1password MCP Server (Rui Branco)
1Password vault access for MCP clients with multi-account support and local execution.
Data last scanned today · Reviewed today
Overview
This MCP server bridges 1Password with AI assistants, enabling local management of vaults and items through the Model Context Protocol. It utilizes the official 1Password SDK to interface with either the local 1Password 8 desktop application or service account tokens. The server design supports a multi-instance pattern, allowing users to toggle between different accounts—such as work and personal—within a single AI session. The tool prioritizes local-first operation, routing requests directly from the host machine via TLS. By default, it redacts sensitive fields like passwords and TOTP codes to prevent accidental exposure, requiring an explicit parameter override to reveal concealed data. Functionality includes listing items, resolving op:// references, and performing write operations like creating or deleting vaults and credentials.
Our verdict
This server carries a high-risk rating of 22/100 and should be used with extreme caution. The primary security concern is the lack of a read-only mode, meaning every installation provides the AI agent with full write access to your 1Password vaults, enabling it to create or delete items. Additionally, the project is community-maintained rather than official, lacks a defined open-source license, and currently has no independent security review.
- Supports switching between multiple 1Password accounts per session.
- Redacts sensitive fields like passwords by default.
- Uses the official 1Password SDK for operations.
- Small dependency footprint with only two direct packages.
- Requires full write access with no read-only mode available.
- Unclear legal usage terms due to missing license.
- Project is community-maintained with no official vendor support.
- Security architecture has not yet undergone independent review.
Setup
{
"mcpServers": {
"rui-branco-1password-mcp": {
"args": [
"-y",
"@rui.branco/1password-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| op_list_instances | List configured service accounts (tokens never returned) | low |
| op_add_instance | Add/update an instance. Validates the token against the API. | medium |
| op_remove_instance | Remove an instance by name | medium |
| op_list_vaults | List vaults visible to the service account | low |
| op_list_items | List items in a vault (by vault id or title) | low |
| op_search_items | Title-substring search across one or all vaults | low |
| op_get_item | Fetch a full item. Concealed fields redacted unless includeConcealed=true. | low |
| op_get_secret | Resolve a op://Vault/Item/field secret reference | low |
| op_generate_password | Generate Random / Memorable / Pin passwords via the 1Password generator | low |
| op_create_item | Create a new item with fields, tags, and websites | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›Can I use this server with multiple 1Password accounts?
Yes, the server supports a multi-instance pattern, allowing you to configure multiple accounts and switch between them by providing the instance name in your tool calls.
›Do I need a 1Password Service Account token to use this?
You can use either a 1Password Service Account token or the 1Password 8 desktop app. Using the desktop app is recommended because it does not require admin permissions and provides access to all vaults you can already see.
›Why are passwords and TOTP fields missing from the tool output?
Concealed fields are redacted by default to prevent the AI model from accidentally quoting sensitive data. You must explicitly set the `includeConcealed` parameter to `true` to access the cleartext value.
›What configuration steps are required when using the 1Password desktop app?
You must enable 'Integrate with 1Password CLI' and 'Integrate with other apps' within the Developer tab of the 1Password 8 desktop app settings. Failure to enable these will cause the SDK to fail with a DesktopSessionExpiredError.
›How is my configuration data stored?
Configuration files, including account tokens, are stored locally at ~/.config/1password-mcp/config.json with 0600 file permissions to ensure they are restricted to your user.
›What are the system requirements to run the server?
You need Node.js 18 or higher and an MCP-compatible AI client, such as Claude Code, Cursor, Windsurf, Zed, or the Codex CLI.
Badge
Maintain this server? Add the live badge to your README.