Overview
SaaS sprawl and shadow IT create significant security vulnerabilities, exposing organizations to unmanaged apps, unauthorized access, and compliance risks.
The MCP Server for 1Password SaaS Manager is a centralized, read-only control plane for SaaS visibility and access insights, designed for IT teams running in AWS. Built on 1Password SaaS Manager's over 350 integrations, it makes it easy to monitor app usage, user access, and policy drift across your environment.
With no write permissions required, App Access Governance gives you visibility and context without disrupting your existing IAM or security controls.
**This MCP Server requires customers to have an active subscription to 1Password SaaS Manager.
This MCP Server integration empowers your IT and security teams with the ability to:
-
Retrieve and analyze audit logs: Gain insights into system activities and user behavior for compliance, monitoring, and forensic investigation.
-
List and manage all applications: View all SaaS applications in your environment and make informed decisions on access, usage, and governance.
-
Access, list, and retrieve workflows: Monitor and manage automated processes, improving operational efficiency and standardization.
-
List and retrieve people and teams: Get a complete picture of your organization's structure, including team memberships and user roles.
-
Access and list contracts: Maintain oversight of vendor agreements and reduce risks related to contract lifecycle management.
-
Retrieve and manage assets: Track and manage IT and SaaS assets, ensuring up-to-date inventories and reducing shadow IT.
Highlights
- Integrate with AWS-native workflows: Stream SaaS usage, access, and metadata into services like Lambda, CloudWatch, and your analytics or security stack.
- Monitor for compliance drift: Feed real-time access and activity data into your compliance workflows to stay ahead of audits.
- Optimize access control and governance: Get a complete view of who has access to what, and automate cleanups based on actual usage.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
API-Based Agents & Tools
API-Based Agents and Tools integrate through standard web protocols. Your applications can make API calls to access agent capabilities and receive responses.
Additional details
Usage instructions
To get started using the MCP Server for Trelica by 1Password, follow the instructions below:
Available Tools
This MCP server supports the following tools:
- List Apps - Lists all applications in the account
- Get App - Gets an application using its App ID
- Get App Users - Gets a list of users for a specific app using its App ID
- List Assets - Lists all assets in the account
- Get Asset - Gets a specific asset using its assetID
- List Custom Fields - Lists the custom fields of all assets
- List Audit Logs - Lists all audit log entries
- List Contracts - Lists all contracts in the account
- Get Contract - Gets a contract using its contractID
- List People - Lists all people in the account
- Get Person - Gets a person using their PersonID
- List Apps for a Person - Lists all apps for a specific person using their personID
- List All Teams (In a Hierarchy) - Lists all teams organized by their hierarchical structure
- List All Teams (In a List) - Lists all teams not considering their hierarchical structure
- List Workflow - Lists all workflows
- Get a Workflow - Gets a workflow using its workflowID
- List Workflow Runs - Lists a workflow run using its workflowID
Prerequisites
- Requires current subscription to Trelica by 1Password
- Install Node.js and npm
Authentication
Replace ACCESS_TOKEN with your actual token below.
Claude Desktop
Edit the configuration file at:
- macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
- Windows: %APPDATA%\Claude\claude_desktop_config.json
Add the below code:
{ "mcpServers": { "Trelica-MCP-Server": { "command": "npx" , "args": [ "mcp-remote" , "https://mcp.1password.com/trelica/mcp" , " --header" , "Authorization: Bearer <ACCESS TOKEN>" _ ] } } }Cline
Cline stores MCP server configurations in a JSON file that can be modified. In the "Installed" tab, click "Configure MCP Servers" to access the settings file.
Add the following:
{ "mcpServers": { "Trelica-MCP-Server": { "url": "https://mcp.1password.com/trelica/mcp", "disabled": false, "timeout": 30, “Headers”: { “Authorization”: “Bearer <ACCESS_TOKEN>” } } } }Rate Limits
- 1000 requests per hour.
- Authentication: Access tokens expire after 1 hour and must be refreshed.
- Exceeding rate limits returns an HTTP 429 Too Many Requests error.
- Implement retry and exponential backoff to handle limits.
Learn More
MCP Docs: https://trelica.gitbook.io/trelica-api
Resources
Vendor resources
Support
Vendor support
Support is available at:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Customer reviews
Best password manager, hands down!
Easy to Use for Users and Admins
1Password My Passwords Under One Roof
Making Daily Credential Management More Structured
The autofill and password-generation features were especially useful because they removed the need to repeatedly create or manually enter complex passwords. During busy work activities, that saved a surprising amount of time and reduced login friction significantly.I also found the browser extension very practical. Accessing saved credentials directly while switching between engineering portals, shared systems, and documentation platforms made workflows feel more organized.
Another strong point was secure credential sharing. Instead of sending passwords through emails or chat messages, access could be controlled more safely through shared vaults and permissions, which improved internal coordination and reduced unnecessary exposure of sensitive information.
From a UI/UX perspective, the platform feels clean and stable without becoming overly technical for normal users. Synchronization across devices and browsers also worked reliably during regular usage.
The Watchtower-style security alerts and password-health visibility were another unexpected benefit because they helped identify reused or weaker passwords that otherwise would have been ignored.
There are also occasional autofill inconsistencies on certain websites where fields are not detected correctly, particularly during multi-step login or verification pages.
During engineering and documentation activities, multiple portals, software systems, and shared tools required separate credentials, and manually tracking them became inefficient over time.
1Password solved this by centralizing password management, secure sharing, autofill, and credential organization into one controlled platform. Instead of repeatedly resetting passwords or searching through old records, credentials became accessible in a more structured and secure way.The biggest operational benefit was reduced friction during login-heavy workflows. Teams could securely access shared resources without depending on repeated password requests or insecure sharing methods.
It also improved password hygiene because strong unique passwords could be generated and maintained consistently without adding extra manual effort. Overall, it reduced credential-management overhead while improving security visibility and access control across regular work activities.