1Password CLI - 1Password Releases

1Password CLI 2.22.0

Tue, 24 Oct 2023 00:00:00 +0000

You can now authenticate the following CLIs using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to everyone who contributed!
- Axiom CLI, contributed by @rajapri28613 [[#shell-plugins#342]]
- Binance CLI, contributed by @bala-ceg [[#shell-plugins#391]]
- Civo CLI, contributed by @itsCheithanya [[#shell-plugins#296]]
- Crowdin CLI, contributed by @JoeKarow [[#shell-plugins#359]]
- HuggingFace, contributed by @bala-ceg [[#shell-plugins#393]]
- InfluxDB CLI, contributed by @bala-ceg [[#shell-plugins#392]]
- Flyctl CLI, contributed by @arunsathiya [[#shell-plugins#141]]
- Kaggle CLI, contributed by @rajapri28613 [[#shell-plugins#341]]
- LocalStack CLI, contributed by @simonrw [[#shell-plugins#371]]
- MongoDB Atlas CLI , contributed by @joqim [[#shell-plugins#198]]
- Pipedream CLI, contributed by @rajapri28613 [[#shell-plugins#338]]
- Todoist CLI, contributed by @rajapri28613 [[#shell-plugins#340]]
- Upstash CLI, contributed by @siddhikhapare [[#shell-plugins#316]]
- Vertica CLI, contributed by @parthiv11 [[#shell-plugins#327]]
- Yugabyte CLI, contributed by @parthiv11 [[#shell-plugins#322]]
- Zapier CLI, contributed by @rajapri28613 [[#shell-plugins#337]]
We’ve updated help text for many commands to use simpler language. [[#3676]] [[#3768]]
op read help text now includes an example of how to use the ssh-format query parameter to get an SSH key’s private key. [[#3795]]
op run help text now includes an explanation of how to use service accounts with op run. [[#3804]]
We’ve updated error messages for op item create to be more clear. [[#3766]]
We’ve updated error messages when provisioning actions fail to be more clear. [[#3263]]
op whoami for service accounts now authenticates automatically instead of asking to authenticate the service account token. [[#3744]]
The PostgreSQL shell plugin now supports pgcli as an alternative to psql. (Thanks, @szymon!) [[#shell-plugins#384]]
The Cachix shell plugin now checks for the ~/.config/cachix/cachix.dhall file and attempts to import an auth token using the specified file. (Thanks @dethancosta!) [[#shell-plugins#373]]
The Sentry CLI shell plugin now skips authentication when you use the --auth-token and --api-key flags. (Thanks @roy9495!). [[#shell-plugins#370]]
The Homebrew shell plugin now provides authentication for the upgrade, update, install and reinstall commands. (Thanks @cullenmcdermott!). [[#shell-plugins#369]]
The Sentry shell plugin now supports SENTRY_PROJECT & SENTRY_URL. (Thanks @JoeKarow!) [[#shell-plugins#363]]
The PostgreSQL plugin now also supports the pg_dump and pg_restore CLI utilities. (Thanks @JoeKarow!) [[#shell-plugins#353]]
The OpenAI shell plugin now has updated documentation and management URLs. (Thanks @arunsathiya!) [[#shell-plugins#351]]
When generating the shell plugin template, you now only need to set the last word of the credential name as the default 1Password field name if the credential name is longer than seven characters. (Thanks @arunsathiya!) [[#shell-plugins#263]]
The ngrok shell plugin now specifies the correct credential length. [[#shell-plugins#250]]
The ngrok shell plugin now uses environment variables in ngrok version 3.2.1 and later. (Thanks @arunsathiya!) [[#shell-plugins#222]]
We’ve restored deprecated JSON keys for op whoami output for service account for backwards-compatibility. [[#3754]]
op whoami now throws the appropriate error if an invalid service account token is set. [[#3744]]
When you search for an item by title and vault and the title is 26 characters long, 1Password CLI now returns the item. [[#3751]]
op vault list now only returns vaults you have read access to. [[#3688]]

1Password CLI 2.23.0

Thu, 16 Nov 2023 00:00:00 +0000

op item edit now accepts JSON input via the --template flag. [[#1849]]
op item edit now supports piping items as JSON via stdin. [[#1849]]
If you’re not an owner and try to add the Team Members group to a vault when the limitedGroupVaultAccess feature flag is turned on, 1Password CLI now returns a helpful error. [[#3830]]
When 1Password CLI can’t connect to the 1Password desktop app, the error message now suggests restarting the app. [[#3835]]
We’ve improved the error message when op item edit finds duplicate fields to more clearly format field labels that aren’t in a section. [[#3849]]
Creating a vault with --icon=name now works again, using the updated icons. [[#3833]]
The error message for op item edit when duplicated fields are found by label no longer prints the field’s value. [[#3848]]

1Password CLI 2.24.0

Thu, 14 Dec 2023 00:00:00 +0000

The 1Password CLI Mac installer now allows for custom location selection. [[#3731]]
Help text now uses present tense more consistently where actions in the present are described. [[#3768]]
Help text now refers to the 1Password app consistently. [[#3626]]
Help text now refers to Connect server instances and tokens consistently. [[#3476]]
op group user grant and op group user revoke no longer panic when the group doesn’t exist. [[#3859]]
Duo MFA is no longer prompted for more often than required. [[#3907]]

1Password CLI 2.25.0

Mon, 26 Feb 2024 00:00:00 +0000

op vault list --permission now allows you to retrieve a list of vaults for which a user or group has specific permissions. [[#3879]]
When setting a non-generated password, 1Password CLI now always correctly updates the password strength. [[#3787]]

1Password CLI 2.25.1

Tue, 12 Mar 2024 00:00:00 +0000

We’ve fixed an issue retrieving an SSH Key when using 1Password CLI with a Connect server. [[#3851]]

1Password CLI 2.26.0

Tue, 19 Mar 2024 00:00:00 +0000

op service-account create command allows you to create a new service account that you can use to automate secrets management.
op service-account ratelimit command allows you to fetch information about service account rate limit usage. [[#3886]]
op user provision now clarifies that users will not be considered for billing until they accept their invitation. [[#3965]]
--expires-in flags now support days and weeks. [[#3298]]
The item share --expiry flag is now aliased to the standardized --expires-in flag. [[#3298]]
We corrected a typo in the user suspend error message. [[#3298]]

1Password CLI 2.26.1

Fri, 22 Mar 2024 00:00:00 +0000

The CLI build for Darwin now builds with Go 1.21.8. The previous version was built using an older version, which was causing alerts for certain customers.

1Password CLI 2.27.0

Wed, 17 Apr 2024 00:00:00 +0000

op read now outputs an error message consistent with the provided secret reference when no matching field or section is found on the item. [[#3592]]
The output of SSH private keys now use platform-appropriate line breaks (CR vs CRLF). [[#3913]]
Users who have the manage_vault permission in a vault can now grant and revoke access to the vault. [[#3863]]

1Password CLI 2.28.0

Wed, 01 May 2024 00:00:00 +0000

Private vaults have been renamed Employee vaults for 1Password Business accounts. [[#3810]]
1Password can now retrieve PKCS1-formatted SSH keys using op read. [[#3993]]
The 1Password CLI package installed for macOS now correctly displays the CLI version in the package receipt. [[#4027]]

1Password CLI 2.29.0

Tue, 21 May 2024 00:00:00 +0000

Team members can now use 1Password CLI to create service accounts when they have the required permissions to do so.
You can now use the op whoami command with a 1Password Connect server. [[#2636]]
Service account tokens now include device UUIDs for scalability purposes. [[#4009]]
The output when you create a service account can now be formatted as a json object by adding --format json to the command. [[#3996]]

1Password CLI 2.30.0

Wed, 31 Jul 2024 00:00:00 +0000

Sensitive values in the human-readable output of item management commands are now concealed by default. You can display them using the --reveal flag. [[#4158]]
Caching is now being used for service account sessions on Mac and Linux. [[#4133]]
The error message when 1Password CLI can’t connect with the 1Password desktop app now includes a link to troubleshooting documentation for more help. [[#3933]]
op whoami will now signal if the CLI is authenticated as a human user. [[#4104]]
The output of op vault list now contains the created date and item count for each vault. [[#4092]]
The op item move and op item delete commands now also work for SSH Key items. [[#3951]]
The op vault revoke user command now doesn’t allow you to revoke permissions in a Personal, Private, or Employee vault. [[#3844]]
When the same environment variable name exists both in the operating system environment and an environment file, op run now correctly sources the value from the environment file. [[#3667]]
The Windows Authenticode signature now uses the SHA256 hashing algorithm. [[#4135]]

1Password CLI 2.30.3

Thu, 07 Nov 2024 00:00:00 +0000

The OP_RUN_NO_MASKING environment variable is now exposed to allow users to control the masking of the op run command output. [[#4089]]
For 1Password accounts that are managed by an MSP, 1Password CLI commands involving Service Accounts, Connect, or the Events API no longer occasionally return an error. [[#4033]]
The op read, op run and op inject commands no longer query archived items. [[#3893]]
On Windows, the CLI now checks each signature of the 1Password desktop app before connecting to it. [[#4136]]

1Password CLI 2.31.0

Wed, 07 May 2025 00:00:00 +0000

1Password CLI no longer causes direnv to halt when the two are used together. [[#4250]]
Following the deprecation of CLI 1, the 1password/op:latest DockerHub tag will now always point to the latest version of CLI 2. [[#4267]]
The Go version has been bumped to 1.23.8. [[#4305]]
op vault list --filter now returns all vaults you have access to regardless of permission level, making it easier to discover and manage vaults beyond those where you have read access. [[#4189]]
op group user grant now works correctly in MSP accounts. [[#4244]]

1Password CLI 2.31.1

Wed, 28 May 2025 00:00:00 +0000

The 1Password app integration with 1Password CLI now works again on Windows. [[#4325]]
A typo in the error message for ‘op user confirm’ has been fixed. [[#4329]]

1Password CLI 2.32.0

Tue, 19 Aug 2025 00:00:00 +0000

You can now use 1Password CLI to recover accounts for family or team members. [[#4161]]

1Password CLI 2.32.1

Thu, 05 Feb 2026 00:00:00 +0000

op item delete help text now notes that deleted items remain in Recently Deleted for 30 days. [[#4377]]
Tags are now deduplicated when using op item edit. [[#4088]]
op run help text now notes shell expansion order of operations. [[#2971]]
op item create help text example now works without error. [[#4246]]
1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI. [[#DG-682]]

1Password CLI 2.33.0

Mon, 16 Mar 2026 00:00:00 +0000

1Password CLI now supports updating an account’s Account Trust Log when the feature is enabled.
The --tags flag on op item edit now replaces existing tags instead of appending them. An empty --tags value now properly clears all tags.
Empty tag strings in templates are now filtered out during op item create and op item edit.
Default values for Date and MonthYear fields are now unset instead of zero.

1Password CLI 2.33.1

Tue, 24 Mar 2026 00:00:00 +0000

op item edit help text now includes a warning that JSON item templates don’t support passkeys.
1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app.

1Password CLI 2.34.0

Thu, 16 Apr 2026 00:00:00 +0000

Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks @malob! [[#shell-plugins#519]]
Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks @jksolbakken! [[#shell-plugins#515]]
The AWS plugin now supports the awslogs CLI. Thanks @jonasws! [[#shell-plugins#504]]
The AWS plugin now supports eksctl, the Amazon EKS CLI. Thanks @skpaz! [[#shell-plugins#500]]
The AWS shell plugin now supports the AWS SAM CLI. Thanks @simonmcc! [[#shell-plugins#473]]
The OpenAI shell plugin now supports the Codex CLI. Thanks @shyim! [[#shell-plugins#517]]
The ngrok shell plugin no longer performs a version check on every op plugin command when it is not initialized. Thanks @MOmarMiraj! [[#shell-plugins#474]]
The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the --profile flag. Thanks @waiteb3! [[#shell-plugins#463]]
op run now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C). [[#284]]