onepassword-mcp-server
Retrieves credentials from a specified 1Password vault using a service account token, making them available to AI agents for authentication.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@onepassword-mcp-server Log into amazon.com using my saved credentials"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Project Note: ⚠️ This MCP server is a proof of concept and is intended for educational purposes only. It utilizes the 1Password Python SDK to securely retrieve credentials from your 1Password account and provides them via the MCP Python SDK to Agentic AI for use in its operations. ⚠️
Quick Start
Installing via Smithery
To install 1Password Credential Retrieval Server for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install @dkvdm/onepassword-mcp-server --client claudePrerequisites
Python 3.11 or higher
uv(fast Python package installer):pip install uvInstall packages:
uv syncCreate a vault within 1Password named
AI, and add the items you want to use.Create a service account and give it the appropriate permissions in the vaults where the items you want to use with the SDK are saved.
Provision your service account token, and configure clients like Claude Desktop to connect to this server. Add the following structure to the client's configuration (e.g.,
claude_desktop_config.json), adjusting the path and environment variables as needed:
// Example for Claude Desktop config
{
"mcpServers": {
"1Password": {
"command": "uv",
"args": [
"run",
"--with",
"mcp[cli]",
"--with",
"onepassword-sdk",
"mcp",
"run",
"/your/dir/here/onepassword-mcp-server/server.py" // Change this path
],
"env": {
"OP_SERVICE_ACCOUNT_TOKEN": "INSERT_KEY_HERE" // Insert 1Password Service Account Token
}
}
}
}Launch Claude and try a prompt such as "Get 1Password credentials for ticktick.com" (based on item name)
Automate Browser with 1Password and Browser-Use MCP
Install mcp-browser-use and configure both MCP servers as such:
// Example for Claude Desktop config
{
"mcpServers": {
"1Password": {
"command": "uv",
"args": [
"run",
"--with",
"mcp[cli]",
"--with",
"onepassword-sdk",
"mcp",
"run",
"/your/dir/here/onepassword-mcp-server/server.py"
],
"env": {
"OP_SERVICE_ACCOUNT_TOKEN": "INSERT_KEY_HERE"
}
},
"browser-use": {
"command": "uv",
"args": [
"--directory",
"/your/dir/here/mcp-browser-use",
"run",
"mcp-server-browser-use"
],
"env": {
"MCP_USE_OWN_BROWSER": "true",
"CHROME_CDP": "http://127.0.0.1:9222",
"ANTHROPIC_API_KEY": "INSERT_KEY_HERE",
"PYTHONIOENCODING": "utf-8",
"PYTHONUNBUFFERED": "1",
"PYTHONUTF8": "1"
}
}
}
}Launch Claude and try a prompt such as "get 1Password credentials for ticktick.com and log into https://ticktick.com/signin"
Available Tools
1 toolget_1password_credentialsC
Get 1Password credentials for a given site.
Inputs: item_name (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 1 tool
Only one tool exists, so there is no ambiguity or confusion with other tools.
The single tool follows a clear verb_noun pattern using snake_case, which is consistent.
With just one tool, the server feels thin for most use cases, but it may be acceptable for a very narrow purpose.
Only a read operation is provided; missing create, update, delete, or search capabilities for a comprehensive credential management tool.
Related MCP Connectors
Password vault for AI agents with scoped, user-approved access
Let AI agents use any website you're logged in to. Sessions stay encrypted on your machine.
Let your AI agent operate any website through a real, logged-in browser session.
Logs your AI agent into websites, catches verification codes, and asks you before anything risky.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to securely fill web forms with credentials from SecureVault, keeping raw secrets hidden from the agent.8 npmMIT
- AlicenseAqualityAmaintenanceConnects MCP-compatible AI clients to 1Password vaults via a Service Account, enabling password management and vault operations through natural language.151,767 npm22Apache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to securely retrieve passwords, API keys, and other items from a Vaultwarden/Bitwarden vault using MCP tools with fuzzy search and caching.1MIT
- AlicenseAqualityBmaintenanceEnables AI agents to look up stored logins by URL, name, or alias and use them without seeing the secrets, injecting authentication into HTTP requests, running commands with credentials in the environment and scrubbed output, and fetching 2FA codes, subject to per-credential policies and user approval.23MIT