex mcp add onepassword-agent-mcp -- onepassword-agent-mcp mcp
onepassword-agent-mcp setup copilot --apply
code --add-mcp '{"name":"onepassword-agent-mcp","command":"onepassword-agent-mcp","args":["mcp"]}'
Workspace fallback at.vscode/mcp.json:
{ "servers": { "onepassword-agent-mcp": { "type": "stdio", "command": "onepassword-agent-mcp", "args": ["mcp"] } } }
onepassword-agent-mcp setup claude-desktop --apply
The CLI safely merges the server into Claude Desktop's user JSON and preserves all other settings.
onepassword-agent-mcp setup xcode --apply
This configures the isolated Codex and Claude Agent environments used only inside Xcode.
onepassword-agent-mcp setup raycast --apply
Raycast opens its native import screen for the final confirmation. Raycast asks before MCP tool calls by default.
ChatGPT Desktop is intentionally not included in local setup. ChatGPT currently connects to remote MCP servers rather than arbitrary local stdio commands. Do not expose this password bridge through a public tunnel merely to connect it.
onepassword-agent-mcp setup generic --json
{ "mcpServers": { "onepassword-agent-mcp": { "command": "onepassword-agent-mcp", "args": ["mcp"] } } }
Stop the local approval console by pressingCtrl-Cin the terminal running:
onepassword-agent-mcp uninstall all onepassword-agent-mcp uninstall all --apply
The uninstall command removes its entries from Claude Code, Claude Desktop, Codex, VS Code, and Xcode where present, then removes the optional menu-bar app/login item. Raycast opensManage Serversfor an explicit removal because its settings are app-managed. Other client settings and all 1Password data remain untouched.
Optional: delete this app's local approvals and encryption key:
onepassword-agent-mcp uninstall state onepassword-agent-mcp uninstall state --apply
This deletes~/.onepassword-mcp. It does not delete 1Password vaults or items. DeleteMCPVAULTinside 1Password only if you intentionally want to remove that vault.
- onepassword_status: check CLI,MCPVAULT, local approvals, profile data, and settings.
- find_secrets_for_site: return approved encrypted handles for a website.
- list_approved_secrets: list approved handles and allowed sites.
- copy_secret: resolve a handle and copy the selected field to the clipboard.
- paste_secret: resolve a handle, copy it, paste into the active app, and return no plaintext.
- clear_secret_clipboard: clear the clipboard.
- save_secret_item: save a new login, password, API credential, secure note, or credit card intoMCPVAULTwhen the local save setting is enabled.
- get_profile_data: return user-defined profile data allowed for the current site.
- find_passwords_for_site,list_approved_passwords,copy_password,paste_password, andclear_password_clipboard: compatibility aliases.
- admin_ui_info: return the approval console URL.
- Passwords are not stored by this project.
- MCP copy/paste tools never return plaintext 1Password secret fields.
- Handles and stored 1Password secret references are encrypted locally.
- Disabled or deleted approvals invalidate old handles.
- Allowed-site checks run again at copy and paste time.
- The MCP server only lists and resolves approvals from the configured agent vault.
- Agent-created items are opt-in, and are saved only into the configured agent vault.
- The OS clipboard briefly contains the plaintext field value.
- The active app receives the field value when paste is triggered.
- A local process with clipboard access may observe copied secrets.
- With desktop CLI integration, the local 1Password CLI session may have broader vault access than the MCP exposes.
- get_profile_datareturns plaintext profile values you explicitly added in the admin UI.
For the strictest boundary, use a 1Password service account scoped only toMCPVAULT.
Readdocs/SECURITY.mdbefore using this with powerful browser-control agents.
~/.onepassword-mcp/policy.json ~/.onepassword-mcp/key.bin
ONEPASSWORD_MCP_HOME=/path/to/state onepassword-agent-mcp admin
MCP_VAULT_NAME=AgentVault onepassword-agent-mcp admin
{ "mcpServers": { "onepassword-agent-mcp": { "command": "onepassword-agent-mcp", "args": ["mcp"], "env": { "OP_SERVICE_ACCOUNT_TOKEN": "ops_...", "MCP_VAULT_NAME": "MCPVAULT" } } } }
- opmissing: install the 1Password CLI.
- 1Password auth failure: enable desktop CLI integration or setOP_SERVICE_ACCOUNT_TOKEN.
- MCPVAULTmissing: start the admin console and clickCreate MCPVAULT.
- Copilot setup cannot findcode: install the VS Code shell command or use.vscode/mcp.json.
- Admin UI not running: runonepassword-agent-mcp admin.
git clone https://github.com/gambadio/onepassword-agent-mcp.git cd onepassword-agent-mcp npm install
npm run build npm run typecheck npm test
Maintainer releases are automated through GitHub Actions with short-lived OIDC credentials. Seedocs/RELEASING.md; localnpm publishand repeated device authorization are not part of the release process.
The 1Password MCP server creates a bridge that allows MCP clients such as Codex and Kiro to manage your 1Password Environments with secure authorization prompts.
This is the 1st, easiest, and cheapest PPT, slides, presentation AI generation MCP Server in the world.
Persistent memory for any AI assistant. Zero token cost until recall. Stores memories in local SQLite, ranks by 6-factor scoring, returns results 79% smaller than JSON. Works with Claude, ChatGPT, Grok, Cursor, Windsurf, and any MCP client.
A MCP server that enables AI assistants to interact with Anki, the spaced repetition flashcard application.
Enables LLM clients to interact with macOS applications through AppleScript. Built using the @beyondbetter/bb-mcp-server library, this server provides safe, controlled execution of predefined scripts with optional support for arbitrary script execution.
An MCP server for WordPress plugin audits
Turn your AI assistant into a digital marketing hub that creates, organizes, and analyzes links and QR Codes on demand.
Connect AI clients to Cal.com scheduling through the Model Context Protocol using the hosted server at mcp.cal.com or a local instance.
Sync Calendars, Scheduling Links, AI Executive Scheduling Assistant, Unified Calendar
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
