1Password

Retrieve API keys, tokens, and passwords from 1Password via the op CLI.

6|3|Updated Apr 22, 2026
One-click install
npx skills add https://github.com/lordmacu/nexo-rs --skill 1password-lordmacu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 1Password
Source: https://github.com/lordmacu/nexo-rs/tree/main/skills/onepassword
Command: npx skills add https://github.com/lordmacu/nexo-rs --skill 1password-lordmacu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires op, and includes scripts (resource) components.

What problem does it solve?

This Skill allows you to securely access 1Password secrets without revealing them, providing a secure way to use credentials for various services.

Core Features & Use Cases

  • Secret Retrieval: Retrieve API keys, tokens, and passwords from 1Password securely.
  • Read-Only Access: Secret values are read-only by default, protecting sensitive information.
  • Use Case: When your agent needs to use a service that requires a 1Password credential, this skill can retrieve the necessary secret without exposing it.

Quick Start

Retrieve the API key for Stripe from 1Password using the 1Password skill.

Frequently Asked Questions about 1Password

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve API keys and passwords from 1Password for automated workflows?

To retrieve API keys and passwords from 1Password, you can use a Skill that provides secure read-only access via the 'op' CLI and a service-account token. This allows automated workflows to fetch necessary credentials without exposing the secret values.

Can I securely access 1Password secrets without revealing the actual credential values?

Yes, you can securely access 1Password secrets without revealing them by using read-only retrieval methods. This ensures your agent receives the necessary credentials for services requiring API keys or tokens while protecting the sensitive information from exposure.

Do I need the op CLI and a service-account token to access 1Password secrets?

Yes, accessing 1Password secrets through this method requires the 'op' CLI tool and an environment variable configured with your service-account token. These prerequisites enable secure, automated credential retrieval for your workflows.

What is the best way to manage secret retrieval for services requiring API keys in automated agents?

The best way to manage secret retrieval is using a read-only access approach that fetches credentials directly from a secure vault like 1Password. This prevents hard-coding sensitive API keys and tokens into your automated workflows.

Are there limitations when using a service-account token for 1Password credential access?

The primary limitation is that secret retrieval is restricted to read-only access by default, protecting sensitive information from being modified. Additionally, this method depends entirely on the 'op' CLI and a valid service-account token environment variable.