1Password for AI agents
Manage vault items and secrets via service accounts. Add an API key once and every agent you run can use it.
- Connects with an API key
- Ready to connect
- Any MCP client
- No card required
The route from an agent to 1Password
Once 1Password is set up in your workspace, any agent you run can reach it: a Spinrun agent, or Claude, ChatGPT and Cursor through one MCP endpoint. Every call passes through the Spinrun gateway, which sorts it by risk and writes it to the activity log.
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app read, write and destructive rules at the gateway on Free and Pro.
1Password in the catalog
Manage vault items and secrets via service accounts. · IT & Security
- An agent gets a jobFrom chat, a schedule, or your own AI client
- Spinrun checks the callSorted as a read, a write or a destructive call
- 1Password does the workThrough the connection you set up in your workspace
- Every call is loggedTool, outcome and duration, in one activity log
Three steps
From connection to first call
Connect an app once
Sign in from your workspace with OAuth or an API key. Spinrun keeps the credential in an encrypted vault, never in an agent's config.
Decide what it may do
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app rules for reads, writes and destructive calls on Free and Pro.
Let any agent use it
Claude, ChatGPT, Cursor or a Spinrun agent reach the app through one MCP endpoint, and every call is written to the same activity log.
What it can do
Every 1Password action, sorted by risk
Spinrun sorts every 1Password action into one of three tiers. By default, agents ask before a write; on Free and Pro, the rules you set decide which tiers run.
- Reads
Read actions
Fetch and search. Cannot change anything.
- Writes
Write actions
Create and update. Changes data but does not remove it.
- Destructive
Destructive actions
Delete, revoke, or overwrite. Hard or impossible to undo.
Same category
Other IT & Security apps
Other apps in this category that your agents can use.
Questions about 1Password
You paste an 1Password API key once. Spinrun keeps it in an encrypted vault rather than in an agent's config, and you can revoke it in one click.
Put 1Password to work. Start free.
Connect 1Password, decide what it may do, and give an agent its first job.