MCP or Not?

Draft: research not yet reviewed. Hidden from search engines and production.

OfficialClaude connector: yes

1Password MCP server & Claude connector

Does 1Password have an official MCP server or Claude connector?

Official

As of October 2026, 1Password publishes two official MCP servers: a local Environments server in the desktop app (beta) that lists environment and variable names but never returns secret values, and a SaaS Manager server with read-only remote access. A separate 1Password for Claude feature fills logins for Claude without exposing passwords.

Last checked

Verdict and evidence

What we checked
1Password Environments MCP Server
Published by
1Password (official)
Runs
Runs locally
Sign-in
Managed by the vendor
Stage
beta
Plan
Requires a 1Password account; no tier named. Enterprise admins can switch it off under Policies > Agentic permissions > Local MCP server. Needs a stdio-capable client.

Evidence

What an AI can do in 1Password

Read

  • List Environmentslist_environments
  • List variables (names only)list_variables
  • List local .env fileslist_local_env_files

Create

  • Create an Environmentcreate_environment
  • Create a local .env filecreate_local_env_file

Update

  • Rename an Environmentrename_environment
  • Append variablesappend_variables

Run

  • Authenticateauthenticate

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude Code

Enable Settings > Developer > Integrate with MCP clients in 1Password, then install the plugin.

/plugin marketplace add 1Password/1password-claude-plugin
/plugin install 1password@1password
Source

Other clients

Generic JSON config for other stdio clients.

{
  "mcpServers": {
    "1password": {
      "command": "1password-mcp"
    }
  }
}
Source

Safety check

  • Pass

    Publisher verified

    Documented on 1password.dev; the plugin repo is under the 1Password GitHub org; the server ships inside the 1Password desktop app.

  • Pass

    Auth model

    Local; 1Password shows an authorization prompt per Environment, remembered until 1Password locks. Secret values are never returned to the client.

  • Flag

    Write and delete access

    Write tools (create_environment, rename_environment, append_variables, create_local_env_file) are exposed; the docs mark which tools are read-only but describe no global read-only mode.

  • Pass

    Tool-description injection scan

    Read the documented tool table and setup page; no AI-directed behavior-changing text in tool entries. The Codex section suggests a custom instruction ('Always use the 1Password Environments MCP Server if you need to work with the 1Password developer environments') for users to add themselves, and the page has llms.txt boilerplate; neither is a tool description.

  • Pass

    Repo maintenance

    1Password/1password-claude-plugin (the Claude plugin wrapper; server itself is closed in the desktop app) pushed 2026-10-16, 8 stars, not archived.

Community alternatives

Built and maintained by third parties, not 1Password. Check the safety notes before connecting one to a real account.

1Password SaaS Manager MCP Server (formerly Trelica)

1Password · Hosted (remote) · API key or token

Read SaaS Manager data (remote server is read-only; tool ids not listed)

  • ⚠ Auth model: Remote use needs long-lived client credentials exchanged for a one-hour bearer token that must be regenerated manually; Dynamic Client Registration is not supported.

FAQ

Does 1Password have an official MCP server?

Yes. The Environments MCP server runs locally in the desktop app (beta), and a SaaS Manager MCP server offers read-only remote access.

Can the MCP server read my passwords?

The Environments server sees only Environment and variable names and never returns stored secret values, according to 1Password's docs.

Is 1Password a Claude connector?

Claude's support site documents 1Password for Claude under Settings > Connectors, but it is a login-fill feature, not described as an MCP server.

Is there a read-only mode?

The SaaS Manager remote server is read-only. The Environments server marks some tools read-only but has no global switch.

Can my admin turn it off?

Yes. Enterprise admins can disable the local MCP server under Policies > Agentic permissions.

Last reviewed .

Get your badge

Work at 1Password? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.

MCP or Not: Official · Checked Oct 2026

Markdown (README)

[![MCP or Not: Official · Checked Oct 2026](https://mcpornot.com/badge/1password.svg)](https://mcpornot.com/1password)

HTML

<a href="https://mcpornot.com/1password"><img src="https://mcpornot.com/badge/1password.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>

Compare 1Password

Something changed?

Vendors ship MCP updates often. If 1Password launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.