1Password

1Password stores items and secrets in vaults. Use the Connect API or Service Account connection to list vaults, retrieve or change items, download attached files, and resolve secret references. Returned fields and secrets can be used by later workflow steps.

Use the block

Access and manage secrets stored in 1Password vaults using the Connect API or Service Account SDK. List vaults, retrieve items with their fields and secrets, download attached files, create new items, update existing ones, delete items, and resolve secret references.

Actions

1Password List Vaults

List all vaults accessible by the Connect token or Service Account

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
filter	string	No	SCIM filter expression (e.g., name eq "My Vault")

Output

Parameter	Type	Description
vaults	array	List of accessible vaults
↳ id	string	Vault ID
↳ name	string	Vault name
↳ description	string	Vault description
↳ attributeVersion	number	Vault attribute version
↳ contentVersion	number	Vault content version
↳ items	number	Number of items in the vault
↳ type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp

1Password Get Vault

Get details of a specific vault by ID

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID

Output

Parameter	Type	Description
id	string	Vault ID
name	string	Vault name
description	string	Vault description
attributeVersion	number	Vault attribute version
contentVersion	number	Vault content version
items	number	Number of items in the vault
type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
createdAt	string	Creation timestamp
updatedAt	string	Last update timestamp

1Password List Items

List items in a vault. Returns summaries without field values.

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID to list items from
filter	string	No	SCIM filter expression (e.g., title eq "API Key" or tag eq "production")

Output

Parameter	Type	Description
items	array	List of items in the vault (summaries without field values)
↳ id	string	Item ID
↳ title	string	Item title
↳ vault	object	Vault reference
↳ id	string	Vault ID
↳ category	string	Item category (e.g., LOGIN, API_CREDENTIAL)
↳ urls	array	URLs associated with the item
↳ href	string	URL
↳ label	string	URL label
↳ primary	boolean	Whether this is the primary URL
↳ favorite	boolean	Whether the item is favorited
↳ tags	array	Item tags
↳ version	number	Item version number
↳ state	string	Item state (ARCHIVED, or absent/null when active)
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp
↳ lastEditedBy	string	ID of the last editor

1Password Get Item

Get full details of an item including all fields and secrets

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID
itemId	string	Yes	The item UUID to retrieve

Output

Parameter	Type	Description
response	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
vaults	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
id	string	Vault or item ID
name	string	Vault name
description	string	Vault description
items	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
title	string	Item title
category	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
vault	json	Vault reference the item belongs to {id}
fields	json	Item fields including secrets [{id, label, type, purpose, value}]
sections	json	Item sections [{id, label}]
files	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
tags	json	Item tags
urls	json	URLs associated with the item [{href, label, primary}]
favorite	boolean	Whether the item is favorited
version	number	Item version number
state	string	Item state (ARCHIVED, or absent/null when active)
lastEditedBy	string	ID of the last editor
createdAt	string	Creation timestamp
updatedAt	string	Last update timestamp
success	boolean	Whether the item was successfully deleted
value	string	The resolved secret value
reference	string	The original secret reference URI
file	file	Downloaded file attachment

1Password Get Item File

Download the content of a file attached to an item

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID
itemId	string	Yes	The item UUID the file is attached to
fileId	string	Yes	The file ID (from the item's "files" array, e.g. via Get Item)

Output

Parameter	Type	Description
file	file	Downloaded file attachment

1Password Create Item

Create a new item in a vault

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID to create the item in
category	string	Yes	Item category (e.g., LOGIN, PASSWORD, API_CREDENTIAL, SECURE_NOTE, SERVER, DATABASE)
title	string	No	Item title
tags	string	No	Comma-separated list of tags
fields	string	No	JSON array of field objects (e.g., [{"label":"username","value":"admin","type":"STRING","purpose":"USERNAME"}]). "purpose" is honored in Connect Server mode; in Service Account mode 1Password infers it from the field label/type instead.

Output

Parameter	Type	Description
response	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
vaults	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
id	string	Vault or item ID
name	string	Vault name
description	string	Vault description
items	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
title	string	Item title
category	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
vault	json	Vault reference the item belongs to {id}
fields	json	Item fields including secrets [{id, label, type, purpose, value}]
sections	json	Item sections [{id, label}]
files	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
tags	json	Item tags
urls	json	URLs associated with the item [{href, label, primary}]
favorite	boolean	Whether the item is favorited
version	number	Item version number
state	string	Item state (ARCHIVED, or absent/null when active)
lastEditedBy	string	ID of the last editor
createdAt	string	Creation timestamp
updatedAt	string	Last update timestamp
success	boolean	Whether the item was successfully deleted
value	string	The resolved secret value
reference	string	The original secret reference URI
file	file	Downloaded file attachment

1Password Replace Item

Replace an entire item with new data (full update)

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID
itemId	string	Yes	The item UUID to replace
item	string	Yes	JSON object representing the full item (e.g., {"vault":{"id":"..."},"category":"LOGIN","title":"My Item","fields":[...]})

Output

Parameter	Type	Description
response	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
vaults	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
id	string	Vault or item ID
name	string	Vault name
description	string	Vault description
items	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
title	string	Item title
category	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
vault	json	Vault reference the item belongs to {id}
fields	json	Item fields including secrets [{id, label, type, purpose, value}]
sections	json	Item sections [{id, label}]
files	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
tags	json	Item tags
urls	json	URLs associated with the item [{href, label, primary}]
favorite	boolean	Whether the item is favorited
version	number	Item version number
state	string	Item state (ARCHIVED, or absent/null when active)
lastEditedBy	string	ID of the last editor
createdAt	string	Creation timestamp
updatedAt	string	Last update timestamp
success	boolean	Whether the item was successfully deleted
value	string	The resolved secret value
reference	string	The original secret reference URI
file	file	Downloaded file attachment

1Password Update Item

Update an existing item using JSON Patch operations (RFC6902)

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID
itemId	string	Yes	The item UUID to update
operations	string	Yes	JSON array of RFC6902 patch operations (e.g., [{"op":"replace","path":"/title","value":"New Title"}])

Output

Parameter	Type	Description
response	json	Deprecated — kept for backward compatibility with workflows saved before per-operation outputs were added below. Never populated; use the operation-specific outputs instead.
vaults	json	List of accessible vaults [{id, name, description, items, type, createdAt, updatedAt}]
id	string	Vault or item ID
name	string	Vault name
description	string	Vault description
items	json	Number of items in the vault (Get Vault) or item summaries [{id, title, category, tags, favorite, version, updatedAt}] (List Items)
type	string	Vault type (USER_CREATED, PERSONAL, or EVERYONE)
title	string	Item title
category	string	Item category (e.g., LOGIN, API_CREDENTIAL, SECURE_NOTE)
vault	json	Vault reference the item belongs to {id}
fields	json	Item fields including secrets [{id, label, type, purpose, value}]
sections	json	Item sections [{id, label}]
files	json	Files attached to the item [{id, name, size, section}] — fetch content with Get Item File
tags	json	Item tags
urls	json	URLs associated with the item [{href, label, primary}]
favorite	boolean	Whether the item is favorited
version	number	Item version number
state	string	Item state (ARCHIVED, or absent/null when active)
lastEditedBy	string	ID of the last editor
createdAt	string	Creation timestamp
updatedAt	string	Last update timestamp
success	boolean	Whether the item was successfully deleted
value	string	The resolved secret value
reference	string	The original secret reference URI
file	file	Downloaded file attachment

1Password Delete Item

Delete an item from a vault

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: "service_account" or "connect"
serviceAccountToken	string	No	1Password Service Account token (for Service Account mode)
apiKey	string	No	1Password Connect API token (for Connect Server mode)
serverUrl	string	No	1Password Connect server URL (for Connect Server mode)
vaultId	string	Yes	The vault UUID
itemId	string	Yes	The item UUID to delete

Output

Parameter	Type	Description
success	boolean	Whether the item was successfully deleted

1Password Resolve Secret

Resolve a secret reference (op://vault/item/field) to its value. Service Account mode only.

Inputs and outputs

Input

Parameter	Type	Required	Description
connectionMode	string	No	Connection mode: must be "service_account" for this operation
serviceAccountToken	string	Yes	1Password Service Account token
secretReference	string	Yes	Secret reference URI (e.g., op://vault-name/item-name/field-name or op://vault-name/item-name/section-name/field-name)

Output

Parameter	Type	Description
value	string	The resolved secret value
reference	string	The original secret reference URI