github TypeScript analyzed f582334

CakeRepository/1Password-MCP

github

1Password MCP server used for storing passwords create separate vault please

maintainer
CakeRepository
licence
Apache-2.0
first seen
2026-06-03
last seen
2026-08-31
releases · 30d
1
short id

CakeRepository/1Password-MCP is an MCP server distributed on github, maintained by CakeRepository, tracked here since June 2026. It has shipped 9 releases and exposes 15 tools. Tools include item_archive, item_delete, item_edit, item_get, item_list, item_lookup, and 9 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict. 1 known CVE on file.

what we found

1 advisory published against this server still applies to the version it ships, the most severe rated high, most recently 2026-09-01.

Its 15 tools appear to reach shell / exec and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 15
  • item_archive
  • item_delete
  • item_edit
  • item_get
  • item_list
  • item_lookup
  • note_create
  • op_check_ref
  • op_run
  • password_create
  • password_generate
  • password_generate_memorable
  • password_read
  • password_update
  • vault_list
release cadence · 90d 5 releases
06-18 00:00 08-01 00:00 now
recent releases last 9
version date src
v4.0.2 2026-08-31 github
v4.0.1 2026-07-30 github
v4.0.0 2026-07-30 github
v3.0.0 2026-07-30 github
v2.5.0 2026-07-04 github
v2.0.3 2026-02-06 github
v2.0.2 2026-02-06 github
v2.0.1 2026-02-06 github
v2.0.0 2026-02-06 github

view all →