1Password CLI

1Password CLI brings 1Password to your terminal. Sign in with your fingerprint, then read and write items, generate SSH keys, run scripts, and manage your team, all without copying secrets out of 1Password or storing them in plaintext. 1Password CLI works alongside the rest of the 1Password developer toolset: load project secrets from Environments, authenticate third-party tools with Shell Plugins, or call the same operations from 1Password SDKs when you need them in application code instead of a script.

​

Use cases

​

Quickstart

If you’re installing 1Password CLI for the first time, start here.

​

Guides

​

Manage items and users

• Create and retrieve items.
• Add and remove team members.
• Manage your team members’ vault permissions.
• Manage your team members’ group permissions.

​

Provision secrets

• Securely load secrets from the environment into your applications using secret references.
• Access secrets in your code with secret references instead of plaintext secrets. Secret references are replaced with the actual secrets they reference in 1Password at runtime.
• Securely inject secrets into configuration files using secret references.

​

Authenticate with biometrics

• Use shell plugins to securely authenticate third-party CLIs with biometrics.
• Build your own shell plugin if the CLI you want to authenticate isn’t already supported.

​

Use 1Password CLI with other tools

• Use 1Password for VS Code to bring 1Password CLI functionality to VS Code.
• Use 1Password Service Accounts to limit the vaults 1Password CLI can access or run automated scripts if your personal account uses SSO or MFA.
• Use with 1Password Environments to quickly load your project secrets from 1Password.
• Use a 1Password Connect Server with 1Password CLI to securely access your items in your company’s apps and cloud infrastructure using a private REST API.
• Use 1Password CI/CD Integrations with 1Password CLI to allow jobs in your pipeline to securely access secrets stored in 1Password.
• Use the 1Password Events API with 1Password CLI to provision bearer tokens at runtime using secret references.

​

Reference documentation

• Read the full command reference to learn about all 1Password CLI commands and how they can be used.
• Learn about CLI best practices.
• Learn about the 1Password app integration.
• Learn about the shell plugins security model.

​

Get help

Running into an error, or not sure which command to use? Check 1Password app integration troubleshooting, search the command reference, or ask in the Developer community or Developer Slack.