onepassword-sdk
The 1Password Python SDK offers programmatic read access to your secrets in 1Password in an interface native to Python.
Decision gist · record as of 2026-08-14
Yes. The SDK is actively maintained, production-ready, MIT-licensed, and carries no known vulnerabilities. Install friction is moderate but reasonable for a compiled package with broad platform support. Use it if you need programmatic access to 1Password secrets in Python; the async API and dual authentication modes make it suitable for both interactive and automated workflows.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires libssl 3 and glibc 2.32 or later; Python 3.9 or later; 1Password desktop app or service account token for authentication.
- Medium install friction due to compiled wheels for multiple Python versions and platforms, but well-maintained with active development (latest release 15 days ago) and no known vulnerabilities.
License · maintenance · safety
MIT (permissive) — MIT license permits commercial and private use with minimal restrictions; you must include the license text in distributions.
last release 2026-07-30 (15 days) · last repo commit 2026-08-12 · 184 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 2,226,065 downloads/mo, #3,199 on PyPI
Alternatives
Verify before relying
pip install onepassword-sdk
import asyncio
from onepassword.client import Client
async def main():
client = await Client.authenticate(
auth="your-service-account-token",
integration_name="My App",
integration_version="v1.0.0"
)
secret = await client.secrets.resolve("op://vault/item/field")
asyncio.run(main())- Whether pydantic is used for request/response validation or only as a transitive dependency.
- Performance characteristics and rate limits when resolving large numbers of secrets.
- Stability guarantees for the beta Environments management feature.
What it is and what it does
The 1Password Python SDK is an async client library that connects your Python applications to 1Password's vault infrastructure. It supports two authentication modes: local authorization via the 1Password desktop app (best for interactive workflows requiring human approval) and automated service account tokens (best for CI/CD and backend integrations). The SDK lets you retrieve, create, update, delete, and list secrets, items, and vaults, with support for multiple field types including API keys, passwords, SSH keys, one-time passwords, and file attachments.
The package is built on pydantic for data validation and ships as compiled wheels for Python 3.9–3.13 across macOS, Windows, and Linux. It requires libssl 3 and glibc 2.32 or later on Linux systems. The SDK is actively maintained, recently released, and carries no known security vulnerabilities. It's positioned for production use in applications that need to integrate 1Password as a centralized secret store.
Use it for
- Retrieve database credentials or API keys from 1Password during application startup without hardcoding secrets.
- Automate secret rotation or provisioning workflows by creating and updating items programmatically via service account.
- Build CI/CD pipeline integrations that fetch deployment credentials from 1Password vaults.
- Manage SSH keys and certificates stored in 1Password for infrastructure automation tools.
- Implement local development tools that prompt for 1Password desktop app approval before accessing sensitive data.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
The SDK is actively maintained, production-ready, MIT-licensed, and carries no known vulnerabilities. Install friction is moderate but reasonable for a compiled package with broad platform support. Use it if you need programmatic access to 1Password secrets in Python; the async API and dual authentication modes make it suitable for both interactive and automated workflows.
Install
onepassword-sdk on PyPI
Before you install
Medium install friction due to compiled wheels for multiple Python versions and platforms, but well-maintained with active development (latest release 15 days ago) and no known vulnerabilities.
Requires libssl 3 and glibc 2.32 or later; Python 3.9 or later; 1Password desktop app or service account token for authentication.
License in practice
MIT license permits commercial and private use with minimal restrictions; you must include the license text in distributions.
Quickstart
pip install onepassword-sdk
import asyncio
from onepassword.client import Client
async def main():
client = await Client.authenticate(
auth="your-service-account-token",
integration_name="My App",
integration_version="v1.0.0"
)
secret = await client.secrets.resolve("op://vault/item/field")
asyncio.run(main())Verify before relying
- Whether pydantic is used for request/response validation or only as a transitive dependency.
- Performance characteristics and rate limits when resolving large numbers of secrets.
- Stability guarantees for the beta Environments management feature.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release >=3.9 |
| Install friction | Medium. Platform-specific wheel |
| Runtime dependencies | 1 packagepydantic |
| Maintenance | Actively maintained 15 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 2,226,065 / month, #3,199 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableLicense :: OSI Approved :: MIT LicenseOperating System :: MacOSOperating System :: Microsoft :: WindowsOperating System :: POSIX :: LinuxProgramming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.9 |
Evidence: onepassword_sdk-0.4.1-cp310-cp310-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp310-cp310-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp310-cp310-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp310-cp310-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp310-cp310-win_amd64.whl; onepassword_sdk-0.4.1-cp311-cp311-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp311-cp311-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp311-cp311-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp311-cp311-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp311-cp311-win_amd64.whl; onepassword_sdk-0.4.1-cp312-cp312-macosx_10_9_x86_64.whl; onepassword_sdk-0.4.1-cp312-cp312-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp312-cp312-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp312-cp312-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp312-cp312-win_amd64.whl; onepassword_sdk-0.4.1-cp313-cp313-macosx_10_13_x86_64.whl; onepassword_sdk-0.4.1-cp313-cp313-macosx_11_0_arm64.whl; onepassword_sdk-0.4.1-cp313-cp313-manylinux_2_32_aarch64.whl; onepassword_sdk-0.4.1-cp313-cp313-manylinux_2_32_x86_64.whl; onepassword_sdk-0.4.1-cp313-cp313-win_amd64.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “1password secret management”
- onepassword-sdkProgrammatic Python interface to read and manage secrets, items, and…
- onepasswordconnectsdkProvides Python access to 1Password vaults through a self-hosted…
- onepasswordWrapper around the 1Password CLI that lets you query and retrieve…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also bitwarden-sdk · onepassword · onepasswordconnectsdk · skyflow · azure-keyvault-secrets · conjur-client · infisical-python · robocorp-vault · python-tss-sdk · saltext.vault