Describe the capability surface exposed by this server, including the preferred no-plaintext path for consuming secrets in scripts.

Show non-secret 1Password CLI session state and runtime capability gates held by this MCP process.

Generate a strong random password and return it in plaintext for immediate use. Requires a reason and generated-secret acknowledgement.

Generate a memorable passphrase-like password and return it in plaintext for immediate use. Requires a reason and generated-secret acknowledgement.

Read one password field or secret reference. Returns redacted metadata by default. Plaintext reveal is disabled in this server; reveal=true will fail. If the secret only needs to be consumed by a command or local script, do not request reveal. op_script_run is not available because the script runner is also disabled here; restart the server with --enable-script-runner=true plus startup --script-runner-allowlist or --script-runner-allowlist-manifest entries to allow no-plaintext secret consumption by scripts.

List vaults visible to the authenticated 1Password integration.

Get vault details and, optionally, accessor permissions for one vault.

Get one group by ID. This is the only group read endpoint exposed by the official JS SDK beta today.

Get vault accessor permissions. The JS SDK beta exposes this through vault accessors.

Search item overviews by title/tags/category. If no vault is provided, the server searches every visible vault client-side.

Review placeholder items created with item_request_create and tagged 'mcp-managed'. Returns provenance plus filled/awaiting-fill status without returning credential values.

Get item metadata with every field value redacted. Use secret_reveal only when plaintext is explicitly required.

Get 1Password Environment variables with values redacted. Supports simple client-side filtering by variable name. When a secret is needed only by a command or local script, prefer op_script_run with envSecretRefs so the secret is injected into the child process and never returned in plaintext.

Get one 1Password Environment variable by exact name, with the value redacted. When a secret is needed only by a command or local script, prefer op_script_run with envSecretRefs so the secret is injected into the child process and never returned in plaintext.

Plaintext reveal is disabled in this server; this tool will fail until the server is restarted with OP_MCP_ENABLE_SECRET_REVEAL=true or --enable-secret-reveal=true. If the secret only needs to be consumed by a command or local script, do not call this tool. op_script_run is not available because the script runner is also disabled here; restart the server with --enable-script-runner=true plus startup --script-runner-allowlist or --script-runner-allowlist-manifest entries to allow no-plaintext secret consumption by scripts.

Plaintext reveal is disabled in this server; this tool will fail until the server is restarted with OP_MCP_ENABLE_SECRET_REVEAL=true or --enable-secret-reveal=true. If the secret only needs to be consumed by a command or local script, do not call this tool. op_script_run is not available because the script runner is also disabled here; restart the server with --enable-script-runner=true plus startup --script-runner-allowlist or --script-runner-allowlist-manifest entries to allow no-plaintext secret consumption by scripts.