Skip to main content
Glama
CakeRepository

1Password MCP Server

item_get

Get a 1Password item's complete details—title, category, tags, notes, and fields—by secret reference or IDs. Concealed values stay hidden unless reveal is enabled; prefer op_run for using secrets.

Instructions

Retrieve a full 1Password item — title, category, tags, notes, and all fields (id, title, type, section). Concealed field values are hidden unless reveal is true. Accepts a secret reference (op://vault/item/field) or vault ID + item ID. Revealing a secret puts it in the model context/transcript — to USE a secret in a command or API call, prefer op_run with op:// references instead.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
itemIdNoItem ID to retrieve (required if secretReference is not provided).
revealNoIf true, include concealed field values in plaintext — this puts the secret in the model context/transcript. Defaults to false; prefer op_run to use a secret without revealing it.
vaultIdNoVault ID containing the item (required if secretReference is not provided).
secretReferenceNoSecret reference in op://vault/item/field format. If provided, vaultId and itemId are ignored.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full behavioral burden. It discloses that concealed fields are hidden unless reveal is true, that revealing exposes the secret in the transcript, and that secret references take precedence over IDs. It could add error behavior or permission requirements, but the key security-relevant traits are well covered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose and followed by key behavioral caveats. Every clause adds value (full-item retrieval, hidden fields, input modes, security warning, op_run alternative). No fluff or repetition of obvious schema details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read tool with no output schema and no annotations, the description covers purpose, input modes, return contents, and security implications. It is slightly incomplete in not mentioning potential errors or contrasting with item_lookup (likely a lighter variant), but overall sufficient for correct tool selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description does not add significant meaning beyond the schema; it restates the secret-reference vs. ID relationship already in the parameter descriptions. It adds context about the return contents but not for parameter usage specifically.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Retrieve a full 1Password item' with a specific verb and resource, enumerating contents (title, category, tags, notes, all fields). It also distinguishes from sibling tools by emphasizing the full-item scope and the secret-reference mode, avoiding ambiguity with item_lookup or op_run.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-not guidance: revealing a secret puts it in the transcript, and 'to USE a secret in a command or API call, prefer op_run with op:// references instead.' This clearly directs the agent to alternatives for secret consumption while implying this tool is for retrieval.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/CakeRepository/1Password-MCP'

If you have feedback or need assistance with the MCP directory API, please join our Discord server