← Directory

1Password Connect

1Password Connect is a self-hosted service that exposes a REST API so applications, pipelines, and cloud infrastructure can securely retrieve 1Password vault…

  • Security
  • Tools & Utilities
1Password Connect is a self-hosted service that exposes a REST API so applications, pipelines, and cloud infrastructure can securely retrieve 1Password vault items without storing static credentials.

Platform availability

Available on 2 of 9 platforms

  • Unraid (not listed)
  • TrueNAS
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

61/100 Good

Maintained
81last commit 34 days ago
Popular
46191 GitHub stars
Easy to install
352 install platforms, install notes
Light to run
701 GB minimum RAM

Availability: platform listings confirmed today

GitHub stars
191
Open issues
14
Last commit
2026-09-08
Latest release
v1.5.3
License
MIT
Activity
stale

Checked 5 days ago - source: GitHub (1Password/connect-sdk-go)

Resources & Compatibility

Minimum requirements: 1 GB RAM, 1 CPU core(s).

Checked 4 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Install the Ansible Connect collection Run ansible-galaxy collection install onepassword.connect to install the Ansible collection (a package of automation tasks) for 1Password Connect. Without it, Ansible cannot run the onepassword.connect tasks. source
  • Point Ansible at your Connect server Set OP_CONNECT_HOST (the address of your 1Password Connect service) to a value like http://localhost:8001, and provide a JWT token (a secure access token). If these are missing or wrong, Ansible cannot find the service or prove it is allowed to use it. source
  • Keep the Connect JWT token hidden If your Ansible playbook includes the Connect JWT token, set no_log: true so the secret is not printed in Ansible output. This helps keep the token from being exposed in logs or screen output. source

Fetched 4 days ago - each note links to its source

Alternatives (12)

  • APIANT - APIANT offers Data Integration Software Solutions for Citizen Integrators, Integration Specialists, IT Managers, SaaS Companies and Enterpr…
  • AliasVault - AliasVault is an open-source password manager with built-in email aliases that helps protect your privacy by creating a unique digital iden…
  • Bitwarden - Open-source password manager with AES-256 encryption and device sync.
  • Dashlane - Password manager that can generate unique passwords and also record purchase history across websites.
  • KeePass - Free and open source password manager storing passwords in a local encrypted database with strong AES or Twofish encryption and master key…
  • KeePassDX - KeePassDX is a material design KeePass client for managing keys and passwords in an encrypted database for your Android device.
  • KeePassXC - KeePassXC is a free and open-source password manager for storing and managing your credentials in an encrypted local vault.
  • KeeWeb - Web and desktop password manager compatible with KeePass.
  • LastPass - Online encrypted password storage with password generation, dark web monitoring, and two-factor authentication.
  • Passbolt - Passbolt Community Edition (CE) API.
  • Passky Server - With Passky, you can easily and securely store all of your passwords in one place.
  • PearPass - Fully local, open-source password manager with end-to-end encryption, no cloud storage, peer-to-peer sync between devices, offline access,…

Checked today - source: AlternativeTo

Common questions

Do Connect servers hit request quotas for repeated secret reads?

Connect servers cache data in your infrastructure, so unlimited re-requests are allowed after the server fetches secrets. 1Password internal rate limits apply only when the server fetches secrets for the first time, such as at startup.

Does a Connect server store secrets locally after startup?

Yes, it caches your data in your infrastructure after fetching secrets. This cache allows repeated requests without going back to 1Password each time.

Can I use Connect with a custom HTTP integration instead of an SDK?

You can integrate a Connect server into your infrastructure and communicate with it over HTTP. You can use one of the Connect SDK libraries or use a custom integration.

Can CI/CD jobs avoid managing service account tokens?

The 1Password Credential Broker gives CI/CD and other machine workflows short-lived access to secrets. It is intended to avoid managing service account tokens.

Answers sourced from developer.1password.com

Community

Collected 8 days ago - public community threads