1Password CLI

Use 1Password CLI safely for sign-in, secret references, env injection, and script-driven secret access without exposing secret material.

Standards snapshot (March 2026)

• Follow current 1Password CLI docs for exact command behavior instead of guessing flags or install steps.
• Prefer secret references, op run, and op inject over copying secrets into files or shell history.
• Treat app sign-in state, shell session state, and tmux session state as explicit prerequisites.
• Keep automation and human flows separate: use service accounts or Environments for unattended use, not ad hoc interactive login hacks.

When to use

• Setting up or validating 1Password CLI.
• Reading secrets through secret references.
• Injecting secrets into env files, templates, or scripts.
• Running commands with secrets via op run.