1Password Connect MCP Server Integration Guide
Quick Start Architecture Summary
The 1Password Connect MCP server is a Model Context Protocol integration that connects AI assistants (Claude Desktop, Cursor IDE, VS Code, Zed) to the 1Password Connect API through natural language directives. It exposes 10 API operations as callable MCP tools, including Retrieve a list of API Requests that have been made., Get state of the server and its dependencies., Ping the server for liveness, and more. No authentication is required — operates out of the box immediately. Sourced from the auto 1Password Connect OpenAPI specification (v1.5.7) with an overall quality score of 34/99.
Technical Overview & Protocol Integration
The 1Password Connect API is a robust RESTful interface provided by 1Password, a leading enterprise password management and secrets orchestration platform.
By converting the OpenAPI 3.0 specification for 1Password Connect into native Model Context Protocol (MCP) tool definitions, developers and AI agents gain programmatic access to endpoints over stdio or HTTP transports. Every endpoint is translated into a discrete tool payload complete with input argument validation, parameter descriptions, and return type definitions.
This setup enables LLM agents to execute multi-step workflows, search records, mutate state, and analyze responses safely within local desktop client sessions like Claude Desktop and Cursor IDE.
2. Technical Specifications Matrix
System Specifications
| API Name | 1Password Connect |
| Slug Identifier | 1password-local-connect |
| Category | Security |
| Auth Method | None Required |
| Endpoint Count | 10 tools mapped |
| Spec Version | OpenAPI v1.5.7 |
| Transport Type | STDIO |
| Publisher Source | auto |
Developer Resources
3. Multi-Client Installation Matrix
Copy and paste these pre-formatted JSON snippets into your MCP client configuration files.
Claude Desktop
Add to claude_desktop_config.json
{
"mcpServers": {
"1password-local-connect": {
"command": "npx",
"args": [
"-y",
"@mcp/1password-local-connect"
],
"env": {
"1PASSWORD_CONNECT_API_KEY": "your_1password_connect_api_key"
}
}
}
}Cursor IDE
Settings → MCP Servers → Add Hosted Config
{
"mcpServers": {
"1password-local-connect": {
"url": "https://mcpbridge.org/config/1password-local-connect.json"
}
}
}Saves as .cursor/mcp.json in the download. Move it to your project root.
VS Code / Cline
Use with MCP extension config
{
"mcpServers": {
"1password-local-connect": {
"url": "https://mcpbridge.org/config/1password-local-connect.json"
}
}
}4. Environment Variables & Authentication Reference
Key parameters and credential variable mappings for 1Password Connect.
| Variable Name | Required | Example Value |
|---|---|---|
| 1PASSWORD_CONNECT_API_KEY | REQUIRED | your_1password_connect_api_key |
5. Endpoints & Tool Schemas Matrix
Search and inspect the 10 tool signatures mapped from OpenAPI.
Executable Code Integration Examples
Call 1Password Connect endpoints via cURL, TypeScript, or Python REST SDKs.
curl -X GET "https://api.apis.guru/v2/specs/1password.local/connect/1.5.7/activity" \ -H "Content-Type: application/json" \ # No auth required
6. Real-World AI Assistant Prompts
Prompt directives for invoking 1Password Connect operations inside AI client chats.
1. Information Search & Resource Querying
Read Query"Use 1Password Connect MCP server tools to search resources matching path '/activity' and summarize available properties."
2. Action Execution & API Payload Creation
Action Execution"Call 1Password Connect operation '/activity' with parameters configured for environment testing."
3. Multi-Step API Workflow Automation
Workflow Automation"Inspect recent responses from 1Password Connect API, extract target identifiers, and format a clean diagnostic report."
4. Introspection & Schema Audit
Introspection"Retrieve the full OpenAPI tool schema list for 1Password Connect MCP server and generate a technical summary of capabilities."
7. Error Resolution & Troubleshooting Guide
HTTP status codes and JSON-RPC protocol error resolution matrix.
400 Bad RequestRoot Cause: Malformed request payload parameters or missing required JSON Schema fields.
Resolution Action: Verify request schema in Section 5 tool specifications before calling operation.
401 UnauthorizedRoot Cause: Missing or invalid API key credentials in MCP environment config.
Resolution Action: Define required key in client config under env object.
403 ForbiddenRoot Cause: Insufficient scope permissions or unauthorized resource access.
Resolution Action: Check key permissions in developer control panel.
404 Not FoundRoot Cause: Resource URL path or requested target ID does not exist.
Resolution Action: Inspect path parameters and resource ID values.
429 Rate Limit ExceededRoot Cause: Upstream API rate limit quota exceeded.
Resolution Action: Implement exponential backoff retry in tool execution loop.
500 Internal Server ErrorRoot Cause: Upstream service runtime fault or stdio process crash.
Resolution Action: Inspect STDIO stderr output stream for diagnostic trace.
8. Quality Scorecard & Audit Metadata
Automated evaluation metrics for OpenAPI specification quality.
Similar Security APIs
Spotify Web API MCP
The Spotify Web API is a comprehensive RESTful service provided by Spotify AB that empowers developers to programmatically access Spotify's vast catalog of over 100 million songs and 5 million podcast titles. Its core capabilities encompass music discovery, library management, audio content retrieval, and playback control across authenticated user devices. Beyond basic metadata queries for albums, artists, and tracks, the API provides specialized endpoints for deep audio analysis (e.g., tempo, key, loudness) and audio features (e.g., danceability, energy, valence), which are invaluable for applications in music recommendation, DJ software, and academic research into music theory and psychology. Typical use cases span consumer applications like building custom playlist generators, social sharing features, or music learning tools, as well as enterprise applications for music intelligence platforms, content discovery engines, and personalized marketing analysis. The API serves as the foundational gateway for any third-party integration that seeks to leverage Spotify's ecosystem, from simple "Now Playing" widgets to complex data processing pipelines.
Events API MCP
The 1Password Events API is a specialized service provided by the password and credential management platform 1Password, designed for enterprise security teams, IT administrators, and security analysts. Its core capability is to provide a secure, queryable stream of audit events related to secret access and authentication activity within a 1Password organization or team. By aggregating data from the specified endpoints—`/api/v1/itemusages` for secret access logs and `/api/v1/signinattempts` for user authentication logs—it enables comprehensive monitoring, threat detection, and compliance reporting. Unlike a general-purpose API for managing vaults or secrets, this API is strictly read-focused, serving as the primary telemetry pipeline for security information and event management (SIEM) systems, custom alerting tools, and internal audit platforms. Typical use cases include correlating unusual secret access patterns with potential insider threats, verifying compliance with data access policies, generating audit trails for regulatory frameworks like SOC 2 or GDPR, and building real-time dashboards to visualize credential usage across an organization.
Authentiq API MCP
The Authentiq API provides a robust foundation for implementing strong, passwordless authentication and identity verification systems. Developed by Authentiq, a specialist in modern digital identity solutions, this API enables the secure management of cryptographic keys and the orchestration of login and scope-based authorization flows. Its core capabilities are centered around the lifecycle management of public-private key pairs, which serve as the user's credentials. The endpoints allow for the creation of a new key pair (POST /key), retrieval of a public key by its ID (GET /key/{PK}), and associated management operations (POST, PUT, DELETE on the key resource). Beyond basic key management, the API facilitates the authentication process itself through the POST /login endpoint, which verifies a signature from the user's private key. The /scope endpoints introduce a layer of fine-grained, permission-based access control, allowing developers to define, query, and manage specific authorization scopes tied to a job or session. This makes the API ideal for enterprise applications requiring secure internal tool access, consumer-facing mobile or web apps seeking seamless login experiences without credential fatigue, and IoT ecosystems where device authentication is paramount.
IP geolocation API MCP
The IP Geolocation API, developed by AbstractAPI, is a robust and scalable RESTful service designed to provide developers with precise geographic, network, and contextual data associated with any given IPv4 or IPv6 address. Its core capability lies in translating a digital identifier—a public IP address—into a rich dataset that includes region, country, city, latitude, longitude, timezone, and ISP details. Beyond this fundamental geolocation, the API extends its value by offering supplementary metadata such as the local currency code, national flag, primary language, and security flags indicating whether an IP is from a corporate network or associated with a known threat actor. Typical enterprise use cases span from real-time user authentication and fraud prevention, where a login attempt from an unexpected location can trigger a security alert, to localized content delivery, ensuring users see region-appropriate pricing, language, and offers. For consumers and developers, it powers features like website analytics dashboards, personalized news feeds, and dynamic form auto-population.