1password MCP server
io.github.CakeRepository/1password·v2.5.0·20 starsMCP server for 1Password service accounts — tools and resources for vaults and credentials
20 stars300 downloads/wk
Reviews
Write oneNobody has reviewed 1password yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
1password tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan46 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 26 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How 1password compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 48,255 servers
- GitHub stars
- 20
- more than 91% of 28,688 servers
- Downloads a week
- 300
- more than 81% of 12,191 servers with a package
Install 1password in Claude Code, Cursor or VS Code
Runs npx -y @takescake/1password-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add 1password -- npx -y @takescake/1password-mcp
What the publisher says
From the 1password repository's README, as published. We do not edit it. Read it on GitHub
1Password MCP Server
Give your AI assistant a locked door to 1Password — not a pile of passwords in the chat.
@takescake/1password-mcp is a community Model Context Protocol (MCP) server. It lets Claude, Cursor, VS Code Copilot, OpenAI Codex, Gemini, and other MCP clients manage vaults and credentials through a 1Password Service Account.
Built on the MCP TypeScript SDK v2 with protocol negotiation for 2026-07-28 (and legacy clients). Secrets stay in 1Password; agents prefer op:// references and op_run so plaintext never has to land in the model transcript.
Not an official 1Password product. Community-built, Apache 2.0 licensed.
Who this is for
Why teams pick this server
- Security-first defaults — passwordread and itemget return metadata unless you opt in with reveal: true.
- oprun (the MCP equivalent of op run)** — inject op://vault/item/field into a local command’s environment; plaintext is redacted from stdout/stderr and never logged back to the model.
- Full vault toolkit — list, search, get, edit, create logins & notes, rotate passwords, archive, or delete.
- Guided prompts — password generation, credential rotation, vault audit, and secret-reference helpers.
- Browsable resources — vault and item catalogs over 1password://… URIs (no secrets in resource payloads).
- Modern MCP — stdio transport, Zod 4 schemas, MCP 2026-07-28 negotiation with legacy client compatibility.
What you get
Tools (15)
Grouped the way agents and humans actually use them.
Discover
Read (safe by default)
Create & update
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
1password: common questions
- Is 1password MCP server safe?
- Mostly: it is graded B (83/100). Read the 1password safety report
- How do I install 1password?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does 1password need an API key?
- Yes. The registry entry asks for
OP_SERVICE_ACCOUNT_TOKEN. - Is 1password maintained?
- The last commit was 65 days ago (2026-08-31). The latest release is v2.5.0.
- How does 1password compare with other MCP servers?
- safety score 83/100 (higher than 65% of 48,255 servers); github stars 20 (more than 91% of 28,688 servers); downloads a week 300 (more than 81% of 12,191 servers with a package). Full comparison.