Op MCP Server
1Password CLI integration for managing secrets, vaults, and users via LLMs.
Data last scanned today · Reviewed today
Overview
Op MCP Server connects AI assistants directly to the 1Password command-line interface. By utilizing the 1Password CLI (op), it provides Claude Code with the ability to manage items, vaults, users, and groups using natural language commands. Users must have the 1Password CLI installed and configured with local biometric integration enabled. The server architecture acts as an intermediary, translating MCP JSON-RPC calls into subprocess execution for the 1Password CLI. It exposes 46 distinct tools designed for granular interaction with 1Password's data structures, allowing AI models to programmatically query and manipulate sensitive credential information.
Our verdict
This server carries a high-risk score of 16/100, primarily due to its lack of a declared license and its community-maintained status. Because there is no read-only mode implemented, any AI agent connected to this server is granted full write access to your 1Password vaults by default. It is recommended only for power users who understand the implications of granting an LLM full write access to their password manager and who can independently audit the source code.
- Provides 46 specific tools for granular 1Password data management.
- Zero direct dependencies reduces the potential supply-chain attack surface.
- Fully leverages existing 1Password CLI biometric authentication flows.
- High security risk due to missing read-only operation mode.
- No license detected, making legal usage terms unclear.
- Last code commit occurred over six months ago.
- Maintained by a single contributor with low community visibility.
Tools
| Tool | Description | Risk |
|---|---|---|
| whoami | Get current authenticated user info | low |
| signin | Sign in to 1Password | medium |
| signout | Sign out of 1Password | medium |
| account_list | List configured accounts | low |
| account_get | Get account details | low |
| account_add | Add a new account | medium |
| account_forget | Remove account from device | medium |
| vault_list | List accessible vaults | low |
| vault_get | Get vault details | low |
| vault_create | Create a new vault | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What software must be installed before using op-mcp?
You must have the 1Password CLI (op) installed and the Rust toolchain available if you intend to build the server from source.
›How do I enable biometric unlock for the 1Password CLI?
Open your 1Password desktop app, navigate to Settings, select Developer, and enable the 'Integrate with 1Password CLI' option.
›Can I install this server using Cargo?
Yes, you can install the server directly using the command 'cargo install op-mcp'.
›How can I configure the server for use with Claude Code?
You can add it globally using the 'claude mcp add' command or create a '.mcp.json' file in your project root with the server configuration.
›Are there specific tools available for managing user permissions?
Yes, the server provides tools to list, grant, and revoke access for both users and groups to specific 1Password vaults.
›How do I verify that the server is communicating correctly after installation?
You can verify the connection by restarting Claude Code and running the '/mcp' command to check if the server is listed and active.
Badge
Maintain this server? Add the live badge to your README.