Can I use 1Password Connect as a CLI?

Yes. KosmoKrator exposes a 1Password Connect CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose 1Password Connect through MCP?

Yes. The KosmoKrator MCP gateway can expose selected 1Password Connect tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are 1Password Connect credentials stored?

1Password Connect credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for 1Password Connect MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

1Password Connect CLI for AI Agents

Use the 1Password Connect CLI from KosmoKrator to call 1Password Connect tools headlessly, return JSON, inspect schemas, and automate workflows from coding agents, scripts, and CI.

1Password Connect CLI Setup

1Password Connect can be configured headlessly with `kosmokrator integrations:configure onepassword-connect`.

Install, configure, and verify

# Install KosmoKrator first if it is not available on PATH.
curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash

# Configure and verify this integration.
kosmokrator integrations:configure onepassword-connect --set api_token="$ONEPASSWORD_CONNECT_API_TOKEN" --set url="$ONEPASSWORD_CONNECT_URL" --enable --read allow --write ask --json
kosmokrator integrations:doctor onepassword-connect --json
kosmokrator integrations:status --json

Credentials

Authentication type: Bearer token bearer_token. Configure credentials once, then reuse the same stored profile from scripts, coding CLIs, Lua, and MCP.

Key	Env var	Type	Required	Label
`api_token`	`ONEPASSWORD_CONNECT_API_TOKEN`	Secret `secret`	yes	Connect Access Token
`url`	`ONEPASSWORD_CONNECT_URL`	URL `url`	yes	Connect API Base URL

Command Patterns

The generic command is stable across every integration. The provider shortcut is shorter for humans.

Generic CLI call

kosmo integrations:call onepassword-connect.onepassword_connect_get_api_activity '{}' --json

Provider shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_api_activity '{}' --json

Discovery

These commands return structured output for coding agents that need to inspect capabilities before choosing a function.

Discovery commands

kosmo integrations:docs onepassword-connect --json
kosmo integrations:docs onepassword-connect.onepassword_connect_get_api_activity --json
kosmo integrations:schema onepassword-connect.onepassword_connect_get_api_activity --json
kosmo integrations:search "1Password Connect" --json
kosmo integrations:list --json

Automation Contexts

The same configured command surface works in these environments. The command does not change unless the host wrapper, credentials, or permissions change.

CI Run integration calls from CI jobs with JSON output, explicit credentials, and predictable exit status. Cron Jobs Schedule repeatable integration workflows from cron while keeping credentials in KosmoKrator config. Shell Scripts Call integration functions from shell scripts with stable JSON input and output. Headless Automation Use KosmoKrator as a non-interactive integration runtime for local automations and wrappers. Coding Agents Let coding agents discover schemas and execute integration functions through CLI commands or MCP.

CLI Functions

Every function below can be called headlessly. Commands are highlighted, copyable, and scroll horizontally when payloads are long.

`onepassword-connect.onepassword_connect_get_api_activity`

Retrieve a list of API Requests that have been made. Official 1Password Connect endpoint: GET /activity.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_api_activity '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_api_activity '{}' --json

`onepassword-connect.onepassword_connect_get_vaults`

Get all Vaults Official 1Password Connect endpoint: GET /vaults.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_vaults '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_vaults '{}' --json

`onepassword-connect.onepassword_connect_get_vault_by_id`

Get Vault details and metadata Official 1Password Connect endpoint: GET /vaults/{vaultUuid}.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_vault_by_id '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_vault_by_id '{}' --json

`onepassword-connect.onepassword_connect_get_vault_items`

Get all items for inside a Vault Official 1Password Connect endpoint: GET /vaults/{vaultUuid}/items.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_vault_items '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_vault_items '{}' --json

`onepassword-connect.onepassword_connect_create_vault_item`

Create a new Item Official 1Password Connect endpoint: POST /vaults/{vaultUuid}/items.

Write write

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_create_vault_item '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_create_vault_item '{}' --json

`onepassword-connect.onepassword_connect_get_vault_item_by_id`

Get the details of an Item Official 1Password Connect endpoint: GET /vaults/{vaultUuid}/items/{itemUuid}.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_vault_item_by_id '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_vault_item_by_id '{}' --json

`onepassword-connect.onepassword_connect_update_vault_item`

Update an Item Official 1Password Connect endpoint: PUT /vaults/{vaultUuid}/items/{itemUuid}.

Write write

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_update_vault_item '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_update_vault_item '{}' --json

`onepassword-connect.onepassword_connect_delete_vault_item`

Delete an Item Official 1Password Connect endpoint: DELETE /vaults/{vaultUuid}/items/{itemUuid}.

Write write

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_delete_vault_item '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_delete_vault_item '{}' --json

`onepassword-connect.onepassword_connect_patch_vault_item`

Applies a modified [RFC6902 JSON Patch](https://tools.ietf.org/html/rfc6902) document to an Item or ItemField. This endpoint only supports `add`, `remove` and `replace` operations. When modifying a specific ItemField, the ItemField's ID in the `path` attribute

Write write

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_patch_vault_item '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_patch_vault_item '{}' --json

`onepassword-connect.onepassword_connect_get_item_files`

Get all the files inside an Item Official 1Password Connect endpoint: GET /vaults/{vaultUuid}/items/{itemUuid}/files.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_item_files '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_item_files '{}' --json

`onepassword-connect.onepassword_connect_get_details_of_file_by_id`

Get the details of a File Official 1Password Connect endpoint: GET /vaults/{vaultUuid}/items/{itemUuid}/files/{fileUuid}.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_details_of_file_by_id '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_details_of_file_by_id '{}' --json

`onepassword-connect.onepassword_connect_download_file_by_id`

Get the content of a File Official 1Password Connect endpoint: GET /vaults/{vaultUuid}/items/{itemUuid}/files/{fileUuid}/content.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_download_file_by_id '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_download_file_by_id '{}' --json

`onepassword-connect.onepassword_connect_get_heartbeat`

Ping the server for liveness Official 1Password Connect endpoint: GET /heartbeat.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_heartbeat '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_heartbeat '{}' --json

`onepassword-connect.onepassword_connect_get_server_health`

Get state of the server and its dependencies. Official 1Password Connect endpoint: GET /health.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_server_health '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_server_health '{}' --json

`onepassword-connect.onepassword_connect_get_prometheus_metrics`

See Prometheus documentation for a complete data model. Official 1Password Connect endpoint: GET /metrics.

Read read

Parameters: none

Generic call

kosmo integrations:call onepassword-connect.onepassword_connect_get_prometheus_metrics '{}' --json

Shortcut

kosmo integrations:onepassword-connect onepassword_connect_get_prometheus_metrics '{}' --json

Function Schemas

Use these parameter tables when building CLI payloads without calling integrations:schema first.

onepassword-connect.onepassword_connect_get_api_activity 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_api_activity --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_vaults 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_vaults --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_vault_by_id 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_vault_by_id --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_vault_items 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_vault_items --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_create_vault_item 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_create_vault_item --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_vault_item_by_id 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_vault_item_by_id --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_update_vault_item 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_update_vault_item --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_delete_vault_item 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_delete_vault_item --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_patch_vault_item 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_patch_vault_item --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_item_files 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_item_files --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_details_of_file_by_id 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_details_of_file_by_id --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_download_file_by_id 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_download_file_by_id --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_heartbeat 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_heartbeat --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_server_health 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_server_health --json

Parameter	Type	Required	Description
No parameters.

onepassword-connect.onepassword_connect_get_prometheus_metrics 0 parameters

Schema command

kosmo integrations:schema onepassword-connect.onepassword_connect_get_prometheus_metrics --json

Parameter	Type	Required	Description
No parameters.

Permissions

Headless calls still follow the integration read/write permission policy. Configure read/write defaults with integrations:configure. Add --force only for trusted automation that should bypass that policy.