1Password Block

List vaults, list items, and fetch item details from a 1Password Connect server. Authenticate with a Connect access token and point the block at your Connect server URL — making it the right choice whenever a workflow needs to read credentials or secrets stored in 1Password.

Overview

When to Use

• Enumerate all vaults available on your self-hosted 1Password Connect instance so a downstream block can pick the right one dynamically.
• List every item inside a specific vault to build a menu, audit inventory, or fan out per-item processing in a loop block.
• Retrieve the full details (fields, sections, URLs, tags) of a single vault item to pass credentials or metadata to another block.
• Automate secret rotation workflows by reading existing item data before updating it through an API block.
• Power security-audit workflows that need to inspect which items are stored in which vaults.
• Surface 1Password data to an agent block so it can answer questions about stored credentials without manual look-ups.

Configuration

Operation

Select which 1Password Connect API call to make. The block exposes three operations via a dropdown; pick one before filling in the remaining fields.

Default: onepassword_list_vaults

Vault ID

• Sub-block id: vaultId
• Type: short-input
• Placeholder: Vault ID
• Shown when: operation is onepassword_list_items or onepassword_get_item

The opaque string ID of the vault to operate on. Copy it from the 1Password Connect server's vault list or from a previous List vaults step via {{listVaultsBlock.data[0].id}}.

Item ID

• Sub-block id: itemId
• Type: short-input
• Placeholder: Item ID
• Shown when: operation is onepassword_get_item

The opaque string ID of the item to retrieve. Obtain it from a previous List items step via {{listItemsBlock.data[0].id}}.

Connect Server URL

• Sub-block id: connectUrl
• Type: short-input
• Placeholder: https://connect.example.com
• Required: yes

The base URL of your self-hosted 1Password Connect server. Trailing slashes are stripped automatically. Use an environment variable reference such as {{OP_CONNECT_URL}} to keep the URL out of the workflow definition.

Connect Access Token

• Sub-block id: apiKey
• Type: short-input (password)
• Placeholder: eyJ...
• Required: yes

A 1Password Connect access token that has read access to the vaults you want to query. Store it as a workspace secret and reference it as {{OP_CONNECT_TOKEN}} rather than pasting the raw value.

Inputs & Outputs

Inputs:

• operation (string) — Operation to perform (onepassword_list_vaults, onepassword_list_items, or onepassword_get_item)
• apiKey (string) — 1Password Connect access token
• connectUrl (string) — 1Password Connect server URL
• vaultId (string) — Vault ID (required for List items and Get item operations)
• itemId (string) — Item ID (required for Get item operation only)

Outputs:

• data (json) — Result object or array from 1Password. For list operations this is an array of vault or item summary objects; for Get item it is the full item object.
• metadata (json) — Response metadata. For list operations contains count (number of results); for Get item contains id (the item's ID string).

Tools

• 1Password List Vaults (onepassword_list_vaults) — Issues a GET /v1/vaults request to the Connect server and returns an array of all accessible vault objects plus a count in metadata.
• 1Password List Items (onepassword_list_items) — Issues a GET /v1/vaults/{vaultId}/items request and returns an array of item summary objects inside the specified vault, plus a count in metadata.
• 1Password Get Item (onepassword_get_item) — Issues a GET /v1/vaults/{vaultId}/items/{itemId} request and returns the full item object (all fields, sections, URLs, tags) along with the item's ID in metadata.

YAML Example

onepassword_1:
  type: onepassword
  name: "Get Database Credential"
  inputs:
    operation: onepassword_get_item
    connectUrl: "{{OP_CONNECT_URL}}"
    apiKey: "{{OP_CONNECT_TOKEN}}"
    vaultId: "abc123vaultid"
    itemId: "xyz789itemid"
  connections:
    outgoing:
      - target: next-block-id