generated: '2026-06-20'
method: searched
source: https://www.1password.dev/cli/ + https://www.1password.dev/cli/reference/
name: op
description: >-
  The 1Password command-line tool (op) manages accounts, vaults, items, users, groups,
  service accounts, and Connect/Events API integrations, and injects secrets into processes
  and config files. Binary catalogued in packages/ (brew install 1password-cli).
install:
  - method: homebrew
    command: brew install 1password-cli
  - method: winget
    command: winget install AgileBits.1Password.CLI
  - method: apt
    note: Available via 1Password's apt repository (see docs).
  - docs: https://www.1password.dev/cli/get-started/
command_groups:
  - name: account
    purpose: Manage your locally configured 1Password accounts.
  - name: signin
    purpose: Sign in to a 1Password account.
  - name: signout
    purpose: Sign out of a 1Password account.
  - name: whoami
    purpose: Get information about a signed-in account.
  - name: vault
    purpose: Manage permissions and perform CRUD operations on your 1Password vaults.
  - name: item
    purpose: Perform CRUD operations on the 1Password items in your vaults.
  - name: document
    purpose: Perform CRUD operations on Document items in your vaults.
  - name: user
    purpose: Manage users within this 1Password account.
  - name: group
    purpose: Manage the groups in your 1Password account.
  - name: service-account
    purpose: Manage service accounts.
  - name: connect
    purpose: Manage Connect server instances and tokens in your 1Password account.
  - name: events-api
    purpose: Manage Events API integrations in your 1Password account.
  - name: environment
    purpose: Manage your 1Password Environments and their variables (Beta).
  - name: read
    purpose: Read a secret reference.
  - name: inject
    purpose: Inject secrets into a config file.
  - name: run
    purpose: Pass secrets as environment variables to a process.
  - name: plugin
    purpose: Manage the shell plugins you use to authenticate third-party CLIs.
  - name: update
    purpose: Check for and download updates.
  - name: completion
    purpose: Generate shell completion information.
key_flows:
  - Inject secrets into config files via secret references (op://vault/item/field) with `op inject`.
  - Run a process with secrets as env vars via `op run`.
  - Provision Connect servers and Events API integrations from the CLI.