{"slug": "onecli-is-live-on-the-1password-marketplace", "title": "OneCLI Is Live on the 1Password Marketplace", "summary": "OneCLI is now listed on the 1Password Marketplace, enabling AI agents to call APIs without ever seeing raw credentials by injecting secrets from 1Password at the network layer. The integration uses 1Password Service Accounts and op:// secret references, with credentials resolved at request time and never stored in agent context. OneCLI founder Jonathan Fishner announced the beta integration, which adds policy enforcement, rate limits, and audit trails to every proxied request.", "body_md": "[Blog](/blog)\n\n# OneCLI Is Live on the 1Password Marketplace\n\n·[Jonathan Fishner](https://x.com/jonathanfishner)\n\nOneCLI is now listed on the [1Password Marketplace](https://marketplace.1password.com/integration/onecli). If your team keeps credentials in 1Password, you can now connect [OneCLI](https://github.com/onecli/onecli) as the gateway between your AI agents and the APIs they call. Credentials stay in the vault. OneCLI injects them into requests at the network layer, and the agent never sees a raw key.\n\n## Why this matters\n\nThe usual setup hands the agent an API key and hopes for the best. Once the key is in the agent's context it is extractable, loggable, and leakable via prompt injection. A vault solves storage, but not what happens after the agent fetches the secret.\n\nWith this integration the fetch never happens. The agent calls the API through the gateway, OneCLI resolves the credential from 1Password at request time, injects it into the outgoing call, and forwards it. The credential exists in exactly one place at rest (your vault) and is applied in exactly one place at runtime (the proxy).\n\n## How it works\n\nThe integration runs on [1Password Service Accounts](https://developer.1password.com/docs/service-accounts/) and `op://`\n\nsecret references, the same format you already use in CI/CD pipelines and `.env`\n\nfiles. Setup takes three steps:\n\n- Create a Service Account in 1Password with read access to the vaults your agents need, and paste its token into the OneCLI dashboard (Secrets page, 1Password card). OneCLI validates the token and stores it encrypted with AES-256-GCM. The plain-text token is never written to disk.\n- Map each API hostname to the\n`op://`\n\nreference for its secret, in the dashboard or via the API:\n\n```\ncurl -X PUT http://localhost:10254/api/vault/onepassword/mappings \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"hostname\": \"api.github.com\", \"op_ref\": \"op://Dev Tokens/GitHub/token\"}'\ncurl -X PUT http://localhost:10254/api/vault/onepassword/mappings \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\"hostname\": \"api.github.com\", \"op_ref\": \"op://Dev Tokens/GitHub/token\"}'\n```\n\n- Point your agent at the gateway. When a request hits a mapped hostname, OneCLI resolves the reference through the official 1Password SDK and injects the value as an HTTP header on the way out. Resolved values live in memory for 60 seconds and are never written to the database.\n\nEvery proxied call gets the same treatment as any other OneCLI request: [network-layer injection](/blog/why-we-built-onecli), policy checks, rate limits, and a full audit trail. The full setup is in the [1Password vault guide](/docs/vaults/1password).\n\n## What users get\n\n- Credentials stay in 1Password's encrypted vault and are resolved at request time. Agents hold placeholders, never real values.\n- Your existing\n`op://`\n\nreferences work as-is. No new naming conventions to learn. - Per-request injection at the network layer, so it works with any agent framework that makes HTTP calls.\n- Runtime policy enforcement on every proxied request: allow, block, approve, and rate limit.\n- Audit trail on both sides: access in 1Password, usage in OneCLI.\n\n## Get it\n\nThe integration is in beta and available today.\n\n- 1Password Marketplace listing:\n[marketplace.1password.com/integration/onecli](https://marketplace.1password.com/integration/onecli) - Setup guide:\n[onecli.sh/docs/vaults/1password](/docs/vaults/1password) - OneCLI:\n[github.com/onecli/onecli](https://github.com/onecli/onecli)\n\nThis is the second password manager to plug into OneCLI Agent Vault, after [Bitwarden](/blog/bitwarden-agent-access-sdk-onecli). Same promise in both cases: your agents get the access they need, and they never hold a secret.", "url": "https://wpnews.pro/news/onecli-is-live-on-the-1password-marketplace", "canonical_source": "https://onecli.sh/blog/onecli-1password-marketplace", "published_at": "2026-07-21 01:01:29+00:00", "updated_at": "2026-07-21 01:23:12.855683+00:00", "lang": "en", "topics": ["ai-agents", "developer-tools", "ai-safety"], "entities": ["OneCLI", "1Password", "1Password Marketplace", "Jonathan Fishner"], "alternates": {"html": "https://wpnews.pro/news/onecli-is-live-on-the-1password-marketplace", "markdown": "https://wpnews.pro/news/onecli-is-live-on-the-1password-marketplace.md", "text": "https://wpnews.pro/news/onecli-is-live-on-the-1password-marketplace.txt", "jsonld": "https://wpnews.pro/news/onecli-is-live-on-the-1password-marketplace.jsonld"}}