Onepassword Agent MCP server

Read from the package source without running it. The installed server may list more.

• admin_ui_info

  Return the local admin UI URL and state path. Does not return secrets.

• clear_password_clipboard

  Clear the OS clipboard after a copy/paste password operation.

• clear_secret_clipboard

  Clear the OS clipboard after a copy/paste operation.

• copy_password

  Compatibility alias for copy_secret. Resolves an encrypted handle, copies it to the clipboard, and returns no plaintext.

• copy_secret

  Resolve an encrypted secret handle at the last moment, copy the value to the OS clipboard, and return no plaintext.

• find_passwords_for_site

  Compatibility alias for find_secrets_for_site. Returns approved encrypted handles and never returns plaintext.

• find_secrets_for_site

  Return approved encrypted handles for a website. Handles can represent passwords, API credentials, credit-card fields, secure notes, or other approved 1Password fields. Plaintext is never returned.

• get_profile_data

  Return user-defined profile data from the local admin page, such as email, phone, address, name, company, or username. This tool returns plaintext profile values that the user explicitly added for agent use.

• list_approved_passwords

  Compatibility alias for list_approved_secrets. Does not return plaintext secret values.

• list_approved_secrets

  List approved encrypted handles and allowed sites. Does not return plaintext secret values.

• onepassword_status

  Check local policy and 1Password CLI status. Never returns secrets.

• paste_password

  Compatibility alias for paste_secret. Resolves an encrypted handle, pastes it into the active app, and returns no plaintext.

• paste_secret

  Resolve an encrypted secret handle, copy it to the clipboard, paste into the active app, and return no plaintext.

• save_secret_itemwrite action

  Create a new item in the configured MCPVAULT. Use this when the user asks the agent to save a new password, API credential, secure note, or credit-card entry. Secret values are sent to the local 1Password CLI through stdin, not command arguments.

• Code scan41 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 3 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Onepassword Agent: common questions

Is Onepassword Agent MCP server safe?

Yes, by our scan: it is graded A (92/100). Read the Onepassword Agent safety report

How do I install Onepassword Agent?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does Onepassword Agent need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Onepassword Agent maintained?

The last commit was 4 days ago (2026-09-16). The latest release is v0.3.8.

What can I use instead of Onepassword Agent?

Servers from other publishers that do the same job: Actual Budget MCP Server, PatchX Freenote Agent MCP server and Husk MCP server. Compare all Onepassword Agent alternatives.