1Password
for LuumenAI
Read vault items for context, and change credentials as an approved step
Connect 1Password and Luumen can look up the credential behind a runbook step without you switching windows. It lists vaults, lists items, and reads a specific item with its fields. When a secret needs to change after a rotation, Luumen writes the new value back to the same item and shows you the change first. Authentication is by API key.
The 1Password toolbox
6 tools: 3 read, 3 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet ItemRetrieves a specific item from a vault, including all fields and secrets.
- ReadList ItemsLists all items in a given vault.
- ReadList VaultsLists all vaults the service account has access to.
- WriteCreate ItemCreates a new item in a 1Password vault. Approval by default
- WriteDelete ItemPermanently deletes an item from a 1Password vault. Approval by default
- WriteUpdate ItemUpdates an existing item's title or field values. Approval by default
One prompt, start to finish
What a governed 1Password run looks like inside Luumen.
Questions
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — create item, delete item, update item — is shown as a plan and requires approval by default, including the 1 action classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to 1Password — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
OktaAccess and posture from Okta, with approval on every change.
Microsoft Entra IDAccess and posture from Microsoft Entra ID, with approval on every change.
Auth0Access and posture from Auth0, with approval on every change.Ping IdentityAccess and posture from Ping Identity, with approval on every change.Put 1Password to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.