# Install 1password-cli with Homebrew Cask Command-line interface for 1Password. Version 2.35.0 via Homebrew Cask; verified 2026-07-13. Also installable with nix: nix profile install nixpkgs#_1password-cli. ## Install ```sh sudo av install cask:1password-cli ``` ## Agent safety answer 1password-cli brokers access to secrets and vault items from local workflows. - **Credential access:** Can read secrets, documents, and account metadata after authentication. - **Remote mutation:** Can edit vault items and service-account-backed secret state. - **Publish/artifact risk:** Can export or inject secrets into downstream release tools. - **Recommended control:** Gate item reads, exports, edits, and service-account token use. - **Agent-use guidance:** Allow metadata inspection only; require approval for secret reads or item mutations. Additional install commands: ### macOS - Homebrew Cask (100%): ```sh brew install --cask 1password-cli ``` Evidence: local Homebrew cask metadata ## Package facts - **Package key:** cask:1password-cli - **Package manager:** Homebrew Cask - **Package manager page:** - **Version:** 2.35.0 - **Source summary:** Command-line interface for 1Password - **Homepage:** - **Upstream docs:** - **Source archive:** - **Last updated:** 2026-07-13T16:16:01Z - **Generated:** 2026-07-25T07:20:51+00:00 ## Executables - op (binary) - op (alias) ## Install behavior - Post-install hook: not defined - Bottle: not available ## Freshness - Page generated: 2026-07-25 - Package-manager version: 2.35.0 - Package-manager updated: 2026-07-13 - Local data: ok - Upstream repository: https://developer.1password.com/docs/cli - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage 1Password CLI is the official op command for using 1Password from a terminal, scripts, and developer workflows. ### Project history The official get-started documentation describes 1Password CLI as bringing 1Password to the terminal, with installation paths for macOS, Windows, and Linux and integration with the desktop app for local authentication. 1Password's official CLI 2 release notes show an actively maintained product-history stream for the modern CLI, including package installer changes, desktop app integration fixes, shell plugin work, and Docker tag behavior after CLI 1 deprecation. ### Adoption history CLI adoption is tied to developer and operations workflows: Homebrew, winget, manual installs, Docker images, shell plugins, scripts, and desktop-app-backed authentication are all documented official distribution or usage paths. ### How it is used Users run op to sign in, manage vault items, retrieve secrets, automate scripts, and integrate 1Password with shell and development workflows. The configuration directory can be controlled with --config or OP_CONFIG_DIR, otherwise it follows documented XDG and legacy directory precedence. ### Why package nerds care For package maintainers, 1Password CLI is notable because the Homebrew cask wraps a proprietary vendor-distributed binary, while the install docs state the cask is maintained by both Homebrew and 1Password developers and downloads from AgileBits/1Password CDN domains. ### Timeline - 2020s: 1Password CLI 2 becomes the actively maintained CLI line documented by the official CLI2 release notes. - 2020s: Official install docs document Homebrew, winget, Linux package managers, manual downloads, and desktop app integration. - 2025: CLI 2 release notes mention Docker tag behavior following CLI 1 deprecation. ### Related projects - Related official surfaces include the 1Password desktop apps, 1Password Connect, shell plugins, Docker images, and the Homebrew Cask packaging repository. ### Sources - - - - ## Security Notes No matching local secret-handling manifest was found for 1password-cli. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ${XDG_CONFIG_HOME}/op, ~/.config/op, ~/.op, ${XDG_CONFIG_HOME}/.op ## Source Database Details - **Source Database:** Homebrew cask API - **Tap:** homebrew/cask - **Full Token:** 1password-cli - **Names:** 1Password CLI - **Conflicts With:** Cask: 1password-cli@1, 1password-cli@beta - **Artifacts:** Binary: 1, Generate Completions From Executable: 1, Target: 1, Zap: 1 - **Deprecated:** no - **Disabled:** no ## Other Package-Manager Records - Nix - _1password-cli: normalized package name match | nixpkgs package indexes: pkgs/by-name/_1/_1password-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - 1password-cli: normalized package name match | MacPorts ports tree: security/1password-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/1password-cli: normalized package name match | Scoop official bucket manifest trees: bucket/1password-cli.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - AgileBits.1Password.CLI: normalized package name match | Windows Package Manager source index: AgileBits.1Password.CLI from https://cdn.winget.microsoft.com/cache/source.msix - Chocolatey - op: installed executable or alias match | Chocolatey community package catalog: op from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','office365homepremium' ## Related links - [Homebrew Cask packages](https://www.automicvault.com/pkg/homebrew-cask-packages/) - Generated from Homebrew Cask package-manager metadata. - [Homebrew Cask binaries](https://www.automicvault.com/pkg/homebrew-cask-binaries/) - Cask artifact metadata includes a binary. ## Combined YAML source View the package source record on GitHub. [combined/1password-cli.yml](https://github.com/automic-vault/db/blob/main/combined/1password-cli.yml) ## Sources - Nucleus package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer