MCP REGISTRY FOR AGENTS DOCS PRICING CONTROL YOUR AGENTS

// MCP SERVER RECORD

1pass

Unverified

NPM@1pass/mcp

FRisk gradecritical blast radius

Catalogue entry updated 17 days ago

Auth postureNot probedno remote endpoint probed yet

Tools153 Destructive · 2 Write · 10 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 3Write 2Read 10

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.

Tools 15

logi_delete_login_logDestructiveHigh logi_delete_passkeyDestructiveHigh logi_remove_redirect_uriDestructiveHigh logi_add_redirect_uriWriteMedium logi_restore_login_logWriteMedium

View all 15 tools

logi_fetch_quickstartReadLow logi_get_docReadLow logi_list_appsReadLow logi_list_connected_appsReadLow logi_list_docsReadLow logi_list_login_historyReadLow logi_list_passkeysReadLow logi_list_trashed_logsReadLow logi_show_appReadLow logi_whoamiReadLow

These definitions cost 1,570 tokens of context →

Change history

No change history on record for this server.

Recommended policy

logi_delete_login_logdeny

logi_add_redirect_urirate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →

This record as markdown: /tools/1pass-mcp.md — append .md to any tool or server page.

// RUNNING THIS SERVER

DIRECT INSTALL npx -y @1pass/mcp

Installed this way, nothing enforces the recommended policy above — calls run exactly as the agent makes them.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →