`: a native dialog opens outside Claude's view, the user pastes there, the value goes straight into 1Password, and only the `op://` reference comes back. Also never: print a secret value, `op read` inside every Bash call (biometric prompt fatigue), `source <(op run ... env)` or `eval` (values with shell metacharacters execute as code), `bash -x` any script that handles a value (the trace prints it). ## The guard hooks back this up When installed as a plugin, `hooks/guard.py` catches the common mistakes: secrets pasted by the user (erased before you see them), `op read` / `op item get` / `op run` / `printenv` / `echo $TOKEN` / reading `.env*` or credential files (Bash, Read, Grep) / `op item create ...=value`, literal secrets in Write/Edit, and any final message of yours that asks the user to paste a secret. If a hook blocks you, do what its message says: run `op-store <title>` and use the `op://` reference or `$VAR`. Do not look for a way around it, and do not call `secret-dialog` yourself: its output is the secret. ## Commands (installed by `install.sh` into `~/.local/bin`) | Command | What it does | |---|---| | `op-store <title>` | Opens the native dialog (hidden field + eye). Saves an *API Credential* item, field `credential`, in vault `Claude`. Prints `OK op://Claude/<title>/credential`. Single-line values only. | | `op-store --login <title> [--url URL]` | Asks username (visible) then password (hidden). Saves a *Login* item. | | `op-store --update <title>` | Replaces the value of an existing item. | | `op-store --vault V --field F <title>` | Other vault / field name. | | `op-env <command>` | Resolves every `op://` line of `~/.claude/.env.tpl` in ONE `op` call, exports them, then `exec`s the command. TTY preserved. Use `op-env claude` to start Claude Code. | | `op-env --check` | Shows op version, template, account, and how many keys resolve. Run this first when anything fails. | | `op-env --list` | Key names only, never values. | ## Workflows **User wants to store a secret** (key, token, password): 1. Choose a short item title (e.g. `Apify`, `GitHub PAT`, `UniFi`). 2. Run `op-store <title>` (or `--login` for user+password). Tell the user a dialog opened and to paste there. 3. On `OK op://...`, append `VAR_NAME=op://...` to `~/.claude/.env.tpl` if a tool needs it as an env var. 4. Tell the user to restart Claude Code with `op-env claude` so the new variable is loaded. Never verify by printing the value; `op-store` already confirmed the field exists. **A tool / script / hook needs a secret** and Claude was started with `op-env`: the variable is already in the environment. Use `$VAR_NAME` in the command. Do not `op read` again. If the variable is missing, check `op-env --list`, then ask the user to add it with `op-store` and restart with `op-env claude`. **MCP server needs a token** (`.mcp.json`): use `${VAR_NAME}` expansion, inherited from `op-env`: ```json { "mcpServers": { "x": { "command": "npx", "args": ["-y", "x-mcp"], "env": { "X_TOKEN": "${X_TOKEN}" } } } } ``` HTTP servers with a bearer header: `claude mcp add-json` with a `headersHelper` that runs `op read` once at connect time (see README). **One-off value outside a session**: `op read "op://Claude/Item/credential"` — fine in the user's own terminal, avoid inside Claude's Bash tool (each call is a new shell → new prompt). ## Setup check (run before the first use) ```bash op-env --check ``` - `op not found` → macOS `brew install --cask 1password-cli`; other OS: https://developer.1password.com/docs/cli/get-started/ - `NOT connected` → 1Password app > Settings > Developer > "Integrate with 1Password CLI" (Touch ID / Windows Hello / PolKit). Or export `OP_SERVICE_ACCOUNT_TOKEN` (no app needed, scoped to chosen vaults). - `resolved: N of M` with N < M → a reference in the template is wrong (vault/item/field name). ## Security model (tell the user when relevant) - With the desktop-app integration, `op` can read **every vault** of the account while the app is unlocked, not only `Claude`. The vault is organisation, not isolation. For real isolation use a **service account** scoped to one vault (`op service-account create name --vault Claude:read_items,write_items`; `write_items` is needed for `op-store`) and turn the app integration off. `op-env` removes `OP_SERVICE_ACCOUNT_TOKEN` from the launched session on purpose (`OP_ENV_KEEP_SA=1` keeps it). - Injected env vars protect the disk and the transcript. Every subprocess, hook and stdio MCP server started by Claude Code inherits **all** of them, and a process can still `printenv`. Do not print environments; do not run `env`/`printenv`/`set` without filtering. - `op://` references reveal vault, item and field *names*. Keep them non-sensitive. - Claude Code's own login token lives in the OS keychain and is readable by same-user processes (reported by Silverfort, 2026-07). Unrelated to 1Password; nothing here changes it. ## Troubleshooting - Claude starts in `--print` mode / "No terminal detected": you used `op run -- claude`. Use `op-env claude`. - `op whoami` says "account is not signed in" but everything works: known with app integration; ignore. - Repeated biometric prompts: something calls `op` per command. Move the secret to the template and use `op-env`. - macOS 26: "«iTerm/Terminal» would like to access data from other apps" pops up again and again, even after Allow: `op` talks to the desktop app through a socket inside 1Password's group container, and macOS keeps that answer only for the current terminal session and program. Fix: System Settings → Privacy & Security → Full Disk Access → add the terminal app, restart it. `op-env --check` prints a `macOS:` line while this is missing. - `op-env` loads 0 keys and `op-env --check` says "More than one item matches": two items share a title. Delete the duplicate in 1Password, or reference the item by ID in the template: `VAR=op://Vault/<item id>/field` (the IDs are in that same error message). - MCP server fails after `/mcp` reconnect: reconnect spawns non-interactively, `op` cannot prompt. Prefer `${VAR}` from `op-env`. - Dialog never appears (macOS): the binary `secret-dialog-macos` is missing → run `install.sh` (needs `swiftc`); falls back to AppleScript (no eye). - Linux: KDE uses `kdialog --password` (eye built in, KDE Frameworks ≥ 5.84); GNOME uses GTK4 `Gtk.PasswordEntry` via `python3-gi`; else `zenity` (no eye); else `read -s` in a TTY. - Windows: PowerShell + WinForms dialog. Claude Code runs in Git Bash; the scripts run there. Windows and Linux backends are not yet verified by the author. 22:o93c,11:[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"SoftwareApplication\",\"name\":\"op-secrets\",\"description\":\"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and everything it runs with one fingerprint check — Claude gets the names, never the values. Stay protected: a key you paste in the chat is deleted before Claude reads it, and printing keys or opening .env files is blocked. Mac, Windows, Linux.\",\"applicationCategory\":\"IT & security\",\"operatingSystem\":\"Claude\",\"url\":\"https://agentready.co/connectors/op-secrets\",\"sameAs\":[],\"publisher\":{\"@type\":\"Organization\",\"name\":\"lucas-saldanha-werneck\",\"url\":\"https://github.com\"}}"}}],["$","div",null,{"className":"wrap","children":[["$","div",null,{"className":"pp-head","children":[["$","$L23",null,{"name":"op-secrets","url":null,"size":56}],["$","div",null,{"children":[["$","div",null,{"className":"crumbs","children":[["$","$L5",null,{"href":"/","children":"Connectors"}],[" / ",["$","$L5",null,{"href":"/categories/security-it","children":"IT & security"}]]]}],["$","h1",null,{"children":["op-secrets",null]}]]}]]}],["$","div",null,{"className":"pp","children":[["$","div",null,{"className":"ca","children":[["$","p",null,{"className":"tag","children":"Save a secret: a small window opens that your AI cannot see, you paste there, it lands in 1Password."}],["$","$L24",null,{"text":"Read it back: any item in your vault loads into your AI and everything it runs with one fingerprint check — your AI gets the names, never the values. Stay protected: a key you paste in the chat is deleted before your AI reads it, and printing keys or opening .env files is blocked. Mac, Windows, Linux."}],["$","$L25",null,{"examples":[],"tools":[],"prefix":"","server":null,"instructions":[],"skills":[{"name":"1password","label":"1password","gist":"Use 1Password with Claude Code without secrets ever entering the chat, the transcript, the command line or shell history.","source":"https://github.com/lucas-saldanha-werneck/claude-1password/blob/2b563e1d9cd423a04460f6b4870631f3a219e598/skills/1password/SKILL.md","raw":"$26"}],"skillNote":"1 in the Claude listing"}],null]}],"$L27"]}]]}]] 22:oa76,1b:[["$","title","0",{"children":"op-secrets by lucas-saldanha-werneck: AI connector · Agent Ready"}],["$","meta","1",{"name":"description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","link","2",{"rel":"manifest","href":"/manifest.webmanifest","crossOrigin":"$undefined"}],["$","link","3",{"rel":"canonical","href":"https://agentready.co/connectors/op-secrets"}],["$","meta","4",{"property":"og:title","content":"op-secrets by lucas-saldanha-werneck: AI connector"}],["$","meta","5",{"property":"og:description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","meta","6",{"property":"og:url","content":"https://agentready.co/connectors/op-secrets"}],["$","meta","7",{"property":"og:site_name","content":"Agent Ready"}],["$","meta","8",{"property":"og:image","content":"https://agentready.co/connectors/op-secrets/opengraph-image?3b61e23efdbb5225"}],["$","meta","9",{"property":"og:image:type","content":"image/png"}],["$","meta","10",{"property":"og:image:width","content":"1200"}],["$","meta","11",{"property":"og:image:height","content":"630"}],["$","meta","12",{"property":"og:image:alt","content":"AI connector on Agent Ready"}],["$","meta","13",{"property":"og:type","content":"website"}],["$","meta","14",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","15",{"name":"twitter:title","content":"op-secrets by lucas-saldanha-werneck: AI connector"}],["$","meta","16",{"name":"twitter:description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","meta","17",{"name":"twitter:image","content":"https://agentready.co/connectors/op-secrets/opengraph-image?3b61e23efdbb5225"}],["$","meta","18",{"name":"twitter:image:alt","content":"AI connector on Agent Ready"}],["$","meta","19",{"name":"twitter:image:type","content":"image/png"}],["$","meta","20",{"name":"twitter:image:width","content":"1200"}],["$","meta","21",{"name":"twitter:image:height","content":"630"}],["$","link","22",{"rel":"icon","href":"/favicon.ico?favicon.3iymezf4ycw3e.ico","sizes":"64x64","type":"image/x-icon"}],["$","link","23",{"rel":"icon","href":"/icon.svg?icon.1m07wgr9jqhm5.svg","sizes":"any","type":"image/svg+xml"}],["$","link","24",{"rel":"apple-touch-icon","href":"/apple-icon.png?apple-icon.3q8qrgufoflqu.png","sizes":"180x180","type":"image/png"}],["$","$L28","25",{}]] 22:o10,1c:null 22:null 22:o22,:HL["/stores/claude.png","image"] 22:o12a7,27:["$","aside",null,{"className":"side","children":[["$","div",null,{"className":"card","children":[["$","h2",null,{"children":"Stores"}],["$","div",null,{"className":"st","children":[["$","div","claude",{"style":{"display":"contents"},"children":[["$","span",null,{"className":"s","children":[["$","img",null,{"className":"sm","src":"/stores/claude.png","alt":"","width":16,"height":16}],["$","b",null,{"children":"Claude"}],["$","a",null,{"className":"src","href":"https://github.com/lucas-saldanha-werneck/claude-1password","target":"_blank","rel":"noopener nofollow","children":"Source ↗"}]]}],["$","span",null,{"className":"rk2","children":[["$","small",null,{"children":"Listed, not ranked"}],null]}]]}]]}]]}],["$","div",null,{"className":"card","children":[["$","h2",null,{"children":"Details"}],["$","dl",null,{"className":"kv","children":[[["$","dt",null,{"children":"Company"}],["$","dd",null,{"children":"lucas-saldanha-werneck"}]],[["$","dt",null,{"children":"Publisher"}],["$","dd",null,{"children":"Community"}]],["$","dt",null,{"children":"Category"}],["$","dd",null,{"children":["$","$L5",null,{"href":"/categories/security-it","children":"IT & security"}]}],[["$","dt",null,{"children":"Audience"}],["$","dd",null,{"children":"For developers"}]],null,["$","dt",null,{"children":"Sign-in"}],["$","dd",null,{"children":"None needed"}],["$","dt",null,{"children":"Interactive UI"}],["$","dd",null,{"children":"No"}],[["$","dt",null,{"children":"Checked"}],["$","dd",null,{"children":"Oct 27, 2026"}]],null]}]]}],["$","div",null,{"className":"card","children":[["$","h2",null,{"children":["More in ","IT & security"]}],["$","ul",null,{"className":"sim","children":[["$","li","14778",{"children":["$","$L5",null,{"href":"/connectors/remote-desktop-commander","prefetch":false,"children":[["$","$L23",null,{"name":"Remote Desktop Commander","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/b5/b5a9082663d57b64df78838701ea5ae096cf89afc03ebffa0f7a46cedff03231-64.webp","size":24}],["$","b",null,{"children":"Remote Desktop Commander"}],["$","small",null,{"children":"#357"}]]}]}],["$","li","4663",{"children":["$","$L5",null,{"href":"/connectors/freshservice","prefetch":false,"children":[["$","$L23",null,{"name":"Freshservice","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/0a/0a8072b376751e49e35758ccbc379dd5899695b9891dfc0ca4d65fc04ec7f0c9-64.webp","size":24}],["$","b",null,{"children":"Freshservice"}],["$","small",null,{"children":"#176"}]]}]}],["$","li","15096",{"children":["$","$L5",null,{"href":"/connectors/codex-security","prefetch":false,"children":[["$","$L23",null,{"name":"Codex Security","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/9b/9b9c2b09b2fa064611fb62307d321d5c2ea70cf0789f7ce34cdb0fc0d9190b3a-64.webp","size":24}],["$","b",null,{"children":"Codex Security"}],["$","small",null,{"children":"#410"}]]}]}],["$","li","4449",{"children":["$","$L5",null,{"href":"/connectors/malwarebytes","prefetch":false,"children":[["$","$L23",null,{"name":"Malwarebytes","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/6b/6b0d1f4fdc751c893519ae7edf22539020f70a4447410ac0c8586b501661b336-64.webp","size":24}],["$","b",null,{"children":"Malwarebytes"}],["$","small",null,{"children":"#337"}]]}]}],["$","li","15486",{"children":["$","$L5",null,{"href":"/connectors/chatgpt-admin","prefetch":false,"children":[["$","$L23",null,{"name":"ChatGPT Admin","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/13/1396309d23a53fd780c162b74ddd8fc23f67ce0ec59d8339d1e4ec13f9d7843b-64.webp","size":24}],["$","b",null,{"children":"ChatGPT Admin"}],["$","small",null,{"children":"#459"}]]}]}],["$","li","15254",{"children":["$","$L5",null,{"href":"/connectors/triggercmd","prefetch":false,"children":[["$","$L23",null,{"name":"TRIGGERcmd","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/ec/eca7ecf7fdc2986ac69916cf4f2849de76bd6664f0cf69e7a3a8786e6d392949-64.webp","size":24}],["$","b",null,{"children":"TRIGGERcmd"}],["$","small",null,{"children":"#467"}]]}]}],["$","li","4530",{"children":["$","$L5",null,{"href":"/connectors/have-i-been-pwned","prefetch":false,"children":[["$","$L23",null,{"name":"Have I Been Pwned","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/44/440498ff84a20b2de35e39fa2bfa9695ac2bc2fd87fd754756b9bbbe01441bf5-64.webp","size":24}],["$","b",null,{"children":"Have I Been Pwned"}],["$","small",null,{"children":"#426"}]]}]}],["$","li","4545",{"children":["$","$L5",null,{"href":"/connectors/workos","prefetch":false,"children":["$L29","$L2a","$L2b"]}]}]]}]]}]]}] 22:o129,29:["$","$L23",null,{"name":"WorkOS","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/fa/fab3112ca9f1751bb6eb573c7e18021fc70035e461c3a07847797f023f84b2c7-64.webp","size":24}] 2a:["$","b",null,{"children":"WorkOS"}] 2b:["$","small",null,{"children":"#447"}] 22:o11,20:false 1f:7030 22:o17,1e:C 1d:C 1:C 15:C b:C 22:C </article></body></html>

22:o1,#22:o646,2:"$Sreact.fragment" 3:"/_next/static/immutable/chunks/12yk9g49l7-7r.js" 4:"/_next/static/immutable/chunks/2jrhxdtf12-uf.js" 5:I[7575,["$3","$4"],""] 6:I[10291,["$3"],"default"] 7:I[2968,["$3"],"default"] 8:I[4098,["$3"],"WebMCP"] 9:I[57507,["$3"],"ExternalLinks"] a:I[93137,["$3"],"Analytics"] 10:"$Sreact.suspense" 16:"ViewportBoundary" 17:I[82520,["$3"],"$16"] 19:"MetadataBoundary" 1a:I[82520,["$3"],"$19"] :HL["/_next/static/immutable/chunks/3g2_9hnyt6p64.css","style"] 1:X b:X d:X 15:X f:[["children",{"s":"__PAGE__","h":49314,"d":{"r":["$","$2","c",{"children":[["$","$10",null,{"fallback":["$","div",null,{"className":"wrap","style":{"minHeight":"60vh"}}],"children":"$L11"}],["$L12","$L13"],"$L14"]}],"p":false,"v":"$15"}}]] e:[["children",{"s":{"n":"slug","t":"d","k":"op-secrets","s":[]},"h":49250,"d":{"r":["$","$2","c",{"children":[null,["$","$L6",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L7",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}],"p":false,"v":"$d"},"c":"$Qf"}]] c:[["children",{"s":"connectors","h":49250,"d":{"r":["$","$2","c",{"children":[null,["$","$L6",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L7",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":"$undefined","forbidden":"$undefined","unauthorized":"$undefined"}]]}],"p":false,"v":"$d"},"c":"$Qe"}]] 1d:X 1e:X 22:o1232,0:{"q":"","i":false,"S":true,"r":"$1","t":{"t":{"s":"","h":49234,"d":{"r":["$","$2","c",{"children":[[["$","link","0",{"rel":"stylesheet","href":"/_next/static/immutable/chunks/3g2_9hnyt6p64.css","precedence":"next","crossOrigin":"$undefined","nonce":"$undefined"}],["$","script","script-0",{"src":"/_next/static/immutable/chunks/12yk9g49l7-7r.js","async":true,"nonce":"$undefined"}]],["$","html",null,{"lang":"en","className":"ec5Qua_variable","children":["$","body",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://agentready.co/#org\",\"name\":\"Agent Ready\",\"url\":\"https://agentready.co/\",\"logo\":\"https://agentready.co/icon-512.png\"},{\"@type\":\"WebSite\",\"@id\":\"https://agentready.co/#site\",\"name\":\"Agent Ready\",\"url\":\"https://agentready.co/\",\"publisher\":{\"@id\":\"https://agentready.co/#org\"}}]}"}}],["$","header",null,{"className":"site","children":["$","div",null,{"className":"wrap","children":[["$","$L5",null,{"href":"/","className":"brand","children":[["$","svg",null,{"className":"brand-mark","viewBox":"0 0 64 64","aria-hidden":"true","children":[["$","defs",null,{"children":["$","linearGradient",null,{"id":"arg","x1":"0","y1":"1","x2":"1","y2":"0","children":[["$","stop",null,{"offset":"0","stopColor":"#2563EB"}],["$","stop",null,{"offset":"1","stopColor":"#06B6D4"}]]}]}],["$","path",null,{"d":"M9 55 L32 9 L55 55","fill":"none","stroke":"url(#arg)","strokeWidth":"11","strokeLinecap":"round","strokeLinejoin":"round"}],["$","circle",null,{"cx":"32","cy":"45","r":"7","fill":"#FACC15"}]]}],"Agent Ready"]}],["$","nav",null,{"aria-label":"Main","children":[["$","$L5",null,{"href":"/","children":"Connectors"}],["$","$L5",null,{"href":"/categories","className":"nv-x","children":"Categories"}],["$","$L5",null,{"href":"/blog","children":"Blog"}],["$","$L5",null,{"href":"/mcp-plugin-usage","className":"nv-x","children":"Usage"}],["$","$L5",null,{"href":"/methodology","className":"nv-x","children":"Methodology"}],["$","$L5",null,{"href":"/work-with-us","className":"nv-cta","children":"Work with us"}]]}]]}]}],["$","main",null,{"children":["$","$L6",null,{"parallelRouterKey":"children","error":"$undefined","errorStyles":"$undefined","errorScripts":"$undefined","template":["$","$L7",null,{}],"templateStyles":"$undefined","templateScripts":"$undefined","notFound":[[["$","title",null,{"children":"404: This page could not be found."}],["$","div",null,{"style":{"fontFamily":"system-ui,\"Segoe UI\",Roboto,Helvetica,Arial,sans-serif,\"Apple Color Emoji\",\"Segoe UI Emoji\"","height":"100vh","textAlign":"center","display":"flex","flexDirection":"column","alignItems":"center","justifyContent":"center"},"children":["$","div",null,{"children":[["$","style",null,{"dangerouslySetInnerHTML":{"__html":"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}"}}],["$","h1",null,{"className":"next-error-h1","style":{"display":"inline-block","margin":"0 20px 0 0","padding":"0 23px 0 0","fontSize":24,"fontWeight":500,"verticalAlign":"top","lineHeight":"49px"},"children":404}],["$","div",null,{"style":{"display":"inline-block"},"children":["$","h2",null,{"style":{"fontSize":14,"fontWeight":400,"lineHeight":"49px","margin":0},"children":"This page could not be found."}]}]]}]}]],[]],"forbidden":"$undefined","unauthorized":"$undefined"}]}],["$","$L8",null,{}],["$","$L9",null,{}],["$","$La",null,{}],["$","footer",null,{"className":"foot","children":["$","div",null,{"className":"wrap","children":[["$","span",null,{"children":"Agent Ready"}],["$","nav",null,{"aria-label":"Footer","children":[["$","$L5",null,{"href":"/blog","children":"Blog"}],["$","$L5",null,{"href":"/mcp-plugin-usage","children":"Usage"}],["$","$L5",null,{"href":"/methodology","children":"Methodology"}],["$","$L5",null,{"href":"/categories","children":"Categories"}],["$","a",null,{"href":"/llms.txt","children":"llms.txt"}],["$","a",null,{"href":"/sitemap.xml","children":"Sitemap"}],["$","$L5",null,{"href":"/work-with-us","children":"Work with us"}]]}]]}]}]]}]}]]}],"p":false,"v":"$b"},"c":"$Qc"},"h":{"r":["$","$2","h",{"children":[null,["$","$L17","pwPFKUXKvj_J59HSIzeFjv",{"children":"$L18"}],["$","$L1a","pwPFKUXKvj_J59HSIzeFjm",{"children":[["$","div",null,{"hidden":true,"children":["$","$10",null,{"name":"Next.Metadata","children":"$L1b"}]}],"$L1c"]}]]}],"p":false,"v":"$1d"}},"s":"$1e","a":"$@1f","w":"$@20"} 22:o1b1,21:I[82520,["$3"],"OutletBoundary"] :HL["/_next/static/immutable/chunks/2lo4itc7piqdu.css","style"] d:C 12:["$","link","0",{"rel":"stylesheet","href":"/_next/static/immutable/chunks/2lo4itc7piqdu.css","precedence":"next","crossOrigin":"$undefined","nonce":"$undefined"}] 13:["$","script","script-0",{"src":"/_next/static/immutable/chunks/2jrhxdtf12-uf.js","async":true,"nonce":"$undefined"}] 14:["$","$L21",null,{"children":"$@22"}] 22:o14d,1e:300 18:[["$","meta","0",{"charSet":"utf-8"}],["$","meta","1",{"name":"viewport","content":"width=device-width, initial-scale=1"}],["$","meta","2",{"name":"theme-color","content":"#ffffff","media":"(prefers-color-scheme: light)"}],["$","meta","3",{"name":"theme-color","content":"#0d0d0f","media":"(prefers-color-scheme: dark)"}]] 22:o25,1d:0 15:0 15:T4,slug1d:T4,slug1e:300 22:o88,23:I[37521,["$3","$4"],"Logo"] 24:I[53913,["$3","$4"],"About"] 25:I[53913,["$3","$4"],"Explore"] 28:I[60329,["$3"],"IconMark"] 26:T1d7f,22:o1d7f,--- name: 1password description: > Use 1Password with Claude Code without secrets ever entering the chat, the transcript, the command line or shell history. Trigger when the user wants to store an API key, token, password or credential; when a tool, MCP server, hook or script needs a secret; when the user mentions 1Password, `op`, `op://`, secret references, .env files with secrets, "where do I put my key", or asks how to launch Claude Code with secrets loaded. Provides: `op-store` (native hidden dialog with an eye/reveal toggle → straight into 1Password), `op-env` (launch any command with secrets injected, TTY preserved, one biometric prompt) and `secret-dialog`. --- # 1Password for Claude Code ## The one rule **Never ask the user to paste a secret into the chat.** Anything typed in the chat or shown in a tool result is in the transcript forever. Instead run `op-store `: a native dialog opens outside Claude's view, the user pastes there, the value goes straight into 1Password, and only the `op://` reference comes back. Also never: print a secret value, `op read` inside every Bash call (biometric prompt fatigue), `source <(op run ... env)` or `eval` (values with shell metacharacters execute as code), `bash -x` any script that handles a value (the trace prints it). ## The guard hooks back this up When installed as a plugin, `hooks/guard.py` catches the common mistakes: secrets pasted by the user (erased before you see them), `op read` / `op item get` / `op run` / `printenv` / `echo $TOKEN` / reading `.env*` or credential files (Bash, Read, Grep) / `op item create ...=value`, literal secrets in Write/Edit, and any final message of yours that asks the user to paste a secret. If a hook blocks you, do what its message says: run `op-store <title>` and use the `op://` reference or `$VAR`. Do not look for a way around it, and do not call `secret-dialog` yourself: its output is the secret. ## Commands (installed by `install.sh` into `~/.local/bin`) | Command | What it does | |---|---| | `op-store <title>` | Opens the native dialog (hidden field + eye). Saves an *API Credential* item, field `credential`, in vault `Claude`. Prints `OK op://Claude/<title>/credential`. Single-line values only. | | `op-store --login <title> [--url URL]` | Asks username (visible) then password (hidden). Saves a *Login* item. | | `op-store --update <title>` | Replaces the value of an existing item. | | `op-store --vault V --field F <title>` | Other vault / field name. | | `op-env <command>` | Resolves every `op://` line of `~/.claude/.env.tpl` in ONE `op` call, exports them, then `exec`s the command. TTY preserved. Use `op-env claude` to start Claude Code. | | `op-env --check` | Shows op version, template, account, and how many keys resolve. Run this first when anything fails. | | `op-env --list` | Key names only, never values. | ## Workflows **User wants to store a secret** (key, token, password): 1. Choose a short item title (e.g. `Apify`, `GitHub PAT`, `UniFi`). 2. Run `op-store <title>` (or `--login` for user+password). Tell the user a dialog opened and to paste there. 3. On `OK op://...`, append `VAR_NAME=op://...` to `~/.claude/.env.tpl` if a tool needs it as an env var. 4. Tell the user to restart Claude Code with `op-env claude` so the new variable is loaded. Never verify by printing the value; `op-store` already confirmed the field exists. **A tool / script / hook needs a secret** and Claude was started with `op-env`: the variable is already in the environment. Use `$VAR_NAME` in the command. Do not `op read` again. If the variable is missing, check `op-env --list`, then ask the user to add it with `op-store` and restart with `op-env claude`. **MCP server needs a token** (`.mcp.json`): use `${VAR_NAME}` expansion, inherited from `op-env`: ```json { "mcpServers": { "x": { "command": "npx", "args": ["-y", "x-mcp"], "env": { "X_TOKEN": "${X_TOKEN}" } } } } ``` HTTP servers with a bearer header: `claude mcp add-json` with a `headersHelper` that runs `op read` once at connect time (see README). **One-off value outside a session**: `op read "op://Claude/Item/credential"` — fine in the user's own terminal, avoid inside Claude's Bash tool (each call is a new shell → new prompt). ## Setup check (run before the first use) ```bash op-env --check ``` - `op not found` → macOS `brew install --cask 1password-cli`; other OS: https://developer.1password.com/docs/cli/get-started/ - `NOT connected` → 1Password app > Settings > Developer > "Integrate with 1Password CLI" (Touch ID / Windows Hello / PolKit). Or export `OP_SERVICE_ACCOUNT_TOKEN` (no app needed, scoped to chosen vaults). - `resolved: N of M` with N < M → a reference in the template is wrong (vault/item/field name). ## Security model (tell the user when relevant) - With the desktop-app integration, `op` can read **every vault** of the account while the app is unlocked, not only `Claude`. The vault is organisation, not isolation. For real isolation use a **service account** scoped to one vault (`op service-account create name --vault Claude:read_items,write_items`; `write_items` is needed for `op-store`) and turn the app integration off. `op-env` removes `OP_SERVICE_ACCOUNT_TOKEN` from the launched session on purpose (`OP_ENV_KEEP_SA=1` keeps it). - Injected env vars protect the disk and the transcript. Every subprocess, hook and stdio MCP server started by Claude Code inherits **all** of them, and a process can still `printenv`. Do not print environments; do not run `env`/`printenv`/`set` without filtering. - `op://` references reveal vault, item and field *names*. Keep them non-sensitive. - Claude Code's own login token lives in the OS keychain and is readable by same-user processes (reported by Silverfort, 2026-07). Unrelated to 1Password; nothing here changes it. ## Troubleshooting - Claude starts in `--print` mode / "No terminal detected": you used `op run -- claude`. Use `op-env claude`. - `op whoami` says "account is not signed in" but everything works: known with app integration; ignore. - Repeated biometric prompts: something calls `op` per command. Move the secret to the template and use `op-env`. - macOS 26: "«iTerm/Terminal» would like to access data from other apps" pops up again and again, even after Allow: `op` talks to the desktop app through a socket inside 1Password's group container, and macOS keeps that answer only for the current terminal session and program. Fix: System Settings → Privacy & Security → Full Disk Access → add the terminal app, restart it. `op-env --check` prints a `macOS:` line while this is missing. - `op-env` loads 0 keys and `op-env --check` says "More than one item matches": two items share a title. Delete the duplicate in 1Password, or reference the item by ID in the template: `VAR=op://Vault/<item id>/field` (the IDs are in that same error message). - MCP server fails after `/mcp` reconnect: reconnect spawns non-interactively, `op` cannot prompt. Prefer `${VAR}` from `op-env`. - Dialog never appears (macOS): the binary `secret-dialog-macos` is missing → run `install.sh` (needs `swiftc`); falls back to AppleScript (no eye). - Linux: KDE uses `kdialog --password` (eye built in, KDE Frameworks ≥ 5.84); GNOME uses GTK4 `Gtk.PasswordEntry` via `python3-gi`; else `zenity` (no eye); else `read -s` in a TTY. - Windows: PowerShell + WinForms dialog. Claude Code runs in Git Bash; the scripts run there. Windows and Linux backends are not yet verified by the author. 22:o93c,11:[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"SoftwareApplication\",\"name\":\"op-secrets\",\"description\":\"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and everything it runs with one fingerprint check — Claude gets the names, never the values. Stay protected: a key you paste in the chat is deleted before Claude reads it, and printing keys or opening .env files is blocked. Mac, Windows, Linux.\",\"applicationCategory\":\"IT & security\",\"operatingSystem\":\"Claude\",\"url\":\"https://agentready.co/connectors/op-secrets\",\"sameAs\":[],\"publisher\":{\"@type\":\"Organization\",\"name\":\"lucas-saldanha-werneck\",\"url\":\"https://github.com\"}}"}}],["$","div",null,{"className":"wrap","children":[["$","div",null,{"className":"pp-head","children":[["$","$L23",null,{"name":"op-secrets","url":null,"size":56}],["$","div",null,{"children":[["$","div",null,{"className":"crumbs","children":[["$","$L5",null,{"href":"/","children":"Connectors"}],[" / ",["$","$L5",null,{"href":"/categories/security-it","children":"IT & security"}]]]}],["$","h1",null,{"children":["op-secrets",null]}]]}]]}],["$","div",null,{"className":"pp","children":[["$","div",null,{"className":"ca","children":[["$","p",null,{"className":"tag","children":"Save a secret: a small window opens that your AI cannot see, you paste there, it lands in 1Password."}],["$","$L24",null,{"text":"Read it back: any item in your vault loads into your AI and everything it runs with one fingerprint check — your AI gets the names, never the values. Stay protected: a key you paste in the chat is deleted before your AI reads it, and printing keys or opening .env files is blocked. Mac, Windows, Linux."}],["$","$L25",null,{"examples":[],"tools":[],"prefix":"","server":null,"instructions":[],"skills":[{"name":"1password","label":"1password","gist":"Use 1Password with Claude Code without secrets ever entering the chat, the transcript, the command line or shell history.","source":"https://github.com/lucas-saldanha-werneck/claude-1password/blob/2b563e1d9cd423a04460f6b4870631f3a219e598/skills/1password/SKILL.md","raw":"$26"}],"skillNote":"1 in the Claude listing"}],null]}],"$L27"]}]]}]] 22:oa76,1b:[["$","title","0",{"children":"op-secrets by lucas-saldanha-werneck: AI connector · Agent Ready"}],["$","meta","1",{"name":"description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","link","2",{"rel":"manifest","href":"/manifest.webmanifest","crossOrigin":"$undefined"}],["$","link","3",{"rel":"canonical","href":"https://agentready.co/connectors/op-secrets"}],["$","meta","4",{"property":"og:title","content":"op-secrets by lucas-saldanha-werneck: AI connector"}],["$","meta","5",{"property":"og:description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","meta","6",{"property":"og:url","content":"https://agentready.co/connectors/op-secrets"}],["$","meta","7",{"property":"og:site_name","content":"Agent Ready"}],["$","meta","8",{"property":"og:image","content":"https://agentready.co/connectors/op-secrets/opengraph-image?3b61e23efdbb5225"}],["$","meta","9",{"property":"og:image:type","content":"image/png"}],["$","meta","10",{"property":"og:image:width","content":"1200"}],["$","meta","11",{"property":"og:image:height","content":"630"}],["$","meta","12",{"property":"og:image:alt","content":"AI connector on Agent Ready"}],["$","meta","13",{"property":"og:type","content":"website"}],["$","meta","14",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","15",{"name":"twitter:title","content":"op-secrets by lucas-saldanha-werneck: AI connector"}],["$","meta","16",{"name":"twitter:description","content":"Save a secret: a small window opens that Claude cannot see, you paste there, it lands in 1Password. Read it back: any item in your vault loads into Claude and…"}],["$","meta","17",{"name":"twitter:image","content":"https://agentready.co/connectors/op-secrets/opengraph-image?3b61e23efdbb5225"}],["$","meta","18",{"name":"twitter:image:alt","content":"AI connector on Agent Ready"}],["$","meta","19",{"name":"twitter:image:type","content":"image/png"}],["$","meta","20",{"name":"twitter:image:width","content":"1200"}],["$","meta","21",{"name":"twitter:image:height","content":"630"}],["$","link","22",{"rel":"icon","href":"/favicon.ico?favicon.3iymezf4ycw3e.ico","sizes":"64x64","type":"image/x-icon"}],["$","link","23",{"rel":"icon","href":"/icon.svg?icon.1m07wgr9jqhm5.svg","sizes":"any","type":"image/svg+xml"}],["$","link","24",{"rel":"apple-touch-icon","href":"/apple-icon.png?apple-icon.3q8qrgufoflqu.png","sizes":"180x180","type":"image/png"}],["$","$L28","25",{}]] 22:o10,1c:null 22:null 22:o22,:HL["/stores/claude.png","image"] 22:o12a7,27:["$","aside",null,{"className":"side","children":[["$","div",null,{"className":"card","children":[["$","h2",null,{"children":"Stores"}],["$","div",null,{"className":"st","children":[["$","div","claude",{"style":{"display":"contents"},"children":[["$","span",null,{"className":"s","children":[["$","img",null,{"className":"sm","src":"/stores/claude.png","alt":"","width":16,"height":16}],["$","b",null,{"children":"Claude"}],["$","a",null,{"className":"src","href":"https://github.com/lucas-saldanha-werneck/claude-1password","target":"_blank","rel":"noopener nofollow","children":"Source ↗"}]]}],["$","span",null,{"className":"rk2","children":[["$","small",null,{"children":"Listed, not ranked"}],null]}]]}]]}]]}],["$","div",null,{"className":"card","children":[["$","h2",null,{"children":"Details"}],["$","dl",null,{"className":"kv","children":[[["$","dt",null,{"children":"Company"}],["$","dd",null,{"children":"lucas-saldanha-werneck"}]],[["$","dt",null,{"children":"Publisher"}],["$","dd",null,{"children":"Community"}]],["$","dt",null,{"children":"Category"}],["$","dd",null,{"children":["$","$L5",null,{"href":"/categories/security-it","children":"IT & security"}]}],[["$","dt",null,{"children":"Audience"}],["$","dd",null,{"children":"For developers"}]],null,["$","dt",null,{"children":"Sign-in"}],["$","dd",null,{"children":"None needed"}],["$","dt",null,{"children":"Interactive UI"}],["$","dd",null,{"children":"No"}],[["$","dt",null,{"children":"Checked"}],["$","dd",null,{"children":"Oct 27, 2026"}]],null]}]]}],["$","div",null,{"className":"card","children":[["$","h2",null,{"children":["More in ","IT & security"]}],["$","ul",null,{"className":"sim","children":[["$","li","14778",{"children":["$","$L5",null,{"href":"/connectors/remote-desktop-commander","prefetch":false,"children":[["$","$L23",null,{"name":"Remote Desktop Commander","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/b5/b5a9082663d57b64df78838701ea5ae096cf89afc03ebffa0f7a46cedff03231-64.webp","size":24}],["$","b",null,{"children":"Remote Desktop Commander"}],["$","small",null,{"children":"#357"}]]}]}],["$","li","4663",{"children":["$","$L5",null,{"href":"/connectors/freshservice","prefetch":false,"children":[["$","$L23",null,{"name":"Freshservice","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/0a/0a8072b376751e49e35758ccbc379dd5899695b9891dfc0ca4d65fc04ec7f0c9-64.webp","size":24}],["$","b",null,{"children":"Freshservice"}],["$","small",null,{"children":"#176"}]]}]}],["$","li","15096",{"children":["$","$L5",null,{"href":"/connectors/codex-security","prefetch":false,"children":[["$","$L23",null,{"name":"Codex Security","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/9b/9b9c2b09b2fa064611fb62307d321d5c2ea70cf0789f7ce34cdb0fc0d9190b3a-64.webp","size":24}],["$","b",null,{"children":"Codex Security"}],["$","small",null,{"children":"#410"}]]}]}],["$","li","4449",{"children":["$","$L5",null,{"href":"/connectors/malwarebytes","prefetch":false,"children":[["$","$L23",null,{"name":"Malwarebytes","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/6b/6b0d1f4fdc751c893519ae7edf22539020f70a4447410ac0c8586b501661b336-64.webp","size":24}],["$","b",null,{"children":"Malwarebytes"}],["$","small",null,{"children":"#337"}]]}]}],["$","li","15486",{"children":["$","$L5",null,{"href":"/connectors/chatgpt-admin","prefetch":false,"children":[["$","$L23",null,{"name":"ChatGPT Admin","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/13/1396309d23a53fd780c162b74ddd8fc23f67ce0ec59d8339d1e4ec13f9d7843b-64.webp","size":24}],["$","b",null,{"children":"ChatGPT Admin"}],["$","small",null,{"children":"#459"}]]}]}],["$","li","15254",{"children":["$","$L5",null,{"href":"/connectors/triggercmd","prefetch":false,"children":[["$","$L23",null,{"name":"TRIGGERcmd","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/ec/eca7ecf7fdc2986ac69916cf4f2849de76bd6664f0cf69e7a3a8786e6d392949-64.webp","size":24}],["$","b",null,{"children":"TRIGGERcmd"}],["$","small",null,{"children":"#467"}]]}]}],["$","li","4530",{"children":["$","$L5",null,{"href":"/connectors/have-i-been-pwned","prefetch":false,"children":[["$","$L23",null,{"name":"Have I Been Pwned","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/44/440498ff84a20b2de35e39fa2bfa9695ac2bc2fd87fd754756b9bbbe01441bf5-64.webp","size":24}],["$","b",null,{"children":"Have I Been Pwned"}],["$","small",null,{"children":"#426"}]]}]}],["$","li","4545",{"children":["$","$L5",null,{"href":"/connectors/workos","prefetch":false,"children":["$L29","$L2a","$L2b"]}]}]]}]]}]]}] 22:o129,29:["$","$L23",null,{"name":"WorkOS","url":"https://bodgzvrssuydrdmsrqsh.supabase.co/storage/v1/object/public/listing-media/v/fa/fab3112ca9f1751bb6eb573c7e18021fc70035e461c3a07847797f023f84b2c7-64.webp","size":24}] 2a:["$","b",null,{"children":"WorkOS"}] 2b:["$","small",null,{"children":"#447"}] 22:o11,20:false 1f:7030 22:o17,1e:C 1d:C 1:C 15:C b:C 22:C </article></body></html>

op-secrets

Skills

op-secrets

Skills