Password Manager · Beta
1Password
API integration
Ship Password Manager features without building the integration. Full 1Password API access via Proxy, normalized data through Unified APIs, and 4 MCP-ready tools for AI agents — all extensible to your exact use case.
Built for specific customer use cases. Issues are resolved quickly.
Talk to usUse Cases
Why integrate with 1Password
Common scenarios for SaaS companies building 1Password integrations for their customers.
Automate Zero-Trust Offboarding
SaaS Management and IT automation platforms can instantly suspend departing employees' 1Password accounts the moment an offboarding workflow fires, cutting off access to shared vaults before credentials walk out the door.
Continuous Password Manager Compliance Monitoring
Compliance automation platforms can pull the full 1Password user roster on a schedule and cross-reference it against the HR directory to prove SOC 2 / ISO 27001 coverage and flag shadow IT in real time.
Contractor & Leave Lifecycle Management
HRIS and contractor management platforms can suspend 1Password access when contracts pause or employees go on leave, then reactivate the same account when they return — preserving private vault data without IT re-provisioning.
Identity Posture Verification
Identity governance tools can poll the live state of any 1Password user to confirm whether a specific employee is active or suspended, powering access reviews and audit evidence collection.
Unified Access Reviews Across the Stack
Access review platforms can include 1Password alongside other systems in a single quarterly review, using a normalized user object so reviewers don't have to context-switch between admin consoles.
What You Can Build
Ship these features with Truto + 1Password
Concrete product features your team can ship faster by leveraging Truto’s 1Password integration instead of building from scratch.
One-Click Offboarding Action
Ship a button in your offboarding flow that suspends a user's 1Password account instantly without deleting their vault history.
1Password Coverage Dashboard
Display a live list of all provisioned 1Password users mapped against your customer's employee directory to surface unlicensed or unenrolled staff.
Pause & Resume for Contractors
Let HR admins suspend and reactivate 1Password access tied to contract status changes, preserving the user's identity and private vault between engagements.
User Status Sync in Employee Profiles
Embed each employee's real-time 1Password account status (active/suspended) directly inside their profile page in your app.
Audit-Ready User Export
Generate a point-in-time export of all 1Password users for SOC 2 / ISO 27001 evidence with a single API call through Truto.
Automated Suspension Triggers
Wire 1Password suspension into your existing rules engine so events like 'employee terminated' or 'contract paused' instantly revoke vault access.
SuperAI
1Password AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_1_password_users
List users in a 1Password account. Returns a collection of user objects from the account. Supports an optional filter to narrow results.
get_single_1_password_user_by_id
Get a single 1Password user by id. Returns the full user object for the specified account. Required: id.
1_password_users_suspend
Suspend a 1Password user by id, preventing them from accessing the account. Required: id.
1_password_users_reactivate
Reactivate a previously suspended 1Password user by id, restoring their access to the account. Required: id.
Why Truto
Why use Truto’s MCP server for 1Password
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 500+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
Unified APIs
Unified APIs for 1Password
Skip writing code for every integration. Use Truto’s category-specific Unified APIs out of the box or customize the mappings with AI.
Unified User Directory API
Users
The User object represents a User.
How It Works
From zero to integrated
Go live with 1Password in under an hour. No boilerplate, no maintenance burden.
Link your customer’s 1Password account
Use Truto’s frontend SDK to connect your customer’s 1Password account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call 1Password
Truto’s Proxy API is a 1-to-1 mapping of the 1Password API. You call us, we call 1Password, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate 1Password’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about 1Password on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
What 1Password operations does Truto support out of the box?
Truto currently supports four 1Password operations: list all users, get a single user by ID, suspend a user, and reactivate a user. These cover the core identity lifecycle workflows for offboarding, compliance, and access verification.
How does authentication work for end customers connecting 1Password?
Truto handles the 1Password SCIM bridge / API token exchange on behalf of your users so you don't have to build or maintain the auth flow. Your end users connect their 1Password account through Truto's managed connection experience, and Truto manages token storage and refresh.
Can I map 1Password users to a unified schema across other identity providers?
Yes. 1Password is exposed through Truto's Unified User Directory API, so users from 1Password are normalized into the same schema as users from other connected identity sources, letting you build one integration surface instead of per-vendor logic.
Does suspending a user delete their vault data?
No. The suspend action locks the user out of their vaults but preserves their account state and private vault history, which is why it's safe to use for contractors on pause, employees on leave, or as a reversible offboarding step.
How fresh is the user data returned by list and get operations?
List and get-by-ID calls hit 1Password in real time through Truto, so the state returned reflects the live status of the user account at request time — appropriate for daily compliance scans as well as on-demand access reviews.
What if I need 1Password capabilities beyond users — like groups, vaults, or events?
The current Truto inventory for 1Password focuses on user lifecycle (list, get, suspend, reactivate). Additional resources such as groups, vault permissions, or event logs can be built on request — reach out to the Truto team to scope coverage for your use case.
From the Blog
1Password integration guides
Deep dives, architecture guides, and practical tutorials for building 1Password integrations.
1Password
Get 1Password integrated into your app
Our team understands what it takes to make a 1Password integration successful. A short, crisp 30 minute call with folks who understand the problem.
Talk to us