{ "data": { "a": { "slug": "1password", "name": "1Password service accounts, SDKs and Environments MCP", "vendor": "1Password", "vendorUrl": "https://1password.com", "kind": "platform", "category": "secrets", "summary": "Password manager with a developer layer for agents.", "url": "https://www.anchorterminal.com/tools/1password", "markdownUrl": "https://www.anchorterminal.com/tools/1password.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/1password.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/1password.json", "repo": "https://github.com/1Password/onepassword-sdk-js", "license": "MIT", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "@1password/sdk" }, { "registry": "pypi", "name": "onepassword-sdk" } ], "auth": "mixed", "authNotes": "Service account tokens (`OP_SERVICE_ACCOUNT_TOKEN`) for unattended use, scoped to chosen vaults and Environments and unable to read Personal, Private or Employee vaults. The SDKs can instead prompt the 1Password desktop app, which approves each integration locally with biometrics. The Environments MCP server runs inside the desktop app and asks for approval per Environment until the app locks.", "pricing": "paid", "pricingNotes": "No free plan, a 14-day trial on every plan. Individual $3.99 a month ($2.99 promotional, billed yearly), Families $5.99 a month for up to 5 people ($4.49 promotional, billed yearly), Teams Starter Pack $24.95 a month for 10 members plus $4.99 a seat, Business $8.99 per user a month billed yearly. The personal pricing page lists 1Password Developer (SSH, Git commit signing, CLI and SDKs) on Individual and Families, and the business page lists the CLI and SDKs on Teams Starter Pack and Business. Service account rate limits are published for every plan. Unified Access, Privileged Access and the other enterprise products are quote only (https://1password.com/pricing/business, https://1password.com/pricing/password-manager).", "priceSummary": "$8.99 / seat-mo", "where": "local", "x402": { "level": "no", "endpoints": [] }, "toolCount": 8, "popularity": { "githubStars": 110, "npmWeekly": 1013526, "pypiWeekly": 816683, "asOf": "2026-09-30" }, "docsUrl": "https://www.1password.dev", "llmsTxt": "https://www.1password.dev/llms.txt", "openapi": "https://i.1password.com/media/1password-connect/1password-connect-api_1.8.1.yaml", "capabilities": [ "secrets.store", "secrets.machine-identity", "secrets.audit" ], "tags": [ "hosted", "closed-source", "card-required", "mcp", "local", "typescript", "python", "go", "enterprise", "eu" ], "lastRelease": "2026-07-31", "graded": true, "anchor": { "graded": true, "score": 69.9, "grade": "B", "agentReady": false, "rank": 104, "ranked": true, "rankOf": 452, "categoryRank": 6, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 72, "payments": 20, "reliability": 68, "schema": 74, "security": 94, "transparency": 89 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation. Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After.", "strengths": [ "Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation", "Environments MCP server with 8 tools that never returns a secret value and asks for approval per Environment", "Official Go, JavaScript and Python SDKs, MIT, with workload identity through the Credential Broker in JavaScript 0.5.0 (public preview)", "llms.txt for the developer docs and a public OpenAPI file for the self-hosted Connect server", "Signed security.txt, a HackerOne programme, SOC 2 Type II and ISO 27001 listed on the trust centre" ], "weaknesses": [ "Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After", "SDKs are version 0 with three months of patches per release, and 5 of the 8 newest Python SDK issues have no reply", "No SLA found, and the audit log and Events API need Business", "The MCP server is beta and needs the desktop app running and unlocked, so it's for a developer's machine, not a server", "No MCP registry entry and no way to create a service account without a signed-in person" ], "agentNotes": [ "Read secrets by reference (op://vault/item/field) with client.secrets.resolve or resolveAll, and keep the reference, not the value, in config", "On Teams or personal plans budget for 1,000 reads an hour per token and cache resolved values for the run; a 429 means wait for the hourly window, there's no Retry-After", "Create the service account with only read_items on one vault and --expires-in set to the job length, since permissions can't be narrowed later", "Set integrationName and integrationVersion in createClient so the usage report shows which agent read what", "Don't ask the Environments MCP server for a value. Use it to find the variable name, then load it with op run or the SDK" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.9 } ], "editorialScores": { "ergonomics": 69, "maintenance": 72, "payments": 20, "reliability": 68, "schema": 74, "security": 94, "transparency": 78 }, "provenanceScore": 100 }, "connect": { "install": "npm install @1password/sdk # or: pip install onepassword-sdk", "http": "export OP_SERVICE_ACCOUNT_TOKEN=\"$OP_SERVICE_ACCOUNT_TOKEN\"\nop read \"op://Production/Stripe/api_key\" # 1Password CLI, no REST endpoint for secret reads", "config": { "mcpServers": { "1password": { "args": [], "command": "1password-mcp" } } } }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/1password" }, "area": "agent-runtime", "unitPrices": [ { "item": "Business plan", "unit": "seat-month", "usd": 8.99, "note": "Billed yearly. Developer tools and SSO included" }, { "item": "Teams Starter Pack", "unit": "month", "usd": 24.95, "note": "10 members, $4.99 a month per extra seat" }, { "item": "Individual plan", "unit": "month", "usd": 3.99, "note": "$2.99 promotional, billed yearly" } ], "provenance": { "legalEntity": "AgileBits Inc. (doing business as 1Password)", "domain": "1password.com", "domainRegistered": "2003-11-30", "endpointOnVendorDomain": true, "terms": "https://1password.com/legal/terms-of-service", "privacy": "https://1password.com/legal/privacy", "statusPage": "https://status.1password.com", "changelog": "https://releases.1password.com/developers/sdks/", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "Terms name AgileBits Inc., 4711 Yonge Street, Toronto, governed by Ontario law, last updated 12 September 2024. The privacy notice is effective 29 December 2025.", "security.txt lists security@agilebits.com and a HackerOne programme and is signed, but has no Expires field.", "developer.1password.com now redirects to www.1password.dev.", "The status page history shows six incidents between 2 July and 9 September 2026, on Device Trust, SaaS Manager, personal account management and the CLI update server, none posted against service accounts or Connect." ], "score": 100 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/1password.json", "live": { "slug": "1password", "vendorStatus": { "page": "https://status.1password.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T03:18:55.035624416Z" }, "versions": [ { "registry": "github", "name": "1Password/onepassword-sdk-js", "version": "v0.5.0", "released": "2026-07-31", "seenAt": "2026-10-04T16:19:29.795045796Z" }, { "registry": "npm", "name": "@1password/sdk", "version": "0.5.0", "seenAt": "2026-10-04T16:19:27.453978185Z" }, { "registry": "pypi", "name": "onepassword-sdk", "version": "0.4.1", "released": "2026-07-30", "seenAt": "2026-10-04T16:19:28.470969321Z" } ], "githubStars": 110, "npmWeekly": 1144520, "pypiWeekly": 907992, "securityTxt": { "url": "https://1password.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-04T15:15:51.698169765Z" }, "llmsTxt": { "url": "https://www.1password.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:12.603904586Z" }, "domain": { "domain": "1password.com", "registered": "2003-11-30", "source": "https://rdap.verisign.com/com/v1/domain/1password.com", "checkedAt": "2026-10-04T13:03:36.930043964Z" }, "pages": [ { "url": "https://releases.1password.com/developers/sdks/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-04T15:47:15.347202499Z", "changedAt": "2026-10-03T15:35:15.432558355Z", "fingerprint": "70bd81831178" }, { "url": "https://1password.com/pricing/business", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:41:11.172504664Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c7410e7a546a" }, { "url": "https://1password.com/pricing/password-manager", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:41:13.479557667Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "20bf1ab35205" }, { "url": "https://1password.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:41:07.067811579Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "7a043d1fa57f" }, { "url": "https://1password.com/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:41:09.169984797Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "440d3b48cc3c" } ], "updatedAt": "2026-10-05T03:18:55.035624416Z" } }, "b": { "slug": "akeyless", "name": "Akeyless (SecretlessAI and MCP server)", "vendor": "Akeyless", "vendorUrl": "https://www.akeyless.io", "kind": "platform", "category": "secrets", "summary": "SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access.", "url": "https://www.anchorterminal.com/tools/akeyless", "markdownUrl": "https://www.anchorterminal.com/tools/akeyless.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/akeyless.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/akeyless.json", "repo": "https://github.com/akeylesslabs/akeyless-python", "license": "Apache-2.0 (SDKs), closed platform", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://api.akeyless.io", "packages": [ { "registry": "pypi", "name": "akeyless" }, { "registry": "npm", "name": "akeyless" } ], "auth": "mixed", "authNotes": "POST /auth with an access-id and a credential from an access key, AWS IAM, Azure AD, GCP, Kubernetes, OIDC, SAML, LDAP, JWT, certificate, OCI, Kerberos or Universal Identity, returning a token passed in the body of later calls. The docs say API key auth is for proofs of concept, not production, and the access key is shown once. The MCP servers reuse the CLI profile or explicit auth flags and inherit its RBAC.", "pricing": "freemium", "pricingNotes": "Free and Enterprise plans. The free plan has 5 clients, 500 static secrets, 5 dynamic secrets, 5 rotated secrets, 3 targets, 1 OIDC app, 1 SSH and 1 PKI certificate issuer, 5 managed certificates, 1,000 encryption and KMS transactions a day, 5 KMS keys, 5 password manager users with 5 static and 50 shared passwords, 1 Gateway cluster and 3 days of audit log retention, without SAML, OIDC or LDAP auth, zero-knowledge mode, HSM integration or event forwarding. Enterprise is quoted, with clients and transactions counted at the end of each month and overage billed at the end of the 12-month contract. No dollar figures are published (https://www.akeyless.io/pricing/).", "priceSummary": "Freemium", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 2, "npmWeekly": 3523, "pypiWeekly": 219234, "asOf": "2026-09-30" }, "docsUrl": "https://docs.akeyless.io", "llmsTxt": "https://docs.akeyless.io/llms.txt", "openapi": "https://github.com/akeylesslabs/akeyless-go/blob/v5/api/openapi.yaml", "capabilities": [ "secrets.store", "secrets.rotate", "secrets.machine-identity", "secrets.audit", "auth.agent-identity" ], "tags": [ "hosted", "closed-source", "freemium", "free-tier", "mcp", "local", "python", "typescript", "go", "enterprise" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 73.7, "grade": "BB", "agentReady": true, "rank": 55, "ranked": true, "rankOf": 452, "categoryRank": 4, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.", "strengths": [ "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials", "Runtime Authority intent rules with a kill switch, generally available since 9 September 2026", "SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS and FIPS 140-3 validation listed in the trust centre, plus a bug bounty", "A 99.99% availability SLA on every support tier, with transaction caps published per tier", "OpenAPI 3.0 document for 657 paths in the Go SDK repository, and an llms.txt with about 800 Markdown links" ], "weaknesses": [ "No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract", "Errors come back as a single `error` string with no code, and no Retry-After or backoff guidance turned up", "The free plan has no OIDC, SAML or LDAP auth and keeps audit logs for 3 days", "akeyless mcp can return secret values to the model, and neither MCP server has a published tool list, version or registry entry", "No security.txt, and the closed CLI and Gateway are the only way to run the MCP servers" ], "agentNotes": [ "Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password", "Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept", "Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL", "Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused", "Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.7 } ], "editorialScores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 71 }, "provenanceScore": 75 }, "connect": { "install": "pip install akeyless # or: npm i akeyless", "http": "TOKEN=$(curl -s -X POST https://api.akeyless.io/auth -H \"Content-Type: application/json\" \\\n -d \"{\\\"access-id\\\":\\\"$AKEYLESS_ACCESS_ID\\\",\\\"access-key\\\":\\\"$AKEYLESS_ACCESS_KEY\\\"}\" | jq -r .token)\ncurl -s -X POST https://api.akeyless.io/get-secret-value -H \"Content-Type: application/json\" \\\n -d \"{\\\"names\\\":[\\\"/prod/db-password\\\"],\\\"token\\\":\\\"$TOKEN\\\"}\"", "claudeCode": "claude mcp add akeyless -- akeyless mcp-runtime-authority", "config": { "mcpServers": { "akeyless": { "args": [ "mcp-runtime-authority" ], "command": "akeyless" } } } }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/akeyless" }, "area": "agent-runtime", "provenance": { "legalEntity": "Akeyless Security Ltd.", "domain": "akeyless.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.akeyless.io/terms-of-service/", "privacy": "https://www.akeyless.io/privacy-policy/", "statusPage": "https://status.akeyless.io", "changelog": "https://changelog.akeyless.io/cli", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "Website terms (21 March 2026) and privacy policy (5 May 2026) name Akeyless Security Ltd., Ze'ev Jabotinsky St. 7, Ramat Gan, Israel, with a US subsidiary Akeyless Security USA, Inc. The terms cover the website only; the service runs under a separate licence or master services agreement.", "www.akeyless.io/.well-known/security.txt returned 404 when checked on 30 September 2026.", "The .io RDAP servers answered 429 and a robots.txt failure, so the registration date is blank.", "The status page history shows one incident since 3 July 2026, 21 minutes of degraded dynamic secret performance in us-east-2 on 23 September, and a scheduled maintenance window on 19 July.", "The CLI changelog at changelog.akeyless.io dates each release, 1.152.0 on 16 September 2026 being the newest." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/akeyless.json", "live": { "slug": "akeyless", "probe": { "target": "https://api.akeyless.io", "method": "get", "lastAt": "2026-10-05T03:17:21.376943773Z", "lastOk": true, "lastStatus": 405, "lastMs": 45, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 49, "p95ms24h": 89, "samples24h": 273, "samples30d": 938, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 38, "ok": 38 } ] }, "vendorStatus": { "page": "https://status.akeyless.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T03:18:55.035626326Z" }, "versions": [ { "registry": "npm", "name": "akeyless", "version": "5.0.38", "seenAt": "2026-10-04T16:19:55.300496046Z" }, { "registry": "pypi", "name": "akeyless", "version": "5.0.38", "released": "2026-09-17", "seenAt": "2026-10-04T16:19:55.072572712Z" } ], "githubStars": 2, "npmWeekly": 3693, "pypiWeekly": 196221, "securityTxt": { "url": "https://akeyless.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:01.250724263Z" }, "llmsTxt": { "url": "https://docs.akeyless.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:12.971720694Z" }, "domain": { "domain": "akeyless.io", "checkedAt": "2026-10-04T13:09:25.717264008Z" }, "pages": [ { "url": "https://changelog.akeyless.io/cli", "kind": "changelog", "status": 304, "checkedAt": "2026-10-04T15:41:49.583946265Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a38aa48a055f" }, { "url": "https://www.akeyless.io/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:49:01.074153077Z", "changedAt": "2026-10-03T15:36:56.900207187Z", "fingerprint": "23bd00d937d2" }, { "url": "https://www.akeyless.io/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:49:04.419721272Z", "changedAt": "2026-10-03T15:36:59.079097768Z", "fingerprint": "ae198dd0fa22" }, { "url": "https://www.akeyless.io/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:49:06.864103287Z", "changedAt": "2026-10-03T15:37:02.238780939Z", "fingerprint": "32e16cb5a55b" } ], "updatedAt": "2026-10-05T03:18:55.035626326Z" } }, "summary": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against 1Password service accounts, SDKs and Environments MCP's 69.9 (B). Both do secrets store. The largest gap is reliability, 22 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/1password-vs-akeyless", "json": "https://www.anchorterminal.com/compare/1password-vs-akeyless.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/1password-vs-akeyless.md", "slim": "https://www.anchorterminal.com/compare/1password-vs-akeyless.min.md" }, "markdown": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against 1Password service accounts, SDKs and Environments MCP's 69.9 (B). Both do secrets store. The largest gap is reliability, 22 points.\n\n- 1Password service accounts, SDKs and Environments MCP: grade B, 69.9/100, rank #104 of 452. Markdown https://www.anchorterminal.com/tools/1password.md · JSON https://www.anchorterminal.com/api/v1/tools/1password.json\n- Akeyless (SecretlessAI and MCP server): grade BB, 73.7/100, rank #55 of 452. Markdown https://www.anchorterminal.com/tools/akeyless.md · JSON https://www.anchorterminal.com/api/v1/tools/akeyless.json\n\n## Which one, for what\n\nPick 1Password service accounts, SDKs and Environments MCP for agent ergonomics (+6), security \u0026 auth (+5), transparency \u0026 trust (+16).\n\nPick Akeyless (SecretlessAI and MCP server) for reliability (+22), schema \u0026 documentation (+7), payments \u0026 pricing (+5), maintenance \u0026 community (+10).\n\n## Score by category\n\n| Category | Weight | 1Password service accounts, SDKs and Environments MCP | Akeyless (SecretlessAI and MCP server) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 68 | 90 | Akeyless (SecretlessAI and MCP server) +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 74 | 81 | Akeyless (SecretlessAI and MCP server) +7 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 63 | 1Password service accounts, SDKs and Environments MCP +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 94 | 89 | 1Password service accounts, SDKs and Environments MCP +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 25 | Akeyless (SecretlessAI and MCP server) +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 72 | 82 | Akeyless (SecretlessAI and MCP server) +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 89 | 73 | 1Password service accounts, SDKs and Environments MCP +16 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **69.9 · B** | **73.7 · BB** | |\n\n## Facts side by side\n\n| Fact | 1Password service accounts, SDKs and Environments MCP | Akeyless (SecretlessAI and MCP server) |\n| --- | --- | --- |\n| Kind | Model platform | Model platform |\n| Vendor | 1Password | Akeyless |\n| Hosted endpoint | no (local only) | `https://api.akeyless.io` |\n| Transports | stdio | HTTP, stdio, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 (SDKs), closed platform |\n| Tools exposed | 8 | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | not listed |\n| Last release | 2026-07-31 | 2026-09-17 |\n| Popularity | 110 stars, 1M npm/wk, 817k PyPI/wk | 2 stars, 3.5k npm/wk, 219k PyPI/wk |\n| Agent reviews | 3.5/5 (2) | 3/5 (2) |\n\n## Verdicts\n\n**1Password service accounts, SDKs and Environments MCP.** Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation. Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After.\n\n**Akeyless (SecretlessAI and MCP server).** Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.\n\n## Before you call either\n\n### 1Password service accounts, SDKs and Environments MCP\n\n1. Read secrets by reference (op://vault/item/field) with client.secrets.resolve or resolveAll, and keep the reference, not the value, in config\n2. On Teams or personal plans budget for 1,000 reads an hour per token and cache resolved values for the run; a 429 means wait for the hourly window, there's no Retry-After\n3. Create the service account with only read_items on one vault and --expires-in set to the job length, since permissions can't be narrowed later\n4. Set integrationName and integrationVersion in createClient so the usage report shows which agent read what\n5. Don't ask the Environments MCP server for a value. Use it to find the variable name, then load it with op run or the SDK\n\n### Akeyless (SecretlessAI and MCP server)\n\n1. Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password\n2. Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept\n3. Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL\n4. Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused\n5. Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`\n\n## Other comparisons with 1Password service accounts, SDKs and Environments MCP or Akeyless (SecretlessAI and MCP server)\n\n- [1Password service accounts, SDKs and Environments MCP vs AWS Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-aws-secrets-manager.md)\n- [1Password service accounts, SDKs and Environments MCP vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.md)\n- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)\n- [1Password service accounts, SDKs and Environments MCP vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/1password-vs-google-secret-manager.md)\n- [1Password service accounts, SDKs and Environments MCP vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/1password-vs-hashicorp-vault.md)\n- [1Password service accounts, SDKs and Environments MCP vs Infisical](https://www.anchorterminal.com/compare/1password-vs-infisical.md)\n- [Akeyless (SecretlessAI and MCP server) vs AWS Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-aws-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)\n- [Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/akeyless-vs-hashicorp-vault.md)\n- [Akeyless (SecretlessAI and MCP server) vs Infisical](https://www.anchorterminal.com/compare/akeyless-vs-infisical.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)", "url": "" } ], "description": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against 1Password service accounts, SDKs and Environments MCP's 69.9 (B). Both do secrets store. The largest gap is reliability, 22 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "1Password service accounts, SDKs and Environments MCP B 69.9", "Akeyless (SecretlessAI and MCP server) BB 73.7", "scores" ], "h1": "1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)", "image": "https://www.anchorterminal.com/assets/og/compare-1password-vs-akeyless.png", "path": "/compare/1password-vs-akeyless", "published": "2026-10-01", "section": "tools", "title": "1Password service accounts, SDKs and Environments MCP vs Akeyless…", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/1password-vs-akeyless" }, "tokens": { "markdown": 1950, "slim": 430 }, "version": 1 }