Onepassword MCP Server - install, status & alternatives [2026]

01 · Install Onepassword

before you install - you'll need

Set OP_SERVICE_ACCOUNT_TOKEN, ENABLED_TOOLGROUPS, DANGEROUSLY_SKIP_ELICITATIONS, ELICITATION_REQUEST_URL, ELICITATION_POLL_URL, OP_WHITELISTED_ITEMS before connecting. OP_ELICITATION_READ, OP_ELICITATION_WRITE are optional or environment-specific per the README.

Claude Code

claude mcp add pulsemcp-mcp-servers-experimental-onepas -- npx -y onepassword-mcp-server

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "pulsemcp-mcp-servers-experimental-onepas": {
      "command": "npx",
      "args": [
        "-y",
        "onepassword-mcp-server"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package onepassword-mcp-server - unscoped; check the name against the project README before installing

registry vendor namespace com.pulsemcp - domain-verified with the official MCP registry

03 · What Onepassword can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list all accessible vaults, list items in a specific vault, get item details (credentials require approval to reveal), and get item metadata (titles, fields, vault, tags) without secret values - no approval prompt.

Capability map

Tools grouped from the project's README - what Onepassword lets an agent do.

Onepassword

7 tools - e.g. List all accessible vaults; List items in a specific vault; Get item details (credentials require approval to reveal)

onepassword_list_vaults · onepassword_list_items · onepassword_get_item · onepassword_get_item_metadata · onepassword_list_items_by_tag · onepassword_create_secure_note…

auth & access

2 tools - e.g. Create a new login credential (requires approval); Create a new API Credential item (requires approval)

onepassword_create_login · onepassword_create_api_credential

Latest releases

[email protected] · 2026-07-10

Fixed · Gmail deep-links emitted by list_email_conversations, search_email_conversations, get_email_conversation, and send_email now use the form instead of Two independent defects made the old links fail to open the…

[email protected] · 2026-07-09

Added · create_oauth_client tool (keys group, write): mints a non-interactive Tailscale OAuth client (client_id + client_secret) with configurable scopes and ACL tags. Unlike create_auth_key - which only enrolls…

[email protected] · 2026-07-06

Added · set_account_balance_history (manage group): edit a manual account's recorded daily balance snapshots. Previously the server could read balance history (get_account_balance_history) but had no write counterpart…

04 · Who maintains Onepassword

onepassword is maintained by pulsemcp. We track 29 MCP servers from pulsemcp - 28 actively maintained, 77 combined GitHub stars, oldest repo from May 2025. Full record: all servers from pulsemcp.

05 · Facts

repository: github.com/pulsemcp/mcp-servers
category: other - actively maintained as of 2026-08-25.
registry: com.pulsemcp/onepassword (active, first published 2026-05-18 · 2 versions)
packages: npm:onepassword-mcp-server

06 · Onepassword FAQ

Is Onepassword still maintained?

Yes - as of 2026-08-25, its last commit was 2026-07-26. We re-verify nightly.

What can Onepassword do?

With this server connected, an agent can list all accessible vaults, list items in a specific vault, get item details (credentials require approval to reveal), and get item metadata (titles, fields, vault, tags) without secret values - no approval prompt.

How do I install Onepassword?

Run `npx -y onepassword-mcp-server`. The README documents 8 environment variables (OP_SERVICE_ACCOUNT_TOKEN, ENABLED_TOOLGROUPS, DANGEROUSLY_SKIP_ELICITATIONS…) to set first. Set OP_SERVICE_ACCOUNT_TOKEN, ENABLED_TOOLGROUPS, DANGEROUSLY_SKIP_ELICITATIONS, ELICITATION_REQUEST_URL, ELICITATION_POLL_URL, OP_WHITELISTED_ITEMS before connecting. OP_ELICITATION_READ, OP_ELICITATION_WRITE are optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Onepassword run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Onepassword

Alternatives to Onepassword

Maintained other servers if Onepassword isn't the fit.

More MCP servers to compare · Pointsyeah · Proctor · Serpapi Hotels · Pulse Subregistry · Smart Terminal

More TypeScript MCP servers · Playwright Stealth · Remote Filesystem · S3 (pulsemcp) · see all