1Password CLI

1Password CLI allows you to automate administrative tasks, securely provision secrets across development environments, and use biometrics to authenticate in the terminal. With 1Password CLI, you can:

• Provision secrets directly from encrypted vaults in 1Password to environment variables, configuration files, or anywhere else, so you don't have to put any plaintext secrets in code and your secrets are synced across devices, systems, and platforms.
• Automate workflows for provisioning users, invite and confirm team members, manage access with groups and vaults, and generate reports.
• Use shell plugins to securely authenticate any CLI with your fingerprint.
• Contribute to our open source community by building your own shell plugins.

Quick start

If you're installing 1Password CLI for the first time, start here.

If you're using an earlier version of 1Password CLI, learn how to upgrade to 1Password CLI 2.0 and update your scripts with the new syntax.

Guides

Manage items and users

• Create and retrieve items.
• Add and remove team members.
• Manage your team members' vault permissions.
• Manage your team members' group permissions.

Provision secrets

• Access secrets in your code with secret references instead of plaintext secrets. Secret references are replaced with the actual secrets they reference in 1Password at runtime.
• Securely load secrets from the environment into your applications without putting any plaintext secrets in code.
• Securely load secrets into configuration files without putting any plaintext secrets in code.

Authenticate with biometrics

• Use shell plugins to securely authenticate third-party CLIs with biometrics.
• Build your own shell plugin if the CLI you want to authenticate isn't already supported.

Reference documentation

• Read the full command reference to learn about all 1Password CLI commands and how they can be used.
• Learn about the 1Password app integration.
• Learn about the shell plugins security model.