List all 1Password vaults accessible to the service account. Returns vault IDs, names, descriptions, and types.

Search for items within a 1Password vault by title substring. Returns item IDs, titles, categories, and vault IDs.

Permanently delete an item from a 1Password vault. This action cannot be undone.

Retrieve a full 1Password item — title, category, tags, notes, and all fields (id, title, type, section). Concealed field values are hidden unless reveal is true. Accepts a secret reference (op://vault/item/field) or vault ID + item ID.

Edit an existing 1Password item. Update the title, notes (pass an empty string to clear notes), tags, website URL, upsert fields, or remove fields. Only referenced fields are changed; all others are preserved.

List all items in a 1Password vault, returning id, title, category, tags, and updatedAt for each. Never returns secret values.

Archive an item in a 1Password vault. The item is moved to the archive and hidden from regular views, rather than being permanently deleted.

Create a Secure Note item in a 1Password vault, with optional tags and custom fields.

Create a new password/login item in a 1Password vault with optional username, URL, tags, and notes.

Retrieve a secret from 1Password using either a secret reference (op://vault/item/field) or vault ID + item ID. Supports field selection and optional value reveal.

Update (rotate) a password or concealed field on an existing 1Password item. If the target field does not exist, it will be created.

Generate a cryptographically secure random password with configurable length and character types. Uses rejection sampling for unbiased randomness.

Generate a memorable passphrase from random dictionary words with optional number and symbol suffixes. Uses a ~500-word curated list for good entropy.