# 1Password MCP connector Connect 1Password to Elaichi and Claude, ChatGPT, Cursor and the Elaichi Agent can list your 1Password users, look one up, suspend a departing person and reactivate a returning one, all under your own access and on the record. Source: https://elaichi.ai/connectors/1password/ ## Facts | | | | --- | --- | | Application | 1Password | | Category | Password Manager | | AI tools | 4 | | Authentication | App credentials | | Needs your own OAuth app | No | | MCP endpoint | https://api.elaichi.ai/mcp | | Works with | Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent | | Tools advertised by name | Yes | ## What you can ask once 1Password is connected - List every 1Password user and mark who is suspended - Suspend Dana Whitfield's 1Password user, she left today - Reactivate Priya Nair's 1Password user, she is back from leave ## Connect 1Password in Elaichi This happens once for the organization, before any client is involved. 1. Open Connections, choose Add connection, and pick 1Password. 2. Optionally set Share with, then press Connect. 3. Paste your 1Password app credentials. 1Password authenticates the app rather than a person. One person supplies the credentials once, and everyone else works through Share with. Credentials are vaulted and nobody, including the AI, reads them back. The connection becomes a toolbox immediately, so you can curate which 1Password tools are exposed, rename them, or freeze arguments before anyone points a client at it. ## Connect 1Password to Claude Endpoint: https://api.elaichi.ai/mcp 1. Open Customize, then Connectors. 2. Press Add. 3. Name it, paste the MCP server URL, then Continue. 4. Sign in and approve. On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves. ## Connect 1Password to ChatGPT Endpoint: https://api.elaichi.ai/mcp 1. Open Plugins, then press the + button. 2. Name it and paste the endpoint into Server URL. 3. Leave Authentication on OAuth, then tick the risk acknowledgement. 4. Press Create, then sign in and approve. Works on the web today. The plugin directory lives at chatgpt.com/plugins. ## Connect 1Password to Cursor Endpoint: https://api.elaichi.ai/mcp 1. Open `~/.cursor/mcp.json`. 2. Add the endpoint under `mcpServers`. 3. Reload Cursor, then sign in and approve. Set up per machine, so repeat it on each computer you work from. ## Connect 1Password to any MCP client Endpoint: https://api.elaichi.ai/mcp 1. Add the endpoint as a remote MCP server. 2. Sign in and approve. The Elaichi Agent already has these tools, with nothing to set up. ## What the consent screen decides Only Read is granted by default, which is not enough to call a 1Password tool. Over MCP there is no trusted place to confirm a write in the moment, so the consent screen is the standing approval rather than a formality. Grant Read and Run tools. Think hard before granting Delete, which reaches into connected apps and cannot be undone. ## What teams do with 1Password through Elaichi ### Suspend a leaver before the day ends IT. When someone leaves, ask the agent to find their 1Password user and suspend it straight away. The change is logged with your name on it. ### Check who still has a live 1Password user Security. Pull the full list of 1Password users and compare it with the current headcount. Anyone who should not be there gets flagged in one pass. ### Reactivate someone back from leave People Ops. When a person returns from parental or medical leave, ask for their 1Password user to be reactivated the morning they are back. No ticket, no waiting. ### Answer an access review in minutes Compliance. Get every 1Password user in a single list, with status, ready to paste into a quarterly access review. Repeat it next quarter with the same question. ### Look up one person's account status Helpdesk. A colleague says they cannot sign in to 1Password. Look up their user by name and see at once whether the account is suspended or active. ### Count seats before the renewal Finance. Before the 1Password renewal, list active and suspended users to see how many seats are really in use. Suspend the ones nobody needs to trim the bill. ## Frequently asked questions ### How do I connect 1Password to Claude? Connect 1Password in Elaichi first, which asks for your 1Password app credentials and nothing else, so there is no OAuth application to register and no client ID or secret to generate. Then open Claude, go to Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp. Sign in to Elaichi as yourself and 1Password appears in Claude. ### Does 1Password work with ChatGPT and Cursor as well as Claude? Yes. Once 1Password is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any other MCP client and the Elaichi Agent. You connect 1Password once and every client picks it up. ### What can an AI agent actually do with my 1Password data? With 1Password connected, an agent can list every user on your 1Password account, look up a single person to see whether they are active or suspended, suspend a user who has left, and reactivate a user who is back. It does not touch vaults, items or passwords, because this connector only deals in users. ### Does connecting 1Password give the AI access to every vault and user? No. Every call to 1Password runs as the person who signed in, so the agent can only see and change the 1Password users that person could manage themselves. Elaichi can narrow that further, for example to looking up users but never suspending them, and it can never widen it beyond what 1Password already allows that person. ### Can my team share one 1Password connection? Yes. One administrator connects 1Password in Elaichi with the app credentials and shares the connection with a team, so nobody else ever handles those credentials. Each teammate still signs in to Elaichi as themselves, so the audit log names the actual person who suspended or reactivated a 1Password user. ### Can I stop an agent from suspending or reactivating people in 1Password? Yes. Restrictions in Elaichi apply per action, so you can allow listing and looking up 1Password users while blocking suspend and reactivate. A blocked action is never shown to Claude, ChatGPT or Cursor at all, so no prompt, however worded, can reach it. ### What happens to a 1Password connection when someone leaves? Offboarding that person in Elaichi ends their access to the 1Password connection at once, in every client they had it in. A shared 1Password connection keeps working for everyone else on the team. If you want 1Password gone entirely, disconnect it once in Elaichi and it disappears from Claude, ChatGPT, Cursor and every other client together. ## All 4 1Password tools Every tool below is callable through https://api.elaichi.ai/mcp once 1Password is connected, subject to the toolbox it is in and the restrictions on the caller. - **List all 1Password users** (List). List users in a 1Password account. Returns a collection of user objects from the account. Supports an optional filter to narrow results. - **Get single 1Password user by ID** (Get). Get a single 1Password user by id. Returns the full user object for the specified account. Required: id. - **1Password users suspend** (Suspend). Suspend a 1Password user by id, preventing them from accessing the account. Required: id. - **1Password users reactivate** (Reactivate). Reactivate a previously suspended 1Password user by id, restoring their access to the account. Required: id.