1Password MCP Server (Environments)
Official 1Password MCP server that lets MCP clients manage 1Password Environments without exposing secret values to the agent.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for 1Password MCP Server (Environments), derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
1Password's official MCP server (beta) bridges MCP clients like Codex and Kiro to 1Password Environments so agents can manage configuration and secrets references with secure authorization prompts, without ever revealing secret values to the model. It is designed around the principle of keeping secrets out of the agent's context. This is a deliberately hardened design for the credential-exposure risk inherent to secrets MCPs.
Key features and capabilities
- Manage 1Password Environments from MCP clients
- Secrets never exposed to the agent
- Secure per-action authorization prompts
Use cases
- Provide app config to an agent without leaking secrets
- Manage environment secrets from Codex or Kiro