PkgFoundry
Catalog npm
Back to packageRELEASE DETAILS

0.2.0

npm

2password

1Password for coding agents: find, use, and save secrets without exposing them.

1passwordagentscliopsecretsskill
Published4 Oct 2026
Direct dependencies8
Transitive dependenciesNot calculated

README

Current package documentation

2password

1Password for coding agents. Your agent finds, uses, and saves secrets without ever seeing them, and asks you to approve far less often.

Install

Requires Bun and the 1Password CLI.

bun add -g 2password                  # the CLI
bunx skills add kitlangton/2password  # teaches your agent to use it

Use

2password find openai stripe        # returns op:// references, never values
2password run --env "OPENAI_API_KEY=op://Personal/OpenAI API Key/credential" -- bun dev
2password env run .env.tpl -- bun dev
2password create api-credential --title "OpenAI API Key" --vault Personal --clipboard

Run 2password --help to see all commands.

Fewer prompts

  • One prompt per command. find with many queries and env files with many references each need a single 1Password approval.

  • No prompts at all. Give your agent its own vault and a service account whose token lives in macOS Keychain, or on Windows in a file encrypted for your user (DPAPI):

    2password service-account setup --vault Automation --create-vault --write --save-vault Personal

Safety

  • Only read and env resolve intentionally return or materialize a secret from 2password.
  • run and env run inject plaintext into the selected child process. 2password does not print the value, but the child can; only use them with commands you trust with that credential.
  • New secrets come in through the clipboard or a pipe, never as arguments. Every write is read back and checked.
  • Writes are never retried automatically.

MIT

Downloads & popularity

Awaiting observations

No metric observations yet

Download counts and popularity will appear here as the collector receives them.

Declared dependencies 8

Native requirements
8 direct targetsNot calculated transitive count
Package / targetRequirementRelationship
effect
Environment
{
  "local_name": "effect",
  "alias": false,
  "peer_metadata": null
}
^4.0.0runtime
@effect/platform-bun
Environment
{
  "local_name": "@effect/platform-bun",
  "alias": false,
  "peer_metadata": null
}
^4.0.0runtime
oxfmt
Environment
{
  "local_name": "oxfmt",
  "alias": false,
  "peer_metadata": null
}
^0.71.0development
oxlint
Environment
{
  "local_name": "oxlint",
  "alias": false,
  "peer_metadata": null
}
^1.86.0development
vitest
Environment
{
  "local_name": "vitest",
  "alias": false,
  "peer_metadata": null
}
^4.1.6development
@types/bun
Environment
{
  "local_name": "@types/bun",
  "alias": false,
  "peer_metadata": null
}
^1.3.14development
typescript
Environment
{
  "local_name": "typescript",
  "alias": false,
  "peer_metadata": null
}
6.0.3development
@effect/vitest
Environment
{
  "local_name": "@effect/vitest",
  "alias": false,
  "peer_metadata": null
}
^4.0.0development

Distribution files

1 collected
Distribution 1

Source distribution

Source file
Checksums from source
{
  "shasum": "0529ea6f96ec3e041c906b479001724fc01e0e5b",
  "tarball": "https://registry.npmjs.org/2password/-/2password-0.2.0.tgz",
  "fileCount": 18,
  "integrity": "sha512-sJLouiOWkSVIe4R717WdhEjmFp9EmXWpsb1znF+OlBPW3cUvJ1u02sIgFmVSXfnqKVOMgfiI+xVEug8vzJ/xDw==",
  "signatures": [
    {
      "sig": "MEUCIHxWLcoN0wIvnV6FUXrzwP74i/3lI45qZy4IR/p3os0lAiEAsPL5HVEVZu5EdR9Mj3pqL4vj7k/PtsTd3x/pKwD0/D4=",
      "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
    },
    {
      "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
      "sig": "MEQCIAVr8Gt006PVRE8sYEI8wRqGF9uHEQoI99JVcYZsx3sGAiBygDG/e0m/00GnkOClZOJxVtKmTNi2PqTj2Q0HV7vt0A=="
    }
  ],
  "attestations": {
    "url": "https://registry.npmjs.org/-/npm/v1/attestations/2password@0.2.0",
    "provenance": {
      "predicateType": "https://slsa.dev/provenance/v1"
    }
  },
  "unpackedSize": 77609
}

Repository

PENDING
kitlangton/2password

Shared repository data · GitHub

License detected in repository
Not collected

Metadata history

Meaningful changes
Current collected state Current

Observed since 20 Oct, 19:17 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package_version:bfd76fcc0eccdcc60e30d50d8378b326afdfe0233bc9f2b96cc15d9d0f838aa7

Other collected versions

0.1.13 Oct0.1.03 Oct0.0.0-stage3 OctView all collected versions →