Self-host connect
Self-hosted server for 1Password secrets via REST API
- Stars
- 232
What is connect?
1Password Connect is a server component you run in your own environment to bridge your applications and 1Password vaults. It exposes a private REST API that your apps and CI/CD pipelines call to retrieve secrets, while the server handles authentication with 1Password and caches responses locally so repeated reads don't hit upstream rate limits. Official deployment examples include Docker Compose and Kubernetes manifests. The server is configured with a 1Password service account token and vault identifiers, then clients authenticate to the Connect server using bearer tokens. SDKs for Go, Python, and JavaScript simplify integration. The project is maintained by 1Password and governed by their API Terms of Service.
Should you self-host connect?
connect scores 44/100 on selfhost.directory (how scoring works) and ranks #10 of 12 in Secrets Management. It has 232 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is moderate: expect some configuration beyond a single command.
Its closest alternative on selfhost.directory is Infisical (78/100, 30 062 stars). It scores higher overall, so compare the two before you pick. See connect vs Infisical side by side.
Features
- 1Password CLI integration
- Local caching
- REST API
- SDKs
connect README
More in Secrets Management
DopbaseDopbase is a self-hosted, open-source secrets manager in one binary that encrypts secrets in SQLite, provides a CLI, REST API, and embedded Admin UI.
InfisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Onetime SecretKeep passwords and other sensitive information out of your chat logs and inboxes.
One Time SecretOpen-source, self-hosted secret sharing: encrypted one-time links that vanish after viewing, with a REST API, SMTP delivery, and MFA, passkeys and SSO in full mode.
OpenBaoOpenBao is an open-source secrets manager forked from Vault, governed by the OpenSSF for self-hosted deployments.
OpenSignerOpen-source, self-hosted key management for embedded wallets using Shamir's Secret Sharing across Ethereum and Solana.
PadlocOpen-source, end-to-end encrypted password manager with shared vaults, MFA, a built-in authenticator and encrypted file storage; self-hosted via Docker Compose or Node.
phaseSelf-hosted secrets manager with end-to-end encryption for storing and deploying application secrets across environments.
shelveOpen-source, self-hosted secrets manager for dev teams: keep API keys and .env values in an encrypted vault with team roles, activity logging, scoped tokens and a CLI.
Sup3rS3cretMes5ageOpen-source, self-hosted service for one-time secret sharing via HashiCorp Vault. Auto-deletes after read, supports files, TTL, TLS, and CLI.
TeampassSelf-hosted, open-source team password vault on PHP/MySQL: folder and role access control, AES-256-GCM encryption, LDAP/OAuth2 SSO, TOTP and compliance reports.
vaultSelf-hosted, source-available secrets server that issues dynamic cloud and database credentials, offers encryption as a service, and logs every access for audit.
0 comments