Developer Tools & DevOps
Connect 1Password to Your AI Agents
Let your Wkil agents pull secrets securely at runtime and stream security events to your monitoring tools through 1Password.
Authentication: OAuth 2.0
What you can do
- Access and manage secrets from scripts and apps
- Stream security events to SIEM tools
- Automate user and billing provisioning
Available capabilities may vary by authentication and workspace configuration.
Actions supported by the connector
1Password CLI
Read and manage secrets securely from the command line.
1Password SDKs
Integrate 1Password secret access into an app using official SDKs.
Events API
Stream sign-in and item-usage events to a SIEM or analytics platform.
Users API
Look up, suspend, or reactivate users for security automation.
Partnership API
Manage provisioning of partner billing accounts programmatically.
Triggers
Secret Access
Fires when a secret is accessed programmatically at runtime.
Webhook for Events
Fires when a new security event is ready to be imported.
Practical agent use cases
- An agent pulls an API credential from a vault right before making a call, instead of storing it in plain text.
- An agent forwards new sign-in events to a security monitoring workflow.
How it works with Wkil
- 1Choose the integrationAdd 1Password to your agent from inside the Wkil platform.
- 2Grant the permissions it needsDefine precisely what the agent can access and perform.
- 3Test, then run itTest actions before they go live, with human approval where needed.
Permissions always stay in your control — you can scope access and require human approval before any sensitive action.
FAQ
Does this expose raw secrets in agent logs?
No — secrets are fetched at call time and scoped to the vault you authorize; they aren't meant to be logged in plain text.