OneCLI Is Live on the 1Password Marketplace<br>Blog<br>OneCLI is now listed on the 1Password Marketplace. If your team keeps credentials in 1Password, you can now connect OneCLI as the gateway between your AI agents and the APIs they call. Credentials stay in the vault. OneCLI injects them into requests at the network layer, and the agent never sees a raw key.<br>Why this matters<br>The usual setup hands the agent an API key and hopes for the best. Once the key is in the agent's context it is extractable, loggable, and leakable via prompt injection. A vault solves storage, but not what happens after the agent fetches the secret.<br>With this integration the fetch never happens. The agent calls the API through the gateway, OneCLI resolves the credential from 1Password at request time, injects it into the outgoing call, and forwards it. The credential exists in exactly one place at rest (your vault) and is applied in exactly one place at runtime (the proxy).<br>How it works<br>The integration runs on 1Password Service Accounts and op:// secret references, the same format you already use in CI/CD pipelines and .env files. Setup takes three steps:<br>Create a Service Account in 1Password with read access to the vaults your agents need, and paste its token into the OneCLI dashboard (Secrets page, 1Password card). OneCLI validates the token and stores it encrypted with AES-256-GCM. The plain-text token is never written to disk.<br>Map each API hostname to the op:// reference for its secret, in the dashboard or via the API:<br>curl -X PUT http://localhost:10254/api/vault/onepassword/mappings \<br>-H "Content-Type: application/json" \<br>-d '{"hostname": "api.github.com", "op_ref": "op://Dev Tokens/GitHub/token"}'<br>curl -X PUT http://localhost:10254/api/vault/onepassword/mappings \<br>-H "Content-Type: application/json" \<br>-d '{"hostname": "api.github.com", "op_ref": "op://Dev Tokens/GitHub/token"}'<br>Point your agent at the gateway. When a request hits a mapped hostname, OneCLI resolves the reference through the official 1Password SDK and injects the value as an HTTP header on the way out. Resolved values live in memory for 60 seconds and are never written to the database.<br>Every proxied call gets the same treatment as any other OneCLI request: network-layer injection, policy checks, rate limits, and a full audit trail. The full setup is in the 1Password vault guide.<br>What users get<br>Credentials stay in 1Password's encrypted vault and are resolved at request time. Agents hold placeholders, never real values.<br>Your existing op:// references work as-is. No new naming conventions to learn.<br>Per-request injection at the network layer, so it works with any agent framework that makes HTTP calls.<br>Runtime policy enforcement on every proxied request: allow, block, approve, and rate limit.<br>Audit trail on both sides: access in 1Password, usage in OneCLI.<br>Get it<br>The integration is in beta and available today.<br>1Password Marketplace listing: marketplace.1password.com/integration/onecli<br>Setup guide: onecli.sh/docs/vaults/1password<br>OneCLI: github.com/onecli/onecli<br>This is the second password manager to plug into OneCLI Agent Vault, after Bitwarden. Same promise in both cases: your agents get the access they need, and they never hold a secret.
Open source<br>Built in the open<br>OneCLI is Apache 2.0 licensed. Star us on GitHub, open an issue, or contribute. We ship faster with your feedback.<br>Star on GitHubContribute