A powerful skill enabling AI agents to securely read, write, and manage secrets via the 1Password CLI and Service Accounts.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install 1password-cli
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install 1password-cli using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is 1Password CLI for Agents?
This skill integrates the robust security of 1Password with AI automation workflows. By leveraging the 1Password CLI (op) and Service Accounts, agents can programmatically access sensitive credentials, API keys, and secure notes within a controlled environment. This ensures that Openclaw Skills remain secure, avoiding hardcoded secrets and maintaining a clear audit trail of secret access through the 1Password platform.
Using this skill allows developers to delegate complex secret management tasks to agents while maintaining strict access controls. By utilizing Service Account Tokens, the agent operates with specific permissions, ensuring it only interacts with the vaults and items it is authorized to see, which is a core requirement for production-grade Openclaw Skills.
1Password CLI for Agents Use Cases
- Retrieving API keys for automated deployments or environment setup.
- Securely storing newly generated credentials for external services.
- Managing and rotating passwords without manual human intervention.
- Accessing sensitive configuration data stored within secure notes to facilitate cross-service communication.
How 1Password CLI for Agents Works
- The agent initializes the environment by verifying the 1Password Service Account Token (OP_SERVICE_ACCOUNT_TOKEN) is correctly configured.
- Authentication is confirmed using the 1Password CLI identity check command to ensure the session is active.
- The agent queries available vaults to locate the necessary secrets based on the specified parameters.
- Secrets are retrieved using URI-based reading or item-specific queries, specifically utilizing JSON format for structured parsing.
- The agent can modify or create new items within designated vaults to manage the full lifecycle of a secret.
1Password CLI for Agents Setup
First, ensure the 1Password CLI is installed on your system. For macOS, use:
brew install --cask 1password-cli
For Linux or Windows, follow the official 1Password documentation. Next, create a Service Account in the 1Password Developer Portal and grant it access to your chosen vault. Finally, set the environment variable for your Openclaw Skills session:
export OP_SERVICE_ACCOUNT_TOKEN="your-service-account-token"
1Password CLI for Agents Data Schema & Taxonomy
| Data Component | Description | Format |
|---|---|---|
| Vaults | Logical containers for secrets | JSON List |
| Items | Credentials, logins, or notes | Structured JSON |
| Secret URIs | Direct pointers to specific fields | op://Vault/Item/Field |
| Categories | Type of item being managed | Login, Secure Note, etc. |
1Password CLI for Agents Advanced Features
- Full CRUD support for login credentials and secure notes directly through the CLI.
- Native JSON output support for seamless agent parsing and logic integration within Openclaw Skills.
- Vault-specific scoping to restrict agent access and minimize the blast radius of credentials.
- Direct URI-based secret reading for accessing individual fields without retrieving entire item payloads.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw Knowledge Coach
An intelligent local knowledge assistant that imports documents into OpenClaw and automatically generates retrieval practice exercises to improve memory retention.
Gardening Calendar
A sophisticated horticultural intelligence skill that provides precise, localized sowing and harvesting schedules for over 160 plant varieties.
Apple Serial Lookup
A comprehensive utility to identify Apple hardware specifications, manufacturing details, and model identifiers from a serial number.
Agent Team Kit
A comprehensive framework for building self-sustaining AI agent teams that manage their own work queues and role ownership.
Apple Calendar CLI
A command-line interface for macOS that enables AI agents to programmatically manage Apple Calendar events using EventKit and structured JSON.
Ohio State University API Skill
A comprehensive interface to fetch public data from The Ohio State University Content APIs, including transit, dining, and academic resources.
Featured*
