op-mcp 0.1.0

MCP server providing LLM access to 1Password CLI
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

//! Secret reading and injection tools for 1Password

use rust_mcp_schema::schema_utils::CallToolError;
use rust_mcp_schema::CallToolResult;
use rust_mcp_sdk::macros::{mcp_tool, JsonSchema};
use serde::{Deserialize, Serialize};

use crate::op::OpClient;
use crate::tools::{op_error_to_tool_error, text_result};

// ============================================================================
// secret_read Tool
// ============================================================================

/// Read a secret by its op:// reference.
#[mcp_tool(
    name = "secret_read",
    description = "Read a secret value using a 1Password secret reference (op:// URL). Format: op://vault/item/field or op://vault/item/section/field. Returns the raw secret value."
)]
#[derive(Debug, Deserialize, Serialize, JsonSchema)]
pub struct SecretReadTool {
    /// The secret reference in op:// format. Examples: "op://Personal/GitHub/password", "op://Work/AWS/Access Keys/access_key_id".
    pub reference: String,
}

impl SecretReadTool {
    pub async fn call(&self, client: &OpClient) -> Result<CallToolResult, CallToolError> {
        let result = client
            .read(&self.reference)
            .await
            .map_err(op_error_to_tool_error)?;
        text_result(result)
    }
}

// ============================================================================
// secret_inject Tool
// ============================================================================

/// Inject secrets into a template string.
#[mcp_tool(
    name = "secret_inject",
    description = "Inject 1Password secrets into a template string. Secret references in op:// format within the template will be replaced with their actual values. Useful for generating configuration files."
)]
#[derive(Debug, Deserialize, Serialize, JsonSchema)]
pub struct SecretInjectTool {
    /// The template string containing op:// references to replace. Example: 'DATABASE_URL=postgres://user:op://vault/db/password@localhost/mydb'
    pub template: String,
}

impl SecretInjectTool {
    pub async fn call(&self, client: &OpClient) -> Result<CallToolResult, CallToolError> {
        let result = client
            .inject(&self.template)
            .await
            .map_err(op_error_to_tool_error)?;
        text_result(result)
    }
}

// ============================================================================
// secret_run Tool
// ============================================================================

/// Run a command with secrets injected as environment variables.
#[mcp_tool(
    name = "secret_run",
    description = "Run a command with 1Password secrets injected as environment variables. Secret references (op://) in the environment or .env file will be replaced with actual values. Note: This executes a command on the system."
)]
#[derive(Debug, Deserialize, Serialize, JsonSchema)]
pub struct SecretRunTool {
    /// The command to run (will be executed in a shell).
    pub command: String,

    /// Environment variables to set, with op:// references. Format: ['VAR=op://vault/item/field', ...]
    #[serde(default)]
    pub env: Option<Vec<String>>,

    /// Path to a .env file containing secret references.
    #[serde(default)]
    pub env_file: Option<String>,

    /// If true, don't mask secrets in output (dangerous - use only when necessary).
    #[serde(default)]
    pub no_masking: bool,
}

impl SecretRunTool {
    pub async fn call(&self, client: &OpClient) -> Result<CallToolResult, CallToolError> {
        let env_refs: Option<Vec<&str>> = self
            .env
            .as_ref()
            .map(|e| e.iter().map(|s| s.as_str()).collect());

        let result = client
            .run(
                &self.command,
                env_refs.as_deref(),
                self.env_file.as_deref(),
                self.no_masking,
            )
            .await
            .map_err(op_error_to_tool_error)?;
        text_result(result)
    }
}