Skip to content

mcp-1password: v1.0.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Jul 13:35
mcp-1password-v1.0.0
fc537ed
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

1.0.0 (2026-07-06)

⚠ BREAKING CHANGES

  • tools: password_create and item_create are no longer registered MCP tools. Use item_request_create to create tracked placeholder items.

Features

  • connect: add short workspace trust cli (f517748)
  • connect: expose workspace command tools (b35bb0f)
  • connect: support local 1Password Connect backend (2c9f0e1)
  • script-runner: reload configured allowlists dynamically (3bced12)
  • script-runner: support dynamic allowlist manifests (5f3c982)
  • tools: add tracked secret request workflow (a9a31ba)
  • tools: require tracked item requests for creation (b37c6fe)
  • unrestricted-runner: require approval for free-form commands (cca70dc)

Bug Fixes

  • audit: sanitize non-enumerable and symbol-keyed properties (8f21c6a)
  • capabilities: report runtime-gated tools (bc79b4a)
  • connect: harden secret reference parsing (0b051d3)
  • connect: preserve document item categories (71c9dee)
  • connect: report only runtime workspace tools (3717847)
  • connect: suggest trust command for untrusted workspaces (2126c15)
  • connect: support field title secret references (c324f46)
  • connect: use public item delete API (410cc2f)
  • error: normalize MCP error serialization (39a7977)
  • errors: drop untrusted cause to prevent secret leakage (68d81b6)
  • http: bypass Host check on wildcard binds without allowlist (f5912ef)
  • http: validate Host header against listen address (b6e6863)
  • op-runner: redact secret values case-insensitively (330bc60)
  • review: address Connect and runner findings (47b92db)
  • script-runner: harden secret env validation (0855fe3)
  • script-runner: skip invalid manifest allowlists (4db9a87)
  • script-runner: withhold missing-ack output without rejecting runs (29b9bc9)
  • security: override audited transitive dependencies (c8c2528)
  • security: override vulnerable ip-address dependency (061a44c)
  • security: override vulnerable transitive packages (8aff450)
  • security: redact secret references case-insensitively (9dfdc66)
  • security: require acknowledgement for approval bypass (1e922ff)
  • security: share unrestricted approval manager defaults (5ed26cd)

Documentation

  • add public contribution and security policy (41f1996)
Assets 2
Loading