Official CLI for accessing 1Password items, vaults, and secret references from the terminal. It also injects secrets into files, environment variables, and shell plugin auth flows.
$brew install 1password-cli
Agent Compatibility
JSON Output
Agent Skill
MCP Support
AI Analysis
1Password CLI brings 1Password to your terminal for secret references, item and vault management, and shell-plugin based CLI authentication. It supports direct reads, file templating, environment injection, and administrative automation across 1Password accounts.
Highlights
- Read secret references with
op read, or inject them into files and processes withop injectandop run. - Manage vault items, users, groups, service accounts, and related account resources from one CLI.
- Configure shell plugins so third-party CLIs can pull credentials from 1Password with biometric or system authentication.
Agent Fit
- Global
--format jsonoutput and stdin-friendly commands make it easy to inspect results and pipe objects between commands. - Separate verbs for reads, item CRUD, and plugin inspection reduce ambiguity when automating changes or audits.
- Composes cleanly with shell scripts and env-file workflows through
op run,op inject, andop plugin inspect.
Caveats
- Most real usage requires a signed-in 1Password account, app integration, or a service account.