Secure AI access
Start here for AI workflows. Give AI tools and agents access to secrets from 1Password without pasting credentials into prompts or storing API keys in plaintext.Workflow guide
Replace plaintext in
.env files and mcp.json with secrets from 1Password, using mounted local .env files and validation hooks with Cursor, Claude Code, Copilot, and Windsurf.
Connect AI agents to create and manage Environments through secure authorization prompts, without exposing your secrets.
Keep secrets out of agent context with 1Password and NVIDIA OpenShell. The agent works with placeholders and never sees secret values.
1Password for VS Code
Detect plaintext secrets in your codebase before AI coding tools read them into LLM context, and replace them with secure secret references.
Secure SSH & Git workflows
Manage SSH keys, authenticate Git and SSH with biometrics, sign commits, and forward SSH without exposing private keys.Workflow guide
1Password for SSH & Git
Create, store, and use SSH keys directly from 1Password for your Git and other workflows. Push code, sign commits and more, with biometrics.
Sign Git commits with SSH
Configure commit signing globally or per repository, register your public key with GitHub or GitLab, and verify signatures without your private key leaving 1Password.
Secure local development
Access credentials in your terminal, IDE, and local projects without exposing your secrets in plaintext.Workflow guide
Manage project secrets as environment variables in 1Password and load them on demand for local development, scripts, and tests.
1Password CLI
Load secrets into local scripts and apps with
op run, secret references, and environment variables. Keep plaintext out of your repo.
1Password Shell Plugins
Sign in to CLIs like
aws, gh, and AI coding tools with your fingerprint instead of storing API keys in shell profiles.1Password for VS Code
Eliminate plaintext secrets in code and improve your security practices when you integrate 1Password into your IDE.
1Password Academy: Developer Tools learning path
Take the free 1Password Academy learning path for developer tools to build hands-on skills with the CLI, SSH, and secrets management.
Secure your deployments
Securely load secrets into CI/CD, containers, and production apps at runtime with least-privilege access.Workflow guide
Manage secrets for each deployment stage as environment variables, then load them into CI/CD, containers, or Kubernetes at runtime.
1Password Service Accounts
Authenticate automated workflows and production agents with scoped tokens, without deploying additional services.
1Password Connect Server
Secure your database passwords, API keys, and other infrastructure credentials with a self-hosted secrets server.
CI/CD Integrations
Secure and rotate your secrets in 1Password and reference them directly within jobs throughout your CI/CD pipelines with a variety of integrations.
Create an Environment in 1Password, then securely sync those secrets to AWS Secrets Manager.
Build integrations
Build integrations and scripts that can securely interact with your 1Password account.Workflow guide
1Password CLI
Call 1Password from scripts, build tools, or any process that runs shell commands to access and manage items in your account.
SDKs
Build integrations that load secrets and manage vault items programmatically in Go, JavaScript, or Python.
1Password Service Accounts
Authenticate integrations and scripts with scoped vault tokens. No desktop app or manual sign-in required.
1Password Connect Server
Deploy a private REST API in your own infrastructure to access 1Password items locally, with secrets served on your network after the initial fetch.
AI-readable docs
Let AI assistants search and read this documentation using a curated
llms.txt index, per-page Markdown, and an MCP search server.
Configure team policies and resources
Set team policies and create shared resources so your team is ready to adopt 1Password developer tools.Workflow guide
Manage your organization
Programmatically manage groups, vaults, and permissions with 1Password CLI or SDKs.Workflow guide
Get data and analytics for your account
Create activity reports, send event data to your security tools, and automate access remediation.Workflow guide
Events API
Stream audit events, item usage, and sign-in attempts to your SIEM or analytics platform for dashboards, alerts, and correlation.
Users API
Connect your SOAR or security automation platform to suspend, reactivate, or look up users in 1Password during incident response.
SaaS Manager API
Manage applications, people, teams, contracts, devices, and workflows programmatically. Requires a 1Password SaaS Manager subscription.
1Password Partnership API
Offer 1Password to your customers and manage billing on your end. Use the Partnership API to programmatically provision accounts, pull reports, and more.
Save in 1Password
Give your website visitors a one-step way to save sign-in details, credit cards, API keys, and other sensitive data in 1Password.
Your Website & 1Password
Learn best practices for building accessible, semantic websites that work well with 1Password.
1Password's new secrets syncing integration with AWS
Bryan Byrne & Floris van der Grinten • June 16, 2025A new integration between 1Password and AWS Secrets Manager makes it faster and easier to sync secrets across environments from the 1Password desktop app.
Secure developer credentials with 1Password
Rachel Sudbeck • April 24, 2025Admin and developer secrets, such as SSH keys, API keys, and database passwords, are the essential credentials that let developers access the systems they need to do their jobs. If these secrets are compromised, they can grant particularly dangerous levels of unauthorized access, giving bad actors access to an organization’s most sensitive data and mission-critical systems.
Introducing programmatic item management with 1Password SDKs
Sadia Azmal and Simon Barendse • April 17, 2025Last year, we introduced 1Password SDKs — production-ready, open source libraries for Typescript/JavaScript, Python, and Go — to support secure access to secrets stored in 1Password. Today’s release expands those capabilities to provide full programmatic access to 1Password items, including creating, reading, updating, deleting, listing, and sharing information stored in vaults.