1Password

1Password Connect MCP Server for Cloudflare Workers

Available Tools

14 tools available in the 1Password MCP server. Each tool can be called by AI assistants to perform specific actions.

1password_list_activity

Retrieve the API activity log from the Connect server.

Shows audit trail of API requests made to the server.

Args:

limit: Maximum number of activity entries to return
offset: Offset for pagination
format: Response format ('json' or 'markdown')

Returns: Array of APIRequest objects with requestId, timestamp, action, result, actor, and resource details.

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "maximum": 100,
      "minimum": 1,
      "description": "Maximum entries to return"
    },
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "description": "Pagination offset"
    }
  }
}

1password_list_files

List all files attached to an item.

Args:

vaultId: The vault UUID
itemId: The item UUID
inlineContent: If true, include Base64-encoded file content in response
format: Response format ('json' or 'markdown')

Returns: Array of File objects with id, name, size, content_type.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId"
  ],
  "properties": {
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    },
    "inlineContent": {
      "type": "boolean",
      "description": "Include Base64-encoded content"
    }
  }
}

1password_get_file

Get details for a specific file attached to an item.

Args:

vaultId: The vault UUID
itemId: The item UUID
fileId: The file UUID
inlineContent: If true, include Base64-encoded file content in response
format: Response format ('json' or 'markdown')

Returns: File object with id, name, size, content_type, and optionally content.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId",
    "fileId"
  ],
  "properties": {
    "fileId": {
      "type": "string",
      "description": "File UUID"
    },
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    },
    "inlineContent": {
      "type": "boolean",
      "description": "Include Base64-encoded content"
    }
  }
}

1password_get_file_content

Download the raw content of a file.

Args:

vaultId: The vault UUID
itemId: The item UUID
fileId: The file UUID

Returns: Base64-encoded file content.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId",
    "fileId"
  ],
  "properties": {
    "fileId": {
      "type": "string",
      "description": "File UUID"
    },
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    }
  }
}

1password_get_health

Check the health status of the 1Password Connect server.

Returns server name, version, and status of dependencies.

Args:

format: Response format ('json' or 'markdown')

Returns: ServerHealth object with name, version, and dependencies array.

{
  "type": "object",
  "properties": {
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    }
  }
}

1password_heartbeat

Simple ping to verify the Connect server is available.

Returns: A simple response indicating the server is alive.

{
  "type": "object",
  "properties": {}
}

1password_list_items

List items in a vault.

Returns items without full field/section details. Use get_item to fetch complete details.

Args:

vaultId: The vault UUID
filter: Optional filter by title or tag (e.g., 'title eq "My Login"' or 'tag eq "work"')
format: Response format ('json' or 'markdown')

Returns: Array of Item objects with id, title, category, vault, tags.

{
  "type": "object",
  "required": [
    "vaultId"
  ],
  "properties": {
    "filter": {
      "type": "string",
      "description": "Filter by title or tag"
    },
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    }
  }
}

1password_get_item

Get complete details for a specific item including all fields and sections.

Args:

vaultId: The vault UUID
itemId: The item UUID
format: Response format ('json' or 'markdown')

Returns: Full Item object with all fields, sections, URLs, and metadata.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId"
  ],
  "properties": {
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    }
  }
}

1password_create_item

Create a new item in a vault.

Args:

vaultId: The vault UUID to create the item in
title: Title of the item
category: Item category (LOGIN, SECURE_NOTE, PASSWORD, API_CREDENTIAL, etc.)
fields: Array of field objects with id, type, label, value, purpose, section
sections: Optional array of section objects with id and label
urls: Optional array of URL objects with href, label, primary
tags: Optional array of tags
favorite: Whether to mark as favorite

Returns: The created Item object with assigned UUID.

Example fields: [ { "id": "username", "type": "STRING", "purpose": "USERNAME", "label": "Username", "value": "user@example.com" }, { "id": "password", "type": "CONCEALED", "purpose": "PASSWORD", "label": "Password", "value": "secret123" } ]

{
  "type": "object",
  "required": [
    "vaultId",
    "title"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item tags"
    },
    "urls": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item URLs"
    },
    "title": {
      "type": "string",
      "description": "Title of the item"
    },
    "fields": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item fields"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    },
    "favorite": {
      "type": "boolean",
      "description": "Whether to mark as favorite"
    },
    "sections": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item sections"
    }
  }
}

1password_update_item

Update an item by replacing it entirely.

This is a full replacement - all fields must be provided. Use patch_item for partial updates.

Args:

vaultId: The vault UUID
itemId: The item UUID
title: New title for the item
category: Item category
fields: Complete array of field objects
sections: Complete array of section objects
urls: Complete array of URL objects
tags: Complete array of tags
favorite: Whether to mark as favorite

Returns: The updated Item object.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId",
    "title"
  ],
  "properties": {
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item tags"
    },
    "urls": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item URLs"
    },
    "title": {
      "type": "string",
      "description": "Title of the item"
    },
    "fields": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item fields"
    },
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    },
    "favorite": {
      "type": "boolean",
      "description": "Whether to mark as favorite"
    },
    "sections": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Item sections"
    }
  }
}

1password_patch_item

Apply partial updates to an item using JSON Patch (RFC 6902).

This allows updating specific fields without providing the entire item.

Args:

vaultId: The vault UUID
itemId: The item UUID
operations: Array of JSON Patch operations

Operation format: { "op": "replace", "path": "/title", "value": "New Title" } { "op": "add", "path": "/fields/-", "value": { "id": "new", "type": "STRING", "label": "New Field", "value": "value" } } { "op": "remove", "path": "/fields/0" }

Returns: The updated Item object.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId",
    "operations"
  ],
  "properties": {
    "itemId": {
      "type": "string",
      "description": "Item UUID"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    },
    "operations": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "JSON Patch operations"
    }
  }
}

1password_delete_item

Permanently delete an item from a vault.

WARNING: This action cannot be undone.

Args:

vaultId: The vault UUID
itemId: The item UUID to delete

Returns: Confirmation of deletion.

{
  "type": "object",
  "required": [
    "vaultId",
    "itemId"
  ],
  "properties": {
    "itemId": {
      "type": "string",
      "description": "Item UUID to delete"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    }
  }
}

1password_list_vaults

List all vaults accessible to the service account.

Returns a list of vaults with their IDs, names, and descriptions.

Args:

filter: Optional SCIM-style filter by name (e.g., 'name eq "My Vault"')
format: Response format ('json' or 'markdown')

Returns: JSON format: Array of Vault objects with id, name, description, items count Markdown format: Formatted table of vaults

{
  "type": "object",
  "properties": {
    "filter": {
      "type": "string",
      "description": "SCIM-style filter by name"
    },
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string",
      "default": "json",
      "description": "Response format"
    }
  }
}

1password_get_vault

Get detailed information about a specific vault.

Args:

vaultId: The vault UUID
format: Response format ('json' or 'markdown')

Returns: Vault details including id, name, description, item count, type, and timestamps.

{
  "type": "object",
  "required": [
    "vaultId"
  ],
  "properties": {
    "format": {
      "enum": [
        "json",
        "markdown"
      ],
      "type": "string"
    },
    "vaultId": {
      "type": "string",
      "description": "Vault UUID"
    }
  }
}