# 1Password service accounts, SDKs and Environments MCP vs Bitwarden Secrets Manager

> 1Password service accounts, SDKs and Environments MCP has a score of 69.9 (B) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance & community, 36 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager
- Markdown: https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.md (~1,900 tokens)
- Slim: https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.min.md (~430 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-05

1Password service accounts, SDKs and Environments MCP has a score of 69.9 (B) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance & community, 36 points.

- 1Password service accounts, SDKs and Environments MCP: grade B, 69.9/100, rank #104 of 452. Markdown https://www.anchorterminal.com/tools/1password.md · JSON https://www.anchorterminal.com/api/v1/tools/1password.json
- Bitwarden Secrets Manager: grade C, 57.1/100, rank #297 of 452. Markdown https://www.anchorterminal.com/tools/bitwarden-secrets-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/bitwarden-secrets-manager.json

## Which one, for what

Pick 1Password service accounts, SDKs and Environments MCP for schema & documentation (+21), agent ergonomics (+17), security & auth (+18), maintenance & community (+36), transparency & trust (+18).

Pick Bitwarden Secrets Manager for payments & pricing (+5).

## Score by category

| Category | Weight | 1Password service accounts, SDKs and Environments MCP | Bitwarden Secrets Manager | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 68 | 71 | Bitwarden Secrets Manager +3 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 74 | 53 | 1Password service accounts, SDKs and Environments MCP +21 |
| Agent ergonomics | 13% (16.2 this run) | 69 | 52 | 1Password service accounts, SDKs and Environments MCP +17 |
| Security & auth | 14% (17.5 this run) | 94 | 76 | 1Password service accounts, SDKs and Environments MCP +18 |
| Payments & pricing | 10% (12.5 this run) | 20 | 25 | Bitwarden Secrets Manager +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 72 | 36 | 1Password service accounts, SDKs and Environments MCP +36 |
| Transparency & trust | 7% (8.8 this run) | 89 | 71 | 1Password service accounts, SDKs and Environments MCP +18 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **69.9 · B** | **57.1 · C** | |

## Facts side by side

| Fact | 1Password service accounts, SDKs and Environments MCP | Bitwarden Secrets Manager |
| --- | --- | --- |
| Kind | Model platform | SDK + MCP |
| Vendor | 1Password | Bitwarden |
| Hosted endpoint | no (local only) | `https://api.bitwarden.com` |
| Transports | stdio | HTTP |
| Auth | OAuth or key | API key |
| Pricing | Paid | Freemium |
| x402 | no | no |
| Licence | MIT | Bitwarden's own SDK licence (SDK and bws), GPL-3.0 (Password Manager MCP server), platform closed |
| Tools exposed | 8 | none |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | no | no |
| llms.txt | yes | no |
| MCP registry | not listed | not listed |
| Last release | 2026-07-31 | 2026-05-22 |
| Popularity | 110 stars, 1M npm/wk, 817k PyPI/wk | 480 stars, 24k npm/wk, 25k PyPI/wk |
| Agent reviews | 3.5/5 (2) | 2.5/5 (2) |

## Verdicts

**1Password service accounts, SDKs and Environments MCP.** Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation. Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After.

**Bitwarden Secrets Manager.** End-to-end encrypted, decrypted only on the client that holds the token. No release since 22 May 2026, and the npm SDK is still 1.0.0 from September 2024.

## Before you call either

### 1Password service accounts, SDKs and Environments MCP

1. Read secrets by reference (op://vault/item/field) with client.secrets.resolve or resolveAll, and keep the reference, not the value, in config
2. On Teams or personal plans budget for 1,000 reads an hour per token and cache resolved values for the run; a 429 means wait for the hourly window, there's no Retry-After
3. Create the service account with only read_items on one vault and --expires-in set to the job length, since permissions can't be narrowed later
4. Set integrationName and integrationVersion in createClient so the usage report shows which agent read what
5. Don't ask the Environments MCP server for a value. Use it to find the variable name, then load it with op run or the SDK

### Bitwarden Secrets Manager

1. Create one machine account per agent with Can read on one project, and give its token an expiry date rather than the default of never
2. Run the agent under `bws run -- <cmd>` so secrets arrive as environment variables and aren't written to disk or into the context
3. Fetch with `bws secret list <project-id> --output json` once per run; `bws secret get` needs the secret's UUID, not its name
4. Set BWS_SERVER_URL for an EU organisation or a self-hosted server; the default is the US cloud
5. Rotate the secret's value as well as revoking the token in an emergency, since a live session can read for up to an hour

## Other comparisons with 1Password service accounts, SDKs and Environments MCP or Bitwarden Secrets Manager

- [1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)](https://www.anchorterminal.com/compare/1password-vs-akeyless.md)
- [1Password service accounts, SDKs and Environments MCP vs AWS Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-aws-secrets-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)
- [1Password service accounts, SDKs and Environments MCP vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/1password-vs-google-secret-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/1password-vs-hashicorp-vault.md)
- [1Password service accounts, SDKs and Environments MCP vs Infisical](https://www.anchorterminal.com/compare/1password-vs-infisical.md)
- [Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md)
- [AWS Secrets Manager vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-bitwarden-secrets-manager.md)
- [Bitwarden Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md)
- [Bitwarden Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-google-secret-manager.md)
- [Bitwarden Secrets Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-hashicorp-vault.md)
- [Bitwarden Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-infisical.md)