The request names 1Password and asks for one specific operation, so the answer is about 1Password itself: its Developer Documentation 1 describes the CLI, Shell Plugins, Service Accounts and Connect Server, and its CLI action covers sign-in and reading or injecting secrets 13. Alternatives that handle secret retrieval are Engram's vault tools 14 and 1Password Events for usage auditing 2.
- 1
1Password Developer Documentation1password.devverified and signed
Official developer docs covering the 1Password CLI (op run, secret references, environment variables), Service Accounts, and Connect Server for reading secrets 111.
+8 community tools built for it
for agents: 1Password/load-secrets-action · 1Password/install-cli-action · 1Password
- 2
OpenClaw.Direct 1Password skillopenclaw.directverified and signed
Sets up and uses the 1Password CLI for sign-in, desktop integration, and reading or injecting secrets 13.
official:MCP server · OpenClaw Direct
for agents: 1password · obsidian · headless-vault-cli
- 3
Engramgetengram.appfound in code, not yet checked
Retrieves a named secret's encrypted blob from its vault, with decryption performed client-side 14.
official:MCP server · Engram
for agents: vault_get · vault_list · resolve_vault
- 4
1Password Events API1password.comverified and signed
Retrieves item usages for 1Password items through its Events API 12.
official:API · Events API
for agents: getAuthIntrospect · getSignInAttempts · getItemUsages
Sources
- 11Password Developer Documentation - 1Password Developer1password.dev · read 2026-10-29
- 2Password Manager, Secrets, and Access Management | 1Password1password.com · read 2026-10-29
- 3Fully Managed OpenClaw Hosting — AI Assistant — OpenClaw.Directopenclaw.direct · read 2026-10-29
- 4Engram — Memory infrastructure for AI agentsgetengram.app · read 2026-10-29
- 11Load secrets from 1Password: declares "1Password/load-secrets-action" (the record we read and signed)unfragile.ai · read 2026-10-24
- 12Events API: declares "getAuthIntrospect" (the record we read and signed)unfragile.ai · read 2026-10-24
- 131password: declares "1password" (the record we read and signed)unfragile.ai · read 2026-10-24
- 14Engram: declares "vault_get" (the record we read)github.com · read 2026-10-24
For agents: the 10 actions behind this answer
1Password/load-secrets-action · Load secrets from 1Password verified and signed
Make secrets from 1Password Connect available as environment variables in the next steps.
GetVaultById · 1Password Connect verified and signed
Get Vault details and metadata
getAuthIntrospect · Events API verified and signed
Performs introspection of the provided Bearer JWT token
· 1Password website read, tools not yet checked
Protect passwords and secrets, manage app access, and secure AI tools with 1Password. Easy to adopt from growing teams to enterprise.
1password · 1password verified and signed
Set up and use 1Password CLI for sign-in, desktop integration, and reading or injecting secrets.
vault_get · Engram found in code, not yet checked
Retrieve a named secret's encrypted blob. Decryption happens client-side with your vault key.
mcp-cli · mcp-cli verified and signed
Interface for MCP (Model Context Protocol) servers via CLI. Use when you need to interact with external tools, APIs, or data sources through MCP servers, list available MCP servers/tools, or call MCP tools from command line.
get_user · Supabase (Activepieces) verified and signed
Get User — Gets a single user's Auth record by ID. Requires the Service Role Key.
call_integration_api · pipes-mcp found in code, not yet checked
Call any integrated provider API (Linear, Notion, Snowflake) with automatic authentication token injection.
yaml · strictyaml verified and signed
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.