1password MCP Server - install, status & alternatives [2026]

01 · Install 1password

before you install - you'll need

Set OP_MCP_ALLOWED_VAULTS, API_TOKEN before connecting. OP_SERVICE_ACCOUNT_TOKEN, OP_KEYCHAIN_SERVICE, OP_KEYCHAIN_ACCOUNT are optional or environment-specific per the README.

Claude Code

claude mcp add cakerepository-1password-mcp -- npx -y @takescake/1password-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "cakerepository-1password-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@takescake/1password-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

npm package @takescake/1password-mcp - the @takescake scope differs from the repo owner (cakerepository); confirm it's the project's official package

registry namespace io.github.CakeRepository is GitHub-verified and matches the repo owner

03 · What 1password can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list vaults the service account can access (id, name, description, type), search a vault by title substring, list every item in a vault (id, title, category, tags, updatedAt) - never secrets, and read one field (default password) via op://… or ids. Metadata-only unless reveal: true. Prefer op_run to use a secret.

Capability map

Tools grouped from the project's README - what 1password lets an agent do.

Item

6 tools - e.g. Search a vault by title substring; optional limit (max 200).; List every item in a vault (id, title, category, tags, updatedAt) - never secrets.; Full item: title, category, tags, notes, fields. Concealed…

item_lookup · item_list · item_get · item_edit · item_archive · item_delete

Password

5 tools - e.g. Read one field (default password) via op://… or ids. Metadata-only unless reveal: true. Prefer op_run to use a secret.; Create a Login or Password item (username, URL, tags, notes). returnSecret defaults…

password_read · password_create · password_update · password_generate · password_generate_memorable

Vault

1 tool - e.g. List vaults the service account can access (id, name, description, type).

vault_list

Check

1 tool - e.g. Validate op://vault/item/field and return non-secret metadata only (vault, item, field). Never the value.

op_check_ref

Note

1 tool - e.g. Create a Secure Note with optional tags and custom fields.

note_create

other

1 tool - e.g. Run a local command (command or argv) with env vars. Values matching op://… are resolved into the child process only; resolved secrets are redacted from returne

op_run

Latest releases

v4.0.1 · 2026-07-30

Summary · Documentation and package-metadata release for @takescake/1password-mcp. · Refreshed README, CONTRIBUTING, and AGENTS for the full v4 surface (15 tools, prompts, resources) · Clearer op_run / reveal guidance…

v4.0.0 · 2026-07-30

publish v3.0.0 directly · enable npm trusted publishing · clean up npm release workflows · run one-time MCP v2 migration · retry MCP v2 migration runner · support MCP protocol 2026-07-28

v3.0.0 · 2026-07-30

Major security-focused release. password_read is now metadata-only unless reveal: true is explicitly supplied. Adds op_run and op_check_ref so agents can use and validate 1Password references without exposing plaintext…

04 · Who maintains 1password

1password is maintained by cakerepository. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

repository: github.com/cakerepository/1password-mcp
category: other - ranked #109 of 848 actively-maintained other servers as of 2026-08-25.
release cadence: 4 releases in the last 90 days (latest 2026-07-30)
registry: io.github.CakeRepository/1password (active, first published 2026-02-04 · 3 versions)
packages: npm:@takescake/1password-mcp

06 · 1password FAQ

Is 1password still maintained?

Yes - as of 2026-08-25, its last commit was 2026-07-30 and it shipped 4 releases in the last 90 days. We re-verify nightly.

What can 1password do?

With this server connected, an agent can list vaults the service account can access (id, name, description, type), search a vault by title substring, list every item in a vault (id, title, category, tags, updatedAt) - never secrets, and read one field (default password) via op://… or ids. Metadata-only unless reveal: true. Prefer op_run to use a secret.

How do I install 1password?

Run `npx -y @takescake/1password-mcp`. The README documents 5 environment variables (OP_SERVICE_ACCOUNT_TOKEN, OP_KEYCHAIN_SERVICE, OP_KEYCHAIN_ACCOUNT…) to set first. Set OP_MCP_ALLOWED_VAULTS, API_TOKEN before connecting. OP_SERVICE_ACCOUNT_TOKEN, OP_KEYCHAIN_SERVICE, OP_KEYCHAIN_ACCOUNT are optional or environment-specific per the README. You can also paste the ready-made client config above.

Does 1password run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to 1password

Alternatives to 1password

Maintained other servers if 1password isn't the fit.

More MCP servers to compare · Activitypub MCP · Carbon Arc · Factcheck · Leadenrich MCP · CAST Imaging MCP Server

More TypeScript MCP servers · Foxhound · Evmscope · Calllint · Callosium · Agent Device (callstack) · see all