offprompt vs 1Password

Q: Does offprompt stop the agent reading the file it writes?

No. offprompt writes the key to .env.local, which is on disk, and it does not watch what the agent reads. Every result tells the agent not to open the file and lists the keys it holds. To enforce it, close the agent’s file tools to the file with a deny rule in Claude Code or .cursorignore in Cursor. 1Password’s op run makes a different trade: it injects the value into a process and does not write a file at all.

1Password keeps your team's secrets in a vault you already trust, and its developer tools read them in place: op run injects secret references into a command as environment variables, and op inject renders them into a file, without hardcoding a value. offprompt is for the step before a secret has a home: a coding agent hits a task that needs a key the project does not have, and instead of asking for it in the chat, it asks offprompt, which opens a page in your browser for you to type the key.

They answer different problems, and they work together.

At a glance

Question	offprompt	1Password
What it is	An MCP server the agent calls to ask you for a value it lacks, which it writes into the project	A password and secrets manager: a vault your team keeps, with a CLI, SDKs and an MCP server for developers
How a value gets in	You type or paste it on a page served from `127.0.0.1`. The agent never handles it	You save it in a 1Password vault, in the app or the CLI. A new value does not come from the task at hand
Where values live	In the project's `.env`, `.env.local` or another file the agent names	In a 1Password vault. `op run` and `op inject` resolve `op://` references without hardcoding the value
How code reads a value	From the file, as `process.env.NAME`	`op run -- <cmd>` injects secret references as env vars for the subprocess only; `op inject` renders a template
Keeps a value out of the agent's context	Yes. Results carry the key names, the file and a four-emoji fingerprint, never values	Its Environments MCP server "never returns the actual secret values stored in your Environments"
From a cloud sandbox	Yes. A link through a Cloudflare quick tunnel, with values encrypted in your browser to a key only the sandbox holds	Its Environments MCP server is local to the desktop app; remote-only MCP clients aren't supported yet
An agent using a key it never sees	The value never reaches the agent in the first place	1Password for NVIDIA OpenShell (beta) gives the agent placeholders and swaps in the real values at a gateway
Account needed	None	A 1Password subscription, and the desktop app for Environments
License and price	MIT, free	A paid 1Password subscription. Its Claude Code plugin is MIT

What each tool's own docs say, as of 9 November 2026. “Not documented” means its docs do not say.

What 1Password is best at

1Password is a vault for secrets a team already has, and a set of developer tools to read them without copying the value around. You reference a secret by an op://vault/item/field path, and the op CLI resolves it: op run -- <command> runs a command with the secrets available as environment variables for that subprocess only, masking them in output by default, and op inject renders a template or .env from those references.

Around that sit Service Accounts and Connect for automation, SDKs for Go, JavaScript and Python, and the newer 1Password Environments with its own MCP server. If your team keeps its secrets in 1Password and wants to use them from code without them touching disk, that is what these tools are for.

When to pick 1Password

Reach for 1Password, not offprompt, when:

a team already keeps its secrets in 1Password and shares them from there;
you want secrets injected into a process at runtime, never written to disk;
you want to reference secrets by path in config and code, not hold their values;
you need Service Accounts or Connect for CI and automation.

offprompt does none of these. It stores nothing and shares nothing; it writes one value you hold into a file, once.

Where offprompt fits

offprompt covers the key that is not in any vault yet, the moment a coding agent would otherwise ask for it in the chat. The agent calls collect_secret with the key's name, why it needs it and the file it goes in; offprompt opens its page on 127.0.0.1, you type the key, and it writes the file and answers the agent with the key's name and a four-emoji fingerprint. The value is never in a prompt, a tool argument or a tool result. Because it needs no account, it also works where no one has signed in to 1Password yet, and from a cloud sandbox it passes you a link through a Cloudflare quick tunnel, with the value encrypted in your browser to a key only the sandbox holds, whereas 1Password's Environments MCP server runs locally in the desktop app and does not yet support remote-only clients.

Its limit is plain: offprompt writes the key to .env.local, and it does not stop an agent that can read files from opening it. Every result tells the agent not to and lists the keys the file holds; to be sure, close the agent's file tools to it with a deny rule in Claude Code or .cursorignore in Cursor. 1Password's op run makes a different trade, injecting the value into a process rather than writing a file.

Using them together

Capture a new key with offprompt so its value never touches the chat, then save it in a 1Password vault to share and rotate it. Or start from 1Password and bring what you already keep to the agent's project:

On your laptop

op inject -i .env.tpl -o /tmp/secrets.env
# drop /tmp/secrets.env on offprompt's page, then delete it; it takes only the keys the agent asked for

offprompt's page reads that file and keeps only the keys the agent requested, so a sandbox holds no 1Password credential. See Values you already keep. For how offprompt lines up against 1Password's Environments MCP server in particular, next to Infisical's, read offprompt vs 1Password Environments MCP vs Infisical MCP.

Sources

What 1Password's own docs say, as of 9 November 2026.

Something here out of date? Open an issue on GitHub.

FAQ

Is offprompt an alternative to 1Password?

No. 1Password is where a team keeps its secrets, a vault with a CLI, SDKs and apps to read them. offprompt keeps no vault. It is for the moment a task needs a key the project does not have yet: the agent asks for it by name, you type it on a page in your browser, offprompt writes it to the file, and the agent learns only that the key exists. Once a key exists, 1Password is a good place to keep it.

Does 1Password keep secret values out of a coding agent's context?

Its Environments MCP server is built to: its docs say it “never returns the actual secret values stored in your Environments,” even if an agent asks, and its Claude Code plugin says the agent sees secret names and mount paths, not contents. For an agent to use a key without seeing it, 1Password for NVIDIA OpenShell (beta) gives the agent placeholders and swaps in the real values at a gateway outside the sandbox. offprompt answers a narrower question: when the value is not in 1Password yet, it gets it from you into the file without the agent handling it at all.

Can I use offprompt and 1Password together?

Yes. Capture a new key with offprompt so its value never enters the chat, then save it in a 1Password vault to share and rotate it. The other way, op inject or op run resolves the secrets you already keep into a file on your laptop, which you drop on offprompt’s page; offprompt keeps only the keys the agent asked for, so a sandbox never holds a 1Password credential.

Why would I use offprompt if my team is on 1Password?

For the key that is not in 1Password yet. When you are building with a coding agent and it needs a key you just created at a provider, saving it to a vault first is a detour, and pasting it into the chat exposes it. offprompt is the short path: the agent asks, you type the key, it lands in .env.local, and the value never touches the conversation. Later, move it into 1Password for the team. offprompt needs no account, so it also works where no one has signed in to 1Password yet.

Does offprompt stop the agent reading the file it writes?

No. offprompt writes the key to .env.local, which is on disk, and it does not watch what the agent reads. Every result tells the agent not to open the file and lists the keys it holds. To enforce it, close the agent’s file tools to the file with a deny rule in Claude Code or .cursorignore in Cursor. 1Password’s op run makes a different trade: it injects the value into a process and does not write a file at all.

Try it

In a project's folder, run the command below, then ask the agent for something that needs a key. The agent calls offprompt when it reaches the step that needs one.

$npx offprompt init

Other comparisons

offprompt vs HashiCorp VaultVault is identity-based secrets infrastructure that issues short-lived credentials to services. offprompt is the small step before that: getting a key a coding agent needs into the project without the chat.
offprompt vs DopplerDoppler is a hosted secrets manager that syncs one source of truth to every environment and injects it with doppler run. offprompt captures a new key an agent needs without the value reaching the chat.
offprompt vs InfisicalInfisical is an open-source secrets platform with a dashboard, a CLI and an MCP server. offprompt keeps no store; it gets a key the agent lacks into the project’s file without the value entering the chat.

Or the three-way look at the MCP servers: offprompt vs 1Password Environments MCP vs Infisical MCP.