Connect 1 Password to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.
Ask your agent in plain language. Each of these maps to a real tool on the server.
Use the list items tool in 1 Password
Use the get file content tool in 1 Password
Use the list vaults tool in 1 Password
Use the generate password tool in 1 Password
Use the delete item tool in 1 Password
Use the get server health tool in 1 Password
Supported Tools
list_items
List Items
List items stored in a specific vault. Returns item summaries including titles, categories, tags, and URLs. Use the filter parameter to search by title or tag. For full item details including field values, use the Get Item tool.
get_file_content
Get File Content
Download the content of a file attachment stored on a 1Password item. The file bytes are returned as a Slate attachment, with structured output limited to metadata.
list_vaults
List Vaults
List all vaults accessible with the current credentials. Returns vault names, IDs, item counts, and metadata. Use this to discover available vaults before listing or managing items within them.
generate_password
Generate Password
Generate a secure password using 1Password's password generator. Creates a temporary PASSWORD item in the specified vault with a generated password field, retrieves the generated value, then deletes the temporary item. Supports configuring length, character sets, and excluded characters.
delete_item
Delete Item
Delete an item from a 1Password vault. This permanently removes the item and cannot be undone. To archive an item instead, use the Update Item tool with a patch operation to set the state.
get_server_health
Get Server Health
Check the health and status of the 1Password Connect server, including its version and the status of dependent services. Useful for verifying connectivity and diagnosing issues.
create_item
Create Item
Create a new item in a 1Password vault. Supports creating logins, passwords, API credentials, secure notes, and other item types with custom fields, sections, URLs, and tags.
search_items
Search Items
Search for items across one or all accessible vaults using title or tag filters. Returns matching item summaries. Useful for finding items when you don't know which vault they're in.
get_item
Get Item
Retrieve the full details of a specific item from a vault, including all fields, sections, files, and metadata. Use this to read passwords, API keys, notes, and other secrets stored in 1Password.
update_item
Update Item
Update an existing item in a 1Password vault. Supports changing the title, tags, favorite status, URLs, and adding/updating/removing individual fields using JSON Patch operations. For simple updates, use the convenience fields. For advanced modifications, provide patch operations directly.
get_server_heartbeat
Get Server Heartbeat
Ping the 1Password Connect server heartbeat endpoint to verify that the server process is reachable.
list_api_activity
List API Activity
List recent API activity recorded by the 1Password Connect server, including action, result, actor, and affected resource metadata.
get_file_metadata
Get File Metadata
Retrieve metadata for a specific file attachment on a 1Password item without downloading the file content.
list_files
List Files
List file attachments on a 1Password item. Returns file metadata only; use Get File Content to download bytes as a Slate attachment.
get_vault
Get Vault
Retrieve metadata for a specific 1Password vault accessible to the Connect token, including item count, vault type, and content versions.
get_prometheus_metrics
Get Prometheus Metrics
Retrieve Prometheus metrics from the 1Password Connect server. Metrics text is returned as a Slate attachment with structured output limited to metadata.
Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
Sign in. Select Add and sign in to load 1 Password tools.
Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add a custom MCP server. On ChatGPT web, open Plugins, select +, then Add custom MCP server.
Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>), choose OAuth and accept the risk notice.
Create and install the plugin. Select Create as a plugin, install it and sign in to load 1 Password tools.
Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add Metorial to your MCP config. Use ~/.cursor/mcp.json for every project, or .cursor/mcp.json for one.
Sign in. Open Customize in the sidebar, find Metorial and sign in to load 1 Password tools.
{
"mcpServers":{
"metorial":{
"url":"<your-magic-mcp-url>"
}
}
}
Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add the server over HTTP. Add --scope user to use it in every project.
Sign in. Run /mcp, select Metorial and sign in to load 1 Password tools.
claude mcp add --transport http metorial <your-magic-mcp-url>
Enable 1 Password in Metorial. In your Metorial portal, enable the 1 Password MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add the server and sign in. The Codex CLI, IDE extension and ChatGPT desktop app share this config.
Check the connection. Type /mcp in Codex to see Metorial and its 1 Password tools.
codex mcp add metorial --url <your-magic-mcp-url>
codex mcp login metorial
Run 1 Password through the Metorial gateway
One governed layer for every app your agents reach, not a separate connector per tool.
Give 1 Password and every other app to your whole team through one MCP gateway, behind your SSO.
Scope which teams and agents can use 1 Password tools with role-based access control, and trace every call.
Prefer to run it yourself? Metorial is open source and self-hostable.