Expanding programmatic access to 1Password

Following a four-month beta, SDK‑based integrations can now authenticate programmatically through our desktop password manager using biometric or password prompts. This brings the same trusted, user-approved authentication flow developers rely on across 1Password’s local developer tools to native SDK-based integrations. Supporting user-authenticated access unlocks sensitive operations that were previously impossible to offer securely, including one of our most requested capabilities: vault management. With full vault management – including create, read, update, delete, and list functionalities – SDK-based integrations can now perform the same high-impact actions developers expect from our other developer tools. This includes managing vault permissions, which lets you programmatically grant and revoke access to vaults – something that wasn’t possible with service-account–based access.

We also heard from enterprise teams managing large numbers of vaults that performance at scale mattered. In response, we introduced batch item operations, reducing overhead and enabling faster, more efficient large-scale vault management. Together, these capabilities empower you to build entirely new classes of trusted, user-approved integrations and workflows. SDK integrations run with a user‑authenticated session, inheriting the same account access as the signed‑in user. Authorization is time‑bound and expires after 10 minutes of inactivity, or when 1Password locks.

This enables secure, human‑approved workflows and supports more advanced SDK use cases beyond item‑level automation, without relying on service accounts or introducing long-lived credentials.