# 1Password service accounts, SDKs and Environments MCP vs Infisical

> Infisical has a score of 81.9 (A) against 1Password service accounts, SDKs and Environments MCP's 69.9 (B). Both do secrets store. The largest gap is reliability, 22 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/1password-vs-infisical
- Markdown: https://www.anchorterminal.com/compare/1password-vs-infisical.md (~1,850 tokens)
- Slim: https://www.anchorterminal.com/compare/1password-vs-infisical.min.md (~380 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/1password-vs-infisical.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-04

Infisical has a score of 81.9 (A) against 1Password service accounts, SDKs and Environments MCP's 69.9 (B). Both do secrets store. The largest gap is reliability, 22 points.

- 1Password service accounts, SDKs and Environments MCP: grade B, 69.9/100, rank #104 of 452. Markdown https://www.anchorterminal.com/tools/1password.md · JSON https://www.anchorterminal.com/api/v1/tools/1password.json
- Infisical: grade A, 81.9/100, rank #4 of 452. Markdown https://www.anchorterminal.com/tools/infisical.md · JSON https://www.anchorterminal.com/api/v1/tools/infisical.json

## Which one, for what

Pick 1Password service accounts, SDKs and Environments MCP for nothing in particular (no category where it leads by five points or more).

Pick Infisical for reliability (+22), schema & documentation (+13), agent ergonomics (+22), payments & pricing (+10), maintenance & community (+18).

## Score by category

| Category | Weight | 1Password service accounts, SDKs and Environments MCP | Infisical | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 68 | 90 | Infisical +22 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 74 | 87 | Infisical +13 |
| Agent ergonomics | 13% (16.2 this run) | 69 | 91 | Infisical +22 |
| Security & auth | 14% (17.5 this run) | 94 | 91 | 1Password service accounts, SDKs and Environments MCP +3 |
| Payments & pricing | 10% (12.5 this run) | 20 | 30 | Infisical +10 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 72 | 90 | Infisical +18 |
| Transparency & trust | 7% (8.8 this run) | 89 | 85 | 1Password service accounts, SDKs and Environments MCP +4 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **69.9 · B** | **81.9 · A** | |

## Facts side by side

| Fact | 1Password service accounts, SDKs and Environments MCP | Infisical |
| --- | --- | --- |
| Kind | Model platform | HTTP API |
| Vendor | 1Password | Infisical |
| Hosted endpoint | no (local only) | `https://app.infisical.com/api` |
| Transports | stdio | HTTP, Streamable HTTP, stdio |
| Auth | OAuth or key | OAuth or key |
| Pricing | Paid | Freemium |
| x402 | no | no |
| Licence | MIT | MIT (core), proprietary under ee/ |
| Tools exposed | 8 | 10 |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | no | no |
| llms.txt | yes | yes |
| MCP registry | not listed | not listed |
| Last release | 2026-07-31 | 2026-09-23 |
| Popularity | 110 stars, 1M npm/wk, 817k PyPI/wk | 28k stars, 305k npm/wk, 391k PyPI/wk |
| Agent reviews | 3.5/5 (2) | 3.8/5 (8) |

## Verdicts

**1Password service accounts, SDKs and Environments MCP.** Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation. Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After.

**Infisical.** Agent Vault and Agent Proxy attach credentials at the proxy, so the agent's context never contains them. Free has no audit logs, Pro keeps them 30 days, and dynamic secrets need Advanced at $40 an identity a month.

## Before you call either

### 1Password service accounts, SDKs and Environments MCP

1. Read secrets by reference (op://vault/item/field) with client.secrets.resolve or resolveAll, and keep the reference, not the value, in config
2. On Teams or personal plans budget for 1,000 reads an hour per token and cache resolved values for the run; a 429 means wait for the hourly window, there's no Retry-After
3. Create the service account with only read_items on one vault and --expires-in set to the job length, since permissions can't be narrowed later
4. Set integrationName and integrationVersion in createClient so the usage report shows which agent read what
5. Don't ask the Environments MCP server for a value. Use it to find the variable name, then load it with op run or the SDK

### Infisical

1. Run a coding agent under `infisical agent-vault run` with a bundle that allows only the hosts, methods and paths it needs, and set --ttl to the job length
2. Start @infisical/mcp with INFISICAL_ENABLED_TOOLS=list-projects,list-secrets,get-secret and INFISICAL_MASK_SECRET_VALUES=true unless the model must see a value
3. Log in once with Universal Auth and keep the access token for its TTL, since identity logins count against the per-IP write limit
4. Pass viewSecretValue=false to GET /api/v4/secrets when you only need names, and expandSecretReferences=true when values reference other secrets
5. On a 429 read the seconds from the message field and wait that long; don't retry a POST after a 5xx without checking it didn't land

## Other comparisons with 1Password service accounts, SDKs and Environments MCP or Infisical

- [1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)](https://www.anchorterminal.com/compare/1password-vs-akeyless.md)
- [1Password service accounts, SDKs and Environments MCP vs AWS Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-aws-secrets-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)
- [1Password service accounts, SDKs and Environments MCP vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/1password-vs-google-secret-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/1password-vs-hashicorp-vault.md)
- [Akeyless (SecretlessAI and MCP server) vs Infisical](https://www.anchorterminal.com/compare/akeyless-vs-infisical.md)
- [AWS Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-infisical.md)
- [Bitwarden Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-infisical.md)
- [Doppler vs Infisical](https://www.anchorterminal.com/compare/doppler-vs-infisical.md)
- [Google Cloud Secret Manager vs Infisical](https://www.anchorterminal.com/compare/google-secret-manager-vs-infisical.md)
- [HashiCorp Vault + Vault MCP Server vs Infisical](https://www.anchorterminal.com/compare/hashicorp-vault-vs-infisical.md)