Code & Dev Tools · Token

1Password

See what is in the 1Password vaults you choose, and save new logins with a generated password. Agents get names and op:// references, never a secret. Nothing to install.

Ask your agent

Once it is connected, ask for things like these.

  1. 01

    “Which logins in the Engineering vault have not changed this year?”

  2. 02

    “What fields does the Stripe API item have, and what are their op:// references?”

  3. 03

    “Create a login for the new staging database in the Infra vault”

How to connect

Connect it in the app, then give it to an agent.

  1. Step 01

    Get a service account token.

    In 1Password, open Developer › Service Accounts, create one, and give it read access to only the vaults an agent should see (add write access to save new logins). Paste the token it shows once. Encrypted on this computer, never in the workspace database.

    Creating a service account
  2. Step 02

    Open Connectors in Lobstack and choose 1Password. Paste it in.

    Allow changesOptional
    Off, an agent can list vaults and items and see which fields an item has. On, it can also save a new login with a password 1Password generates, which it never sees. Each save asks you first.
  3. Step 03

    Give it to an agent.

    An agent reaches only the connectors you give it.

Tools

What it gives an agent.

Examples. The server decides the real list when it starts.

  • onepassword_list_vaults
  • onepassword_list_items
  • onepassword_describe_item
  • onepassword_create_login
More connectors

More in Code & Dev Tools, and where most teams start.

All connectors, on their shelves.