1Password CLI

1Password CLI brings 1Password to your terminal. Sign in to 1Password CLI with your fingerprint, and securely access everything you need during development.

Use cases

Secret references

Eliminate plaintext secrets in code

Inject secrets from 1Password anywhere you need them.

Learn more

Workflow automation

Automate administrative tasks

Use scripts to manage items and provision team members at scale.

Learn more

Shell plugins

Sign in to any CLI with your fingerprint

Store API keys for your favorite CLIs in 1Password.

Learn more

Quick start

If you're installing 1Password CLI for the first time, start here.

Guides

Manage items and users

• Create and retrieve items.
• Add and remove team members.
• Manage your team members' vault permissions.
• Manage your team members' group permissions.

Provision secrets

• Securely load environment variables from 1Password Environments into your applications.
• Access secrets in your code with secret references instead of plaintext secrets. Secret references are replaced with the actual secrets they reference in 1Password at runtime.
• Securely load secrets from the environment into your applications using secret references.
• Securely inject secrets into configuration files using secret references.

Authenticate with biometrics

• Use shell plugins to securely authenticate third-party CLIs with biometrics.
• Build your own shell plugin if the CLI you want to authenticate isn't already supported.

Use 1Password CLI with other tools

• Use 1Password for VS Code to bring 1Password CLI functionality to VS Code.
• Use 1Password Service Accounts to limit the vaults 1Password CLI can access or run automated scripts if your personal account uses SSO or MFA.
• Use with 1Password Environments to quickly load your project secrets from 1Password.
• Use a 1Password Connect Server with 1Password CLI to securely access your items in your company's apps and cloud infrastructure using a private REST API.
• Use 1Password CI/CD Integrations with 1Password CLI to allow jobs in your pipeline to securely access secrets stored in 1Password.
• Use the 1Password Events API with 1Password CLI to provision bearer tokens at runtime using secret references.

Reference documentation

• Read the full command reference to learn about all 1Password CLI commands and how they can be used.
• Learn about CLI best practices.
• Learn about the 1Password app integration.
• Learn about the shell plugins security model.