Security 🧪 Community ✓ Claude Code ✓ Claude Desktop Standalone • 1password
1password
1Password Business - read-only audit events, shared-vault item usage, sign-in attempts and user inventory for offboarding and seat reviews (never vault contents)
Installation
Install this plugin individually:
/plugin marketplace add wyre-technology/msp-claude-plugins --plugin 1password Or install all MSP plugins at once:
/plugin marketplace add wyre-technology/msp-claude-plugins Features
- Account Hygiene
- Offboarding Review
- Signin Triage
Skills
This plugin provides 4 skills that teach Claude about 1password:
| Skill | Description |
|---|---|
account-hygiene | Periodic hygiene review of a client's 1Password account for QBRs and license true-ups: reconciling active and suspended seats against the client's headcount, finding long-suspended and never-used seats, and summarising the admin changes made during the review period (who was invited, who gained or lost group and vault access, who changed account settings). |
offboarding-review | How to review a departing or departed user's 1Password footprint with the read-only tools: confirm the seat is suspended, find every shared-vault item they used so the client can rotate it, catch sign-ins or item access after the departure date, and see who suspended them and when. |
signin-triage | Triage of 1Password sign-in attempts for one client account: pulling the sign-in feed over a window, grouping failures by user, category and country, separating password-guessing from MFA failures and firewall blocks, spotting successes from new countries after a run of failures, and deciding what is noise and what goes to the client. |
api-patterns | 1Password MCP fundamentals through Conduit: the region plus two independent credential halves (Events Reporting token, Users API client) and their X-OnePassword-* headers, which of the six read-only tools needs which half, which three are admin-gated in Conduit, cursor paging on the Events feeds, page-token paging on users, time windows and 120-day retention, rate limits, and how vendor errors come back. |
Agents
This plugin provides 1 agent for autonomous task execution:
| Agent | Description |
|---|---|
access-reviewer | Use this agent when an MSP technician or security lead needs a complete, read-only access review of one client's 1Password Business or Enterprise account. |
Commands
Available slash commands:
| Command | Description |
|---|
API Reference
| Base URL | |
| Authentication | |
| Rate Limit | |
| Documentation |
Example Usage
Using Skills
/skill 1password:account-hygiene
Periodic hygiene review of a client's 1Password account for QBRs and license true-ups: reconciling active and suspended seats against the client's headcount, finding long-suspended and never-used seats, and summarising the admin changes made during the review period (who was invited, who gained or lost group and vault access, who changed account settings).