1Password

Usage Instructions

Access and manage secrets stored in 1Password vaults using the Connect API or Service Account SDK. List vaults, retrieve items with their fields and secrets, create new items, update existing ones, delete items, and resolve secret references.

Tools

`onepassword_list_vaults`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`filter`	string	No	SCIM filter expression (e.g., name eq "My Vault")

Output

Parameter	Type	Description
`vaults`	array	List of accessible vaults
↳ `id`	string	Vault ID
↳ `name`	string	Vault name
↳ `description`	string	Vault description
↳ `attributeVersion`	number	Vault attribute version
↳ `contentVersion`	number	Vault content version
↳ `type`	string	Vault type (USER_CREATED, PERSONAL, EVERYONE, TRANSFER)
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

`onepassword_get_vault`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description

Output

Parameter	Type	Description
`id`	string	Vault ID
`name`	string	Vault name
`description`	string	Vault description
`attributeVersion`	number	Vault attribute version
`contentVersion`	number	Vault content version
`items`	number	Number of items in the vault
`type`	string	Vault type (USER_CREATED, PERSONAL, EVERYONE, TRANSFER)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp

`onepassword_list_items`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`filter`	string	No	SCIM filter expression (e.g., title eq "API Key" or tag eq "production")

Output

Parameter	Type	Description
`items`	array	List of items in the vault (summaries without field values)
↳ `id`	string	Item ID
↳ `title`	string	Item title
↳ `vault`	object	Vault reference
↳ `id`	string	Vault ID
↳ `category`	string	Item category (e.g., LOGIN, API_CREDENTIAL)
↳ `urls`	array	URLs associated with the item
↳ `href`	string	URL
↳ `label`	string	URL label
↳ `primary`	boolean	Whether this is the primary URL
↳ `favorite`	boolean	Whether the item is favorited
↳ `tags`	array	Item tags
↳ `version`	number	Item version number
↳ `state`	string	Item state (ARCHIVED or DELETED)
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp
↳ `lastEditedBy`	string	ID of the last editor

`onepassword_get_item`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`itemId`	string	Yes	No description

Output

Parameter	Type	Description
`response`	json	Operation response data

`onepassword_create_item`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`category`	string	Yes	Item category (e.g., LOGIN, PASSWORD, API_CREDENTIAL, SECURE_NOTE, SERVER, DATABASE)
`title`	string	No	No description
`tags`	string	No	No description
`fields`	string	No	JSON array of field objects (e.g., [{"label":"username","value":"admin","type":"STRING","purpose":"USERNAME"}])

Output

Parameter	Type	Description
`response`	json	Operation response data

`onepassword_replace_item`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`itemId`	string	Yes	No description
`item`	string	Yes	JSON object representing the full item (e.g., {"vault":{"id":"..."},"category":"LOGIN","title":"My Item","fields":[...]})

Output

Parameter	Type	Description
`response`	json	Operation response data

`onepassword_update_item`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`itemId`	string	Yes	No description
`operations`	string	Yes	JSON array of RFC6902 patch operations (e.g., [{"op":"replace","path":"/title","value":"New Title"}])

Output

Parameter	Type	Description
`response`	json	Operation response data

`onepassword_delete_item`

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	No description
`apiKey`	string	No	No description
`serverUrl`	string	No	No description
`vaultId`	string	Yes	No description
`itemId`	string	Yes	No description

Output

Parameter	Type	Description
`success`	boolean	Whether the item was successfully deleted

`onepassword_resolve_secret`

Resolve a secret reference (op://vault/item/field) to its value. Service Account mode only.

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: must be "service_account" for this operation
`serviceAccountToken`	string	Yes	No description
`secretReference`	string	Yes	Secret reference URI (e.g., op://vault-name/item-name/field-name or op://vault-name/item-name/section-name/field-name)

Output

Parameter	Type	Description
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI

1Password

On this page