# 1password

Connects a 1Password Service Account to your AI assistant. Enables safe credential management and local command execution using op:// references without leaking plaintext.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 22
- Author: CakeRepository
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/CakeRepository/1Password-MCP
- Updated: 2026-10-20
- HTML: https://affpapa.org/en/nevibecode/mcp/1password

## What it does

This server connects AI coding assistants to your 1Password vaults using a Service Account token. It provides fifteen tools covering entry searches, secure note creation, password generation, and credential updates.

Inspection tools omit passwords and sensitive tokens by default, returning non-confidential metadata unless explicitly requested. The `op_run` tool runs shell commands by resolving paths like `op://vault/item/field` straight into child process environment variables, scrubbing known secrets from the returned console stream.

Operation requires Node.js 20 or newer and an active service account token passed via `OP_SERVICE_ACCOUNT_TOKEN`. Without vault access granted to that service account, queries will fail.

## Requirements
- Needs: Node.js (commands run via npx)
- Environment variables: `OP_SERVICE_ACCOUNT_TOKEN`, `OP_KEYCHAIN_SERVICE`, `OP_KEYCHAIN_ACCOUNT` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env OP_SERVICE_ACCOUNT_TOKEN=<OP_SERVICE_ACCOUNT_TOKEN> --env OP_KEYCHAIN_SERVICE=<OP_KEYCHAIN_SERVICE> --env OP_KEYCHAIN_ACCOUNT=<OP_KEYCHAIN_ACCOUNT> --transport stdio 1password -- npx -y @takescake/1password-mcp
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add 1password --env OP_SERVICE_ACCOUNT_TOKEN=<OP_SERVICE_ACCOUNT_TOKEN> --env OP_KEYCHAIN_SERVICE=<OP_KEYCHAIN_SERVICE> --env OP_KEYCHAIN_ACCOUNT=<OP_KEYCHAIN_ACCOUNT> -- npx -y @takescake/1password-mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "1password": {
            "command": "npx",
            "args": [
                "-y",
                "@takescake/1password-mcp"
            ],
            "env": {
                "OP_SERVICE_ACCOUNT_TOKEN": "<OP_SERVICE_ACCOUNT_TOKEN>",
                "OP_KEYCHAIN_SERVICE": "<OP_KEYCHAIN_SERVICE>",
                "OP_KEYCHAIN_ACCOUNT": "<OP_KEYCHAIN_ACCOUNT>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "1password": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@takescake/1password-mcp"
            ],
            "env": {
                "OP_SERVICE_ACCOUNT_TOKEN": "<OP_SERVICE_ACCOUNT_TOKEN>",
                "OP_KEYCHAIN_SERVICE": "<OP_KEYCHAIN_SERVICE>",
                "OP_KEYCHAIN_ACCOUNT": "<OP_KEYCHAIN_ACCOUNT>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e OP_SERVICE_ACCOUNT_TOKEN=<OP_SERVICE_ACCOUNT_TOKEN> -e OP_KEYCHAIN_SERVICE=<OP_KEYCHAIN_SERVICE> -e OP_KEYCHAIN_ACCOUNT=<OP_KEYCHAIN_ACCOUNT> 1password npx -y @takescake/1password-mcp
```
Replace <…> with your own values

## When to use it
- execute local CLI scripts with secrets injected through `op_run`
- generate random or memorable passwords and record them in a vault
- search and retrieve entry metadata without exposing confidential fields in chat
- audit accessible vaults and detect duplicate items via workflow prompts

## Example prompts
- Search my automation vault for staging database credentials and show metadata
- Generate a 32-character random password and update the backend service login
- Run the deployment command with `op_run` using `op://production/aws/secret_key`

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md