---
title: "1Password integration for LuumenAI"
url: "https://www.luumen.ai/integrations/1password/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# 1Password integration for LuumenAI

Read vault items for context, and change credentials as an approved step

## What LuumenAI can do with 1Password

LuumenAI connects to 1Password with an API token and exposes 6 tools (3 read-only · 2 write · 1 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 6 tools (3 read-only · 2 write · 1 destructive)
- Plan: available on all plans
- Category: Identity & security

## About 1Password with LuumenAI

Connect 1Password and Luumen can look up the credential behind a runbook step without you switching windows. It lists vaults, lists items, and reads a specific item with its fields. When a secret needs to change after a rotation, Luumen writes the new value back to the same item and shows you the change first. Authentication is by API key.

## Example tools

Read-only (3 in total):

- `_1PASSWORD_GET_ITEM` — Retrieves a specific item from a vault, including all fields and secrets.
- `_1PASSWORD_LIST_ITEMS` — Lists all items in a given vault.
- `_1PASSWORD_LIST_VAULTS` — Lists all vaults the service account has access to.

Write and destructive (3 in total, approval required by default):

- `_1PASSWORD_CREATE_ITEM` — Creates a new item in a 1Password vault.
- `_1PASSWORD_DELETE_ITEM` — Permanently deletes an item from a 1Password vault.
- `_1PASSWORD_UPDATE_ITEM` — Updates an existing item's title or field values.

## Frequently asked questions

### How does LuumenAI connect to 1Password?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in 1Password on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 1 action classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to 1Password — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/1password/