Skip to main content

1Password Connect

When you use 1Password Connect server as part of a Secrets Automation workflow, you can securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.

Connect servers work well for when you need unlimited requests and self-hosted infrastructure. 1Password also maintains several SDK libraries for the Connect API so you can integrate with your existing applications.

info

Connect servers require vault access credits, which grant Connect server tokens access to the vaults where you store your secrets and determine the pricing tier.

Not sure if Connect servers are for you?
The Connect server is part of your environment, and communicates to Your Apps using access tokens and a REST API.The Connect server is part of your environment, and communicates to Your Apps using access tokens and a REST API.

Use cases

You can use 1Password Connect to accomplish a variety of tasks:

Availability

Reduce latency and downtime

Deploy a Connect server in your infrastructure, giving you complete control. Self-hosting also reduces latency and has security benefits, as only your services can interact with Connect.

You can also deploy redundant Connect servers to further increase availability.

Web services

Provision web services with secrets

Use a Connect server to provision an account with a secret stored in 1Password.

If a web service needs access to a database (and the credentials for the database are in 1Password), you can use a Connect server to provision an account with the needed secret and allow the web service to access the secret during test runs.

Secrets management

Automate secrets management

Use a Connect server to automate scripts to manage secrets.

Using a Connect server helps you implement the principle of least privilege and avoid the limitations of personal accounts (for example, SSO and MFA requirements).

CI/CD pipelines

Load secrets into CI/CD pipelines

Use a Connect server to automatically access your secrets in continuous integration environments.

You can use a Connect server to use 1Password items in your CI/CD pipeline for testing and deploying code. Doing so maintains security and avoids using sensitive information with a personal account.

Infrastructure secrets

Secure infrastructure secrets

Use a Connect server to make sure infrastructure secrets aren't tied to a personal user account.

Development workflows

Streamline development workflows

Use a Connect server to securely share and manage infrastructure secrets to streamline development workflows.

Integration

Secure Kubernetes environments

Use a Connect server to access and sync 1Password secrets in a Kubernetes environment.

Other key features of Connect servers include:

  • Unlimited requests. You have no request quotas or rate limits when using Connect, unlike service accounts.
  • Power of REST API. Because Connect is a REST API, you can integrate it into your infrastructure and communicate with it over HTTP using one of the Connect SDK libraries (such as Go, Python, or JavaScript) or using a custom integration.

Get started

Learn how to get started and how to create, manage, and integrate with Connect servers.

Get started

Was this page helpful?