onepassword-sdk

What it is and what it does

The 1Password Python SDK is an async client library that connects your Python applications to 1Password's vault infrastructure. It supports two authentication modes: local authorization via the 1Password desktop app (best for interactive workflows requiring human approval) and automated service account tokens (best for CI/CD and backend integrations). The SDK lets you retrieve, create, update, delete, and list secrets, items, and vaults, with support for multiple field types including API keys, passwords, SSH keys, one-time passwords, and file attachments.

The package is built on pydantic for data validation and ships as compiled wheels for Python 3.9–3.13 across macOS, Windows, and Linux. It requires libssl 3 and glibc 2.32 or later on Linux systems. The SDK is actively maintained, recently released, and carries no known security vulnerabilities. It's positioned for production use in applications that need to integrate 1Password as a centralized secret store.

Use it for:

• Retrieve database credentials or API keys from 1Password during application startup without hardcoding secrets.
• Automate secret rotation or provisioning workflows by creating and updating items programmatically via service account.
• Build CI/CD pipeline integrations that fetch deployment credentials from 1Password vaults.
• Manage SSH keys and certificates stored in 1Password for infrastructure automation tools.
• Implement local development tools that prompt for 1Password desktop app approval before accessing sensitive data.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Programmatic Python interface to read and manage secrets, items, and vaults in 1Password via local desktop app or service account authentication.

Yes. The SDK is actively maintained, production-ready, MIT-licensed, and carries no known vulnerabilities. Install friction is moderate but reasonable for a compiled package with broad platform support. Use it if you need programmatic access to 1Password secrets in Python; the async API and dual authentication modes make it suitable for both interactive and automated workflows.

Install

onepassword-sdk on PyPI

pip install onepassword-sdk

uv add onepassword-sdk

poetry add onepassword-sdk

Installing onepassword-sdk

Before you install

Medium install friction due to compiled wheels for multiple Python versions and platforms, but well-maintained with active development (latest release 15 days ago) and no known vulnerabilities.

License in practice

MIT license permits commercial and private use with minimal restrictions; you must include the license text in distributions.

Quickstart

pip install onepassword-sdk

import asyncio
from onepassword.client import Client

async def main():
    client = await Client.authenticate(
        auth="your-service-account-token",
        integration_name="My App",
        integration_version="v1.0.0"
    )
    secret = await client.secrets.resolve("op://vault/item/field")

asyncio.run(main())

Requires libssl 3 and glibc 2.32 or later; Python 3.9 or later; 1Password desktop app or service account token for authentication.

Verify before relying

• Whether pydantic is used for request/response validation or only as a transitive dependency.
• Performance characteristics and rate limits when resolving large numbers of secrets.
• Stability guarantees for the beta Environments management feature.

Package facts

Evidence: onepassword_sdk-0.4.1-cp310-cp310-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp310-cp310-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp310-cp310-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp310-cp310-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp310-cp310-win_amd64.whl; onepassword_sdk-0.4.1-cp311-cp311-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp311-cp311-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp311-cp311-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp311-cp311-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp311-cp311-win_amd64.whl; onepassword_sdk-0.4.1-cp312-cp312-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp312-cp312-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp312-cp312-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp312-cp312-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp312-cp312-win_amd64.whl; onepassword_sdk-0.4.1-cp313-cp313-macosx_10_13_x86_64.whl; onepassword_sdk-0.4.1-cp313-cp313-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp313-cp313-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp313-cp313-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp313-cp313-win_amd64.whl

Tags

More Security packages