1Password MCP Server

item_get

Retrieve a full 1Password item via secret reference or vault/item IDs. Secrets stay hidden by default; set reveal to include secret fields.

Instructions

Retrieve a full 1Password item — title, category, tags, notes, and all fields (id, title, type, section). Secret-bearing field values (passwords and other concealed fields, SSH private keys, one-time-password seeds, card numbers) are hidden unless reveal is true; only known non-secret types (text, URL, email, phone, date, menu, card type, address, reference) are shown by default. Accepts a secret reference (op://vault/item/field) or vault ID + item ID. Revealing a secret puts it in the model context/transcript — to USE a secret in a command or API call, prefer op_run with op:// references instead.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "item_get"
  }
}

Input Schema

Name	Required	Description
`itemId`	No	Item ID to retrieve (required if secretReference is not provided).
`reveal`	No	If true, include secret-bearing field values (passwords, SSH private keys, one-time-password seeds, card numbers) in plaintext — this puts the secret in the model context/transcript. Defaults to false; prefer op_run to use a secret without revealing it.
`vaultId`	No	Vault ID containing the item (required if secretReference is not provided).
`secretReference`	No	Secret reference in op://vault/item/field format. If provided, vaultId and itemId are ignored.

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedv5.0.0Oct 7, 2026

changedInput schema / properties / reveal / description

Previous value: -"If true, include concealed field values in plaintext — this puts the secret in the model context/transcript. Defaults to false; prefer op_run to use a secret without revealing it."New value: +"If true, include secret-bearing field values (passwords, SSH private keys, one-time-password seeds, card numbers) in plaintext — this puts the secret in the model context/transcript. Defaults to false; prefer op_run to use a secret without revealing it."

Changed3 schema fields changedv4.0.1Jul 31, 2026

changedInput schema / $schema

Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"

removedInput schema / additionalProperties
```
Removed value: -false
```

changedInput schema / properties / reveal / description

Previous value: -"If true, include concealed field values in plaintext. Defaults to false for security."New value: +"If true, include concealed field values in plaintext — this puts the secret in the model context/transcript. Defaults to false; prefer op_run to use a secret without revealing it."

Addedv2.5.0Jul 5, 2026

TDQS

A4.3/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations present, the description carries the full burden and does so well: it discloses that secret-bearing values (passwords, SSH keys, OTP seeds, card numbers) are hidden by default, lists the non-secret types that are shown, and warns that revealing places the secret in the model context/transcript. It omits auth/permission requirements and any rate-limit behavior, which keeps it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is front-loaded — what is retrieved first, then the reveal semantics, then the op_run alternative. It is dense but every sentence earns its place; the only mild cost is that the second sentence packs several lists into one long clause.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read tool with no output schema and no annotations, the description covers the key things an agent needs: what is returned, what is redacted by default, how to select the item, and the safer alternative for using secrets. Remaining gaps (auth prerequisites, error modes) are minor given there is no output schema to lean on.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although schema description coverage is 100% (baseline 3), the description adds real meaning beyond the schema: the op://vault/item/field reference format, the precedence rule that secretReference causes vaultId/itemId to be ignored, and the hidden-vs-visible type taxonomy tied to reveal. That extra semantic layer justifies a bump above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Retrieve') and resource ('a full 1Password item') and enumerates the returned surface (title, category, tags, notes, all fields), which implicitly separates it from lighter siblings like item_lookup or item_list. An agent can tell what shape of result it gets without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear routing guidance for the secret-handling case: 'to USE a secret in a command or API call, prefer op_run with op:// references instead,' which is an explicit alternative and a when-not for reveal=true. It does not, however, clarify when to choose item_get over item_lookup or item_list, so the coverage is strong but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server