# 1pass MCP server Agent View of the PolicyLayer registry record for 1pass: identity, probed posture, risk grade, and all 15 tools classified. HTML page: https://policylayer.com/tools/1pass-mcp ## Facts - Server id: `@1pass/mcp` - Install: `npx -y @1pass/mcp` - Homepage: https://github.com/dcode-co/logi-plugins - Registry record: grade F, identity unverified - Lifecycle: active - Rate-limited: no - Tools: 15 (9 with introspected schema) - Tool categories present: Destructive, Read, Write - Context-window cost: 1570 tokens per request — https://policylayer.com/token-cost/1pass-mcp - Tags: 1pass mcp, admin - Record last modified: 2026-10-05T23:40:23.232Z ## Tools (15) | Tool | Category | Risk | Record | | --- | --- | --- | --- | | `logi_delete_login_log` | Destructive | Critical | https://policylayer.com/tools/1pass-mcp/logi-delete-login-log.md | | `logi_delete_passkey` | Destructive | Critical | https://policylayer.com/tools/1pass-mcp/logi-delete-passkey.md | | `logi_remove_redirect_uri` | Destructive | Critical | https://policylayer.com/tools/1pass-mcp/logi-remove-redirect-uri.md | | `logi_fetch_quickstart` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-fetch-quickstart.md | | `logi_get_doc` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-get-doc.md | | `logi_list_apps` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-apps.md | | `logi_list_connected_apps` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-connected-apps.md | | `logi_list_docs` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-docs.md | | `logi_list_login_history` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-login-history.md | | `logi_list_passkeys` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-passkeys.md | | `logi_list_trashed_logs` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-list-trashed-logs.md | | `logi_show_app` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-show-app.md | | `logi_whoami` | Read | Low | https://policylayer.com/tools/1pass-mcp/logi-whoami.md | | `logi_add_redirect_uri` | Write | Medium | https://policylayer.com/tools/1pass-mcp/logi-add-redirect-uri.md | | `logi_restore_login_log` | Write | Medium | https://policylayer.com/tools/1pass-mcp/logi-restore-login-log.md | ## Tool descriptions - `logi_delete_login_log` — Use when the user wants to remove a specific login record from view (e.g. 'delete that suspicious entry'). Soft-delete only — recoverable for 90 days. Requires the row id from logi_list_login_history. Do NOT use this to revoke a session … - `logi_delete_passkey` — Use when the user explicitly asks to remove a specific passkey (e.g. lost device, old laptop). Destructive and irreversible — confirm with the user before calling. Takes the passkey id from logi_list_passkeys. - `logi_remove_redirect_uri` — Use when the user (RP owner) wants to deregister an old/unused OAuth callback URL — for example a historical onrender.com host that's been migrated to a custom domain. Refuses to remove the last remaining URI (would disable OAuth entirel… - `logi_fetch_quickstart` — Use when the user (or an agent) needs the logi/1pass agent quickstart guide — typical triggers: 'logi 어떻게 통합해?', 'how do I integrate 1pass?', 'logi 시작 가이드', or before generating RP integration code. Read-only, no auth required (fetches p… - `logi_get_doc` — Use when the user asks about a specific logi/1pass topic (OAuth scopes, PKCE, redirect URI rules, CLI commands, security model, panopticon, agent approval, etc.) and you need the canonical doc text. Read-only, no auth required (fetches p… - `logi_list_apps` — Use when the user (as a developer) asks 'what OAuth apps do I own?', 'list my RPs', or needs the app id before adding/removing a redirect_uri. Read-only. Returns id, name, client_id, status, and current redirect_uris for every app the PA… - `logi_list_connected_apps` — Use when the user asks 'which apps can see my data?', 'what have I authorized?', or wants to revoke third-party access. Read-only. Returns OAuth applications with active consent + the specific claims (email, phone, etc.) shared with each… - `logi_list_docs` — Use when you (or the user) need to discover what logi/1pass docs exist — typically as a first step before logi_get_doc, or when the user asks 'what docs are available?'. Read-only, no auth required (fetches public docs.1pass.dev/llms.txt… - `logi_list_login_history` — Use when the user asks about recent sign-ins, suspicious access, login locations, or wants to audit account activity. Read-only. Returns the latest N (default 30, max 100) login events with country, IP, and a suspicious flag. Each row ca… - `logi_list_passkeys` — Use when the user wants to see their registered Passkeys (Face ID / Touch ID / hardware key) — typically before deleting a stale one or auditing devices. Read-only. Returns name, created_at, last_used_at per passkey. - `logi_list_trashed_logs` — Use when the user asks 'what did I delete?' or wants to review/restore previously soft-deleted login records. Read-only. Returns rows still within the 90-day grace window. Pair with logi_restore_login_log to undo. - `logi_show_app` — Use when the user wants the full RP record for one app (all fields: redirect_uris, app_link_url, allowed_scopes, client_type, webhook_url, status, etc.). Read-only. Takes the id from logi_list_apps. Requires PAK scope apps:read or apps:m… - `logi_whoami` — Use when the user asks 'am I logged in?', 'which logi account is this?', or whenever you need to verify the configured PAK is valid before another tool call. Read-only. Returns the email + scopes of the current PAK. Do NOT use to list lo… - `logi_add_redirect_uri` — Use when the user (RP owner) wants to register a new OAuth callback URL — for example after deploying to a new domain (easybracket.org), adding an iOS scheme, or staging environment. Idempotent: no-op if the URI is already registered. Se… - `logi_restore_login_log` — Use when the user wants to undo a deletion ('restore that log', 'I deleted the wrong one'). Takes an id from logi_list_trashed_logs. Idempotent — restoring an already-restored row is a no-op. ## Related servers - UnClick (1662 tools) — https://policylayer.com/tools/io-github-malamutemayhem-unclick-mcp-server.md - Apibase (1384 tools) — https://policylayer.com/tools/io-github-whiteknightonhorse-apibase.md - Delx Mcp A2a (1068 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md - MCP Framework Personal (912 tools) — https://policylayer.com/tools/inggerman-mcps.md - Hermoso (896 tools) — https://policylayer.com/tools/hermoso.md - Nodebench (824 tools) — https://policylayer.com/tools/io-github-homenshum-nodebench.md - Altium-MCP-Suite (817 tools) — https://policylayer.com/tools/altium-mcp-suite.md - Eda Agent (777 tools) — https://policylayer.com/tools/eda-agent.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=1pass-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/1pass-mcp