1 Password MCP server

Connect 1 Password to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the 1 Password MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the list items tool in 1 Password
  • Use the get file content tool in 1 Password
  • Use the list vaults tool in 1 Password
  • Use the generate password tool in 1 Password
  • Use the delete item tool in 1 Password
  • Use the get server health tool in 1 Password

Supported Tools

list_items

List Items

List items stored in a specific vault. Returns item summaries including titles, categories, tags, and URLs. Use the filter parameter to search by title or tag. For full item details including field values, use the Get Item tool.

get_file_content

Get File Content

Download the content of a file attachment stored on a 1Password item. The file bytes are returned as a Slate attachment, with structured output limited to metadata.

list_vaults

List Vaults

List all vaults accessible with the current credentials. Returns vault names, IDs, item counts, and metadata. Use this to discover available vaults before listing or managing items within them.

generate_password

Generate Password

Generate a secure password using 1Password's password generator. Creates a temporary PASSWORD item in the specified vault with a generated password field, retrieves the generated value, then deletes the temporary item. Supports configuring length, character sets, and excluded characters.

delete_item

Delete Item

Delete an item from a 1Password vault. This permanently removes the item and cannot be undone. To archive an item instead, use the Update Item tool with a patch operation to set the state.

get_server_health

Get Server Health

Check the health and status of the 1Password Connect server, including its version and the status of dependent services. Useful for verifying connectivity and diagnosing issues.

create_item

Create Item

Create a new item in a 1Password vault. Supports creating logins, passwords, API credentials, secure notes, and other item types with custom fields, sections, URLs, and tags.

search_items

Search Items

Search for items across one or all accessible vaults using title or tag filters. Returns matching item summaries. Useful for finding items when you don't know which vault they're in.

get_item

Get Item

Retrieve the full details of a specific item from a vault, including all fields, sections, files, and metadata. Use this to read passwords, API keys, notes, and other secrets stored in 1Password.

update_item

Update Item

Update an existing item in a 1Password vault. Supports changing the title, tags, favorite status, URLs, and adding/updating/removing individual fields using JSON Patch operations. For simple updates, use the convenience fields. For advanced modifications, provide patch operations directly.

get_server_heartbeat

Get Server Heartbeat

Ping the 1Password Connect server heartbeat endpoint to verify that the server process is reachable.

list_api_activity

List API Activity

List recent API activity recorded by the 1Password Connect server, including action, result, actor, and affected resource metadata.

get_file_metadata

Get File Metadata

Retrieve metadata for a specific file attachment on a 1Password item without downloading the file content.

list_files

List Files

List file attachments on a 1Password item. Returns file metadata only; use Get File Content to download bytes as a Slate attachment.

get_vault

Get Vault

Retrieve metadata for a specific 1Password vault accessible to the Connect token, including item count, vault type, and content versions.

get_prometheus_metrics

Get Prometheus Metrics

Retrieve Prometheus metrics from the 1Password Connect server. Metrics text is returned as a Slate attachment with structured output limited to metadata.

Connect 1 Password to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load 1 Password tools.

Run 1 Password through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give 1 Password and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use 1 Password tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with 1 Password

Google Sheets

Create, read, and update spreadsheets and their cell data. Read and write values to individual cells, ranges, or multiple ranges using A1 notation or named ranges. Apply cell formatting including text styles, backgrounds, borders, number formats, and conditional formatting. Manage sheets (tabs) within a spreadsheet—add, delete, copy, rename, and reorder them. Create and manage embedded charts, pivot tables, filter views, data validation rules, protected ranges, named ranges, and merged cells. Perform batch operations to apply multiple updates atomically.

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Google Drive

Upload, download, create, copy, move, rename, trash, and permanently delete files and folders in Google Drive. Search for files using complex queries filtering by name, MIME type, owner, modification date, labels, and other metadata. Share files and folders with specific users, groups, or domains with role-based permissions (owner, writer, commenter, reader). Manage shared drives and their members. Export Google Workspace files (Docs, Sheets, Slides) to standard formats like PDF, DOCX, and XLSX. Track file revision history and restore earlier versions. Create, read, update, and delete threaded comments and replies on files. Read label definitions and search files by label. Browse the Drive apps installed for your account. Store app-specific data in a hidden per-user folder.

Technical notes for 1 Password

Manage passwords, secrets, and sensitive credentials stored in encrypted vaults through 1Password Connect. Create, read, update, delete, list, and search vault items; inspect vault metadata; retrieve file attachments through Slate attachments; generate passwords; check Connect server health; and monitor audit, item usage, and sign-in events.

Frequently asked questions

Common questions about connecting 1 Password to AI agents with Metorial.

  1. How many tools does the 1 Password MCP server have?
    The 1 Password MCP server exposes 16 tools, including List Items, Get File Content, List Vaults. Each one is governed and traced through Metorial.
  2. 1 Password exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the 1 Password MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use 1 Password and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the 1 Password MCP server yourself or use the hosted gateway.

Connect 1 Password to production AI agents

See how Metorial gives your team governed access to 1 Password, with tracing and security controls built in.