secret_reveal
Returns the plaintext of a specific secret from a 1Password vault item after the user acknowledges the plaintext exposure.
Instructions
Plaintext reveal is disabled in this server; this tool will fail until the server is restarted with OP_MCP_ENABLE_SECRET_REVEAL=true or --enable-secret-reveal=true. If the secret only needs to be consumed by a command or local script, do not call this tool. op_script_run is not available because the script runner is also disabled here; restart the server with --enable-script-runner=true plus startup --script-runner-root and --script-runner-allowlist or --script-runner-allowlist-manifest entries to allow no-plaintext secret consumption by scripts.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | Yes | ||
| acknowledgePlaintext | Yes | ||
| reference | No | ||
| vaultId | No | ||
| itemId | No | ||
| fieldId | No |