1Password

1Password stores items and secrets in vaults. Use the Connect API or Service Account connection to list vaults, retrieve or change items, download attached files, and resolve secret references. Returned fields and secrets can be used by later workflow steps.

Use the block

Access and manage secrets stored in 1Password vaults using the Connect API or Service Account SDK. List vaults, retrieve items with their fields and secrets, download attached files, create new items, update existing ones, delete items, and resolve secret references.

Actions

1Password List Vaults

List all vaults accessible by the Connect token or Service Account

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`filter`	string	No	SCIM filter expression (e.g., name eq "My Vault")

Output

Parameter	Type	Description
`vaults`	array	List of accessible vaults
↳ `id`	string	Vault ID
↳ `name`	string	Vault name
↳ `description`	string	Vault description
↳ `attributeVersion`	number	Vault attribute version
↳ `contentVersion`	number	Vault content version
↳ `items`	number	Number of items in the vault
↳ `type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

1Password Get Vault

Get details of a specific vault by ID

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID

Output

Parameter	Type	Description
`id`	string	Vault ID
`name`	string	Vault name
`description`	string	Vault description
`attributeVersion`	number	Vault attribute version
`contentVersion`	number	Vault content version
`items`	number	Number of items in the vault
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp

1Password List Items

List items in a vault. Returns summaries without field values.

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID to list items from
`filter`	string	No	SCIM filter expression (e.g., title eq "API Key" or tag eq "production")

Output

Parameter	Type	Description
`items`	array	List of items in the vault (summaries without field values)
↳ `id`	string	Item ID
↳ `title`	string	Item title
↳ `vault`	object	Vault reference
↳ `id`	string	Vault ID
↳ `category`	string	Item category (e.g., LOGIN, API_CREDENTIAL)
↳ `urls`	array	URLs associated with the item
↳ `href`	string	URL
↳ `label`	string	URL label
↳ `primary`	boolean	Whether this is the primary URL
↳ `favorite`	boolean	Whether the item is favorited
↳ `tags`	array	Item tags
↳ `version`	number	Item version number
↳ `state`	string	Item state (ARCHIVED, or absent/null when active)
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp
↳ `lastEditedBy`	string	ID of the last editor

1Password Get Item

Get full details of an item including all fields and secrets

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to retrieve

Output

Parameter	Type	Description
`response`	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
`vaults`	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
`id`	string	Vault or item ID
`name`	string	Vault name
`description`	string	Vault description
`items`	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`title`	string	Item title
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`vault`	json	Vault reference the item belongs to {id}
`fields`	json	Item fields including secrets [{id, label, type, purpose, value}]
`sections`	json	Item sections [{id, label}]
`files`	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
`tags`	json	Item tags
`urls`	json	URLs associated with the item [{href, label, primary}]
`favorite`	boolean	Whether the item is favorited
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`lastEditedBy`	string	ID of the last editor
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`success`	boolean	Whether the item was successfully deleted
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI
`file`	file	Downloaded file attachment

1Password Get Item File

Download the content of a file attached to an item

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID the file is attached to
`fileId`	string	Yes	The file ID (from the item's "files" array, e.g. via Get Item)

Output

Parameter	Type	Description
`file`	file	Downloaded file attachment

1Password Create Item

Create a new item in a vault

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID to create the item in
`category`	string	Yes	Item category (e.g., LOGIN, PASSWORD, API_CREDENTIAL, SECURE_NOTE, SERVER, DATABASE)
`title`	string	No	Item title
`tags`	string	No	Comma-separated list of tags
`fields`	string	No	JSON array of field objects (e.g., [{"label":"username","value":"admin","type":"STRING","purpose":"USERNAME"}]). "purpose" is honored in Connect Server mode; in Service Account mode 1Password infers it from the field label/type instead.

Output

Parameter	Type	Description
`response`	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
`vaults`	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
`id`	string	Vault or item ID
`name`	string	Vault name
`description`	string	Vault description
`items`	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`title`	string	Item title
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`vault`	json	Vault reference the item belongs to {id}
`fields`	json	Item fields including secrets [{id, label, type, purpose, value}]
`sections`	json	Item sections [{id, label}]
`files`	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
`tags`	json	Item tags
`urls`	json	URLs associated with the item [{href, label, primary}]
`favorite`	boolean	Whether the item is favorited
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`lastEditedBy`	string	ID of the last editor
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`success`	boolean	Whether the item was successfully deleted
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI
`file`	file	Downloaded file attachment

1Password Replace Item

Replace an entire item with new data (full update)

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to replace
`item`	string	Yes	JSON object representing the full item (e.g., {"vault":{"id":"..."},"category":"LOGIN","title":"My Item","fields":[...]})

Output

Parameter	Type	Description
`response`	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
`vaults`	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
`id`	string	Vault or item ID
`name`	string	Vault name
`description`	string	Vault description
`items`	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`title`	string	Item title
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`vault`	json	Vault reference the item belongs to {id}
`fields`	json	Item fields including secrets [{id, label, type, purpose, value}]
`sections`	json	Item sections [{id, label}]
`files`	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
`tags`	json	Item tags
`urls`	json	URLs associated with the item [{href, label, primary}]
`favorite`	boolean	Whether the item is favorited
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`lastEditedBy`	string	ID of the last editor
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`success`	boolean	Whether the item was successfully deleted
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI
`file`	file	Downloaded file attachment

1Password Update Item

Update an existing item using JSON Patch operations (RFC6902)

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to update
`operations`	string	Yes	JSON array of RFC6902 patch operations (e.g., [{"op":"replace","path":"/title","value":"New Title"}])

Output

Parameter	Type	Description
`response`	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
`vaults`	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
`id`	string	Vault or item ID
`name`	string	Vault name
`description`	string	Vault description
`items`	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
`type`	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
`title`	string	Item title
`category`	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
`vault`	json	Vault reference the item belongs to {id}
`fields`	json	Item fields including secrets [{id, label, type, purpose, value}]
`sections`	json	Item sections [{id, label}]
`files`	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
`tags`	json	Item tags
`urls`	json	URLs associated with the item [{href, label, primary}]
`favorite`	boolean	Whether the item is favorited
`version`	number	Item version number
`state`	string	Item state (ARCHIVED, or absent/null when active)
`lastEditedBy`	string	ID of the last editor
`createdAt`	string	Creation timestamp
`updatedAt`	string	Last update timestamp
`success`	boolean	Whether the item was successfully deleted
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI
`file`	file	Downloaded file attachment

1Password Delete Item

Delete an item from a vault

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: "service_account" or "connect"
`serviceAccountToken`	string	No	1Password Service Account token (for Service Account mode)
`apiKey`	string	No	1Password Connect API token (for Connect Server mode)
`serverUrl`	string	No	1Password Connect server URL (for Connect Server mode)
`vaultId`	string	Yes	The vault UUID
`itemId`	string	Yes	The item UUID to delete

Output

Parameter	Type	Description
`success`	boolean	Whether the item was successfully deleted

1Password Resolve Secret

Resolve a secret reference (op://vault/item/field) to its value. Service Account mode only.

Inputs and outputs

Input

Parameter	Type	Required	Description
`connectionMode`	string	No	Connection mode: must be "service_account" for this operation
`serviceAccountToken`	string	Yes	1Password Service Account token
`secretReference`	string	Yes	Secret reference URI (e.g., op://vault-name/item-name/field-name or op://vault-name/item-name/section-name/field-name)

Output

Parameter	Type	Description
`value`	string	The resolved secret value
`reference`	string	The original secret reference URI