STACK CHECK DOCS PRICING GET STARTED

// MCP SERVER RECORD

Mcp 1password

Unverified

REPOkefapps/onepassword-mcp-codex

FRisk gradecritical blast radius

Catalogue entry updated 7 days ago

Auth postureNot probedno remote endpoint probed yet

Tools295 Destructive · 3 Execute · 10 Write · 11 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 5Execute 3Write 10Read 11

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 29

item_archiveDestructiveHigh item_deleteDestructiveHigh op_session_resetDestructiveHigh vault_deleteDestructiveHigh vault_permissions_revoke_groupDestructiveHigh

View all 29 tools

op_script_reload_allowlistsExecuteMedium op_script_runExecuteHigh op_unrestricted_runExecuteCritical item_createWriteHigh item_updateWriteHigh password_createWriteHigh password_generateWriteMedium password_generate_memorableWriteHigh password_updateWriteHigh vault_createWriteMedium vault_permissions_grant_groupWriteHigh vault_permissions_update_groupWriteHigh vault_updateWriteMedium environment_get_variableReadLow environment_get_variablesReadLow group_getReadLow item_get_metadataReadLow item_searchReadLow op_script_listReadLow op_session_statusReadLow sdk_capabilitiesReadLow vault_getReadLow vault_listReadLow vault_permissions_getReadMedium

Change history

No changes recorded since first scan. Watched servers surface a diff within the hour.

Recommended policy

item_archivedeny

op_script_reload_allowlistsrequire approval

item_createrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →