The catalogue
1Password
CLI and service account token, checked at install time, so a project builds its env file from your vault.
- Module
- tool.1password
- Category
- Tools
What it installs
- The 1Password CLI from its own repository, and the service account token in the server’s environment file and in the dev shell, which is the only place op reads it.
- A check, at install time, that the token really opens a vault — rather than letting a project’s env file fail much later, far from the cause.
What it asks you for
- Nothing, once your 1Password account is connected. The service account token is given once, in the app, scoped to the vaults you want the server to read.
Good to know
Secrets stay in your vault. A project that carries an env template gets its file built from the vault when it starts; the server keeps no copy of the vault. Uninstalling takes back the CLI and the token, never a project’s environment file.