Infrastructure
1Password Integration
Secure credential management via the 1Password CLI
The agent uses the 1Password CLI (op) to generate passwords, store API keys, and retrieve secrets. Credentials never show up in plain text in config files or chat logs.
Setup
brew install 1password-cliEnable CLI integration in the 1Password desktop app: Settings -> Developer -> Enable CLI integration.
op signinOne thing to know: the desktop app has to be unlocked, and you need to approve the auth within about 30 seconds. So have the app open before running op signin.
Usage Prompt
You have access to 1Password via the op CLI. Use it for:
- Generating passwords: op item create --generate-password
- Storing credentials: op item create --category login
- Retrieving secrets: op read "op://vault/item/field"
- Storing API keys: op item create --category api_credential
When creating accounts for yourself, always:
1. Generate a secure password via op
2. Store the login in 1Password immediately
3. Store API keys separately if needed
Never log passwords or secrets in memory files or chat.