1Password

Usage Instructions

Access and manage secrets stored in 1Password vaults using the Connect API or Service Account SDK. List vaults, retrieve items with their fields and secrets, download attached files, create new items, update existing ones, delete items, and resolve secret references.

Tools

`onepassword_list_vaults`

List all vaults accessible by the Connect token or Service Account

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`filter`	string	No	SCIM filter expression (e.g., name eq "My Vault")

Output

Parameter	Type	Description
`vaults`	array	List of accessible vaults

`onepassword_get_vault`

Get details of a specific vault by ID

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID

Output

Parameter	Type	Description
`id`	string	Vault ID
`name`	string	Vault name
`description`	string	Vault description
`attributeVersion`	number	Vault attribute version
`contentVersion`	number	Vault content version
`items`	number	Number of items in the vault
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp

`onepassword_list_items`

List items in a vault. Returns summaries without field values.

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID to list items from
`filter`	string	No	SCIM filter expression (e.g., title eq "API Key" or tag eq "production")

Output

Parameter	Type	Description
`items`	array	List of items in the vault (summaries without field values)

`onepassword_get_item`

Get full details of an item including all fields and secrets

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to retrieve

Output

Parameter	Type	Description
`id`	string	Item ID
`title`	string	Item title
`vault`	object	Vault reference
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`urls`	array	URLs associated with the item
`favorite`	boolean	Whether the item is favorited
`tags`	array	Item tags
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`fields`	array	Item fields including secrets
`sections`	array	Item sections
`files`	array	Files attached to the item (fetch content with Get Item File)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`lastEditedBy`	string	ID of the last editor

`onepassword_get_item_file`

Download the content of a file attached to an item

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID the file is attached to
`fileId`	string	Yes	The file ID (from the item's "files" array, e.g. via Get Item)

Output

Parameter	Type	Description
`file`	file	Downloaded file attachment

`onepassword_create_item`

Create a new item in a vault

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID to create the item in
`category`	string	Yes	Item category (e.g., LOGIN, PASSWORD, API_CREDENTIAL, SECURE_NOTE, SERVER, DATABASE)
`title`	string	No	Item title
`tags`	string	No	Comma-separated list of tags
`fields`	string	No	JSON array of field objects (e.g., [{"label":"username","value":"admin","type":"STRING","purpose":"USERNAME"}]). "purpose" is honored in Connect Server mode; in Service Account mode 1Password infers it from the field label/type instead.

Output

Parameter	Type	Description
`id`	string	Item ID
`title`	string	Item title
`vault`	object	Vault reference
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`urls`	array	URLs associated with the item
`favorite`	boolean	Whether the item is favorited
`tags`	array	Item tags
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`fields`	array	Item fields including secrets
`sections`	array	Item sections
`files`	array	Files attached to the item (fetch content with Get Item File)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`lastEditedBy`	string	ID of the last editor

`onepassword_replace_item`

Replace an entire item with new data (full update)

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to replace
`item`	string	Yes	JSON object representing the full item (e.g., {"vault":{"id":"..."},"category":"LOGIN","title":"My Item","fields":[...]})

Output

Parameter	Type	Description
`id`	string	Item ID
`title`	string	Item title
`vault`	object	Vault reference
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`urls`	array	URLs associated with the item
`favorite`	boolean	Whether the item is favorited
`tags`	array	Item tags
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`fields`	array	Item fields including secrets
`sections`	array	Item sections
`files`	array	Files attached to the item (fetch content with Get Item File)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`lastEditedBy`	string	ID of the last editor

`onepassword_update_item`

Update an existing item using JSON Patch operations (RFC6902)

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to update
`operations`	string	Yes	JSON array of RFC6902 patch operations (e.g., [{"op":"replace","path":"/title","value":"New Title"}])

Output

Parameter	Type	Description
`id`	string	Item ID
`title`	string	Item title
`vault`	object	Vault reference
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`urls`	array	URLs associated with the item
`favorite`	boolean	Whether the item is favorited
`tags`	array	Item tags
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`fields`	array	Item fields including secrets
`sections`	array	Item sections
`files`	array	Files attached to the item (fetch content with Get Item File)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`lastEditedBy`	string	ID of the last editor

`onepassword_delete_item`

Delete an item from a vault

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to delete

Output

Parameter	Type	Description
`success`	boolean	Whether the item was successfully deleted

`onepassword_resolve_secret`

Resolve a secret reference (op://vault/item/field) to its value. Service Account mode only.

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: must be "service_account" for this operation
`serviceAccountToken`	string	Yes	1Password Service Account token
`secretReference`	string	Yes	Secret reference URI (e.g., op://vault-name/item-name/field-name or op://vault-name/item-name/section-name/field-name)

Output

Parameter	Type	Description
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI

Notes

Category: tools
Type: onepassword

1Password

On this page