---
schema_version: 1
route: /t/op.md
tool: "op"
---

# sincecutoff.com /t/op — 1Password CLI

- name: 1Password CLI
- kind: cli
- children: none
- homepage: <https://developer.1password.com/docs/cli>

Changes to the tools coding agents drive, since a model's training cutoff, each linked to its first-party source. Check installed versions and limitations before acting; a cutoff date does not establish what a model knows.
Original editorial content: [Apache 2.0](https://sincecutoff.com/v1/data-license.txt), by [0xPatrick](https://0xpatrick.dev). Preserve applicable license and [NOTICE](https://sincecutoff.com/notice.txt) attribution when redistributing. Third-party source text and examples retain their own rights. [License scope and attribution](https://sincecutoff.com/v1/license.json).
To stay current, read the changes feed: [`/v1/changes.md?tool=op`](https://sincecutoff.com/v1/changes.md?tool=op) (or `.json`), adding `since=YYYY-MM-DD` for your training cutoff. Entries for registered children are included; the registry itself is `/v1/tools.json`. How to page and save your place: [llms.txt](https://sincecutoff.com/llms.txt).

### op run loads 1Password Environments with --environment (2026-10-12)
- slug: op-run-loads-1password-environments-with-environment-9049fcfe80ed
- score: 0.98

How to use it:

When a repository script needs secrets from a 1Password Environment, run it with `op run --environment <environment-uuid> -- <script> [args...]` to provide the Environment’s variables for the subprocess. CLI 2.41.0 made this flag generally available; the release notes report network requests reduced from six to four.

Examples:

```
op run --environment <environment-uuid> -- <script> [args...]
```

- why_it_matters: Run a repository script that needs secrets from a 1Password Environment.
- sources: <https://app-updates.agilebits.com/product_history/CLI2#v2410001>, <https://www.1password.dev/cli/reference/commands/run>, <https://www.1password.dev/cli/secrets-scripts>
- gotchas: "Version: 2.41.0"; "Availability: generally available"; "--environment <environment-uuid> (required): Loads variables from a 1Password Environment by ID. Repeatable; if variables collide across Environments, the last specified takes precedence."; "<script> [args...] (required): Command and arguments to run in a subprocess with Environment variables available for the subprocess duration."; "-- (required): Separates `op run` options from the command to run; shown in the documented syntax and example."; "Prerequisite: Sign up for 1Password, install 1Password CLI, and store the needed secrets in your 1Password account."; "Prerequisite: Use the Environment ID; the docs describe finding it in the 1Password app under Developer > View Environments > View environment > Manage environment > Copy environment ID."

### 1Password Shell Plugins add GitHub Copilot CLI authentication (2026-07-10)
- slug: 1password-shell-plugins-add-github-copilot-cli-authentication-bb6b5368c9b7
- score: 0.93

How to use it:

When authenticating the GitHub Copilot CLI with a token stored in 1Password, initialize the Copilot shell plugin and run `copilot -p "explain this repo" -s`; the plugin provisions or imports `COPILOT_GITHUB_TOKEN`.

Examples:

```
op plugin init copilot
```

```
copilot -p "explain this repo" -s
```

- why_it_matters: Authenticate the GitHub Copilot CLI using a token stored in 1Password.
- sources: <https://app-updates.agilebits.com/product_history/CLI2#v2350001>, <https://github.com/1Password/shell-plugins/pull/603>, <https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-programmatic-reference>, <https://www.1password.dev/cli/shell-plugins>
- gotchas: "Version: 2.35.0"; "copilot (required): Plugin name passed to `op plugin init`."; "-p PROMPT (required): Runs the prompt in non-interactive mode; the CLI exits when done."; "-s: Suppresses stats and decoration, outputting only the response."; "COPILOT_GITHUB_TOKEN (required): Environment variable used by the plugin to provision or import the Copilot authentication token."; "Prerequisite: Shell Plugins support Bash, Zsh, and fish."; "Prerequisite: The CLI supports `COPILOT_GITHUB_TOKEN` as an authentication token."

### 1Password Shell Plugins add Kiro CLI API key authentication (2026-07-10)
- slug: 1password-shell-plugins-add-kiro-cli-api-key-authentication-bc4e6a1a5d6e
- score: 0.90

How to use it:

When you want to authenticate Kiro CLI with an API key stored in 1Password, initialize the Kiro Shell Plugin and run `kiro-cli whoami` to check the active authentication method.

Examples:

```
op plugin init kiro
```

```
kiro-cli whoami
```

- why_it_matters: Authenticate the Kiro CLI using an API key stored in 1Password.
- sources: <https://app-updates.agilebits.com/product_history/CLI2#v2350001>, <https://github.com/1Password/shell-plugins/pull/605>, <https://kiro.dev/docs/getting-started/authentication/>, <https://kiro.dev/docs/cli/>
- gotchas: "Version: 2.35.0"; "kiro (required): Plugin name passed to `op plugin init`; selects the Kiro Shell Plugin."; "Prerequisite: Create a Kiro API key; Kiro documents API key generation for Kiro Pro, Pro+, Pro Max, or Power accounts."; "Prerequisite: The Kiro CLI must be available. Its official CLI installation guide provides an install command."

### Redis CLI Shell Plugin supports environment variable provisioning (2026-07-10)
- slug: redis-cli-shell-plugin-supports-environment-variable-provisioning-4d8cebc3c746
- score: 0.90

How to use it:

When connecting to Redis with `redis-cli`, configure the Shell Plugin with the Redis password saved as a 1Password field item. Run `redis-cli -h <host> -p <port> PING`; the plugin provisions the password through `REDISCLI_AUTH` and supplies the host and port flags.

Examples:

```
op plugin init redis-cli
```

```
redis-cli -h <host> -p <port> PING
```

- why_it_matters: Connect to a Redis server from a coding workflow using credentials stored in 1Password.
- sources: <https://app-updates.agilebits.com/product_history/CLI2#v2350001>, <https://github.com/1Password/shell-plugins/pull/276>
- gotchas: "Version: 2.35.0"; "redis-cli -h <host> (required): Hostname flag; the plugin supplies a configured host flag when needed. Use the server hostname."; "redis-cli -p <port> (required): Port flag; the plugin supplies a configured port flag when needed. Use the server port."; "REDISCLI_AUTH (required): Redis CLI environment variable used by the plugin to provision the password."; "Prerequisite: Redis server with hostname, port, and password; save the password as a 1Password field item and configure the plugin with `op plugin init redis-cli`."; "A Redis server hostname, port, and password are required."