CakeRepository/1Password-MCP

github
github TypeScript analyzed 9287e77

1Password MCP server used for storing passwords create separate vault please

maintainer
CakeRepository
licence
Apache-2.0
first seen
2026-06-03
last seen
2026-10-04
releases · 30d
0
github stars
21 reported
short id

CakeRepository/1Password-MCP is an MCP server distributed on github, maintained by CakeRepository, tracked here since June 2026. It has shipped 9 releases and exposes 15 tools. Tools include item_archive, item_delete, item_edit, item_get, item_list, item_lookup, and 9 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict. 1 known CVE on file.

what we found

1 advisory published against this server still applies to the version it ships, the most severe rated high, most recently 2026-09-01.

Its 15 tools appear to reach shell / exec and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

15
  • item_archive
  • item_delete
  • item_edit
  • item_get
  • item_list
  • item_lookup
  • note_create
  • op_check_ref
  • op_run
  • password_create
  • password_generate
  • password_generate_memorable
  • password_read
  • password_update
  • vault_list

release cadence · 90d

4 releases
2026-07-19 2026-09-01 now

recent releases

last 9
version date src
v4.0.2 2026-08-31 github
v4.0.1 2026-07-30 github
v4.0.0 2026-07-30 github
v3.0.0 2026-07-30 github
v2.5.0 2026-07-04 github
v2.0.3 2026-02-06 github
v2.0.2 2026-02-06 github
v2.0.1 2026-02-06 github
v2.0.0 2026-02-06 github

view all →