Skip to content
ProductArena

How 1Password’s scores are calculated

The full audit trail, recomputed from the verdict data at build time through the same code that produced the leaderboard: verdict × quality × story weight per cell, cells sum to dimension scores, dimensions blend into the PA Score. Every number on the product page is reproducible from this page alone; for why the formula looks like this, see the methodology.

verdict factors: full ×1.0 · partial ×0.6 · disputed ×0.3 · none ×0.0 · n/a excluded from both sides · cell points = weight × quality × factor · cell max = weight × 10

PA Score28/100

Agent-ready 70.1 × 0.30 = 21.03

API quality 0.0 × 0.20 = 0.00

Openness 15.0 × 0.20 = 3.00

Built-in AI 14.7 × 0.15 = 2.20

Automation 12.0 × 0.15 = 1.80

(21.03 + 0.00 + 3.00 + 2.20 + 1.80) ÷ (0.30 + 0.20 + 0.20 + 0.15 + 0.15) = 28.03 ÷ 1.00 = 28.0

Scores are stored to 1 decimal; the product page’s pills round to whole numbers for display. Each dimension below shows the stories, verdicts, and cited evidence behind its number.

Agent-ready70.1/100×0.30 of the PA blend

Outside-in: can YOUR agent reach and drive this product — API, MCP, CLI, headless runs, agent docs.

Point an agent at llms.txt or agent-oriented docsweight 2

2 (weight) × 9 (quality) × 1.0 (full) = 18.0 of 20 max

  • [probe] https://support.1password.com/llms.txt“PROBE llms.txt: HTTP 200 at https://support.1password.com/llms.txt # 1Password Support > LLM-friendly exports of English public support guides from 1Password Support. ## Guides - [Disc”
  • [probe] https://www.1password.dev/llms.txt“PROBE runtime (recorded 2026-09-15): 1password.dev serves llms.txt ('# 1Password Developer Documentation') plus llms-full.txt, and every docs page has a real .md mirror — https://www.1password.dev/cli/get-started.md returns markdown '# Get started with 1Password CLI'. support.1password.com serves its own llms.txt of support guides.”
  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”

Run the product headlessly / in CI for automationweight 2

2 (weight) × 8 (quality) × 1.0 (full) = 16.0 of 20 max

  • [claimed-docs] https://www.1password.dev/cli/get-started“1Password CLI brings 1Password to your terminal. Learn how to install the CLI, then integrate it with your 1Password app and sign in with Touch ID, Windows Hello, or another system authentication option.”
  • [claimed-docs] https://www.1password.dev/connect“Use the 1Password Credential Broker to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [probe] https://www.1password.dev/cli/get-started“PROBE runtime (recorded 2026-09-15): the official op CLI is packaged in Homebrew as the 1password-cli cask ('Command-line interface for 1Password', v2.39.0) — the scriptable surface behind service accounts, Connect, and secrets automation.”
  • [probe] https://www.1password.dev/cli/get-started“official CLI documented at https://www.1password.dev/cli/get-started”

Plug MCP servers into this product so it can use their toolsweight 3

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Connect an agent via an official MCP serverweight 3

3 (weight) × 8 (quality) × 1.0 (full) = 24.0 of 30 max

  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/environments/mcp-server“official MCP server documented at https://www.1password.dev/environments/mcp-server”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”

Use an official CLIweight 2

2 (weight) × 9 (quality) × 1.0 (full) = 18.0 of 20 max

  • [claimed-docs] https://www.1password.dev/cli/get-started“1Password CLI brings 1Password to your terminal. Learn how to install the CLI, then integrate it with your 1Password app and sign in with Touch ID, Windows Hello, or another system authentication option.”
  • [claimed-docs] https://www.1password.dev/cli/reference“op item list --vault Private”
  • [probe] https://www.1password.dev/cli/get-started“official CLI documented at https://www.1password.dev/cli/get-started”
  • [probe] https://www.1password.dev/cli/get-started“PROBE runtime (recorded 2026-09-15): the official op CLI is packaged in Homebrew as the 1password-cli cask ('Command-line interface for 1Password', v2.39.0) — the scriptable surface behind service accounts, Connect, and secrets automation.”
  • [claimed-docs] https://www.1password.dev/ssh“Use the 1Password SSH Agent to authenticate all your Git and SSH workflows.”

Drive the product through a documented public APIweight 3

3 (weight) × 9 (quality) × 1.0 (full) = 27.0 of 30 max

  • [claimed-docs] https://www.1password.dev/cli/get-started“1Password CLI brings 1Password to your terminal. Learn how to install the CLI, then integrate it with your 1Password app and sign in with Touch ID, Windows Hello, or another system authentication option.”
  • [claimed-docs] https://www.1password.dev/cli/reference“op item list --vault Private”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [github] https://github.com/1Password/onepassword-sdk-js“Build integrations that programmatically interact with 1Password.”
  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/environments/mcp-server“official MCP server documented at https://www.1password.dev/environments/mcp-server”
  • [probe] https://www.1password.dev/cli/get-started“official CLI documented at https://www.1password.dev/cli/get-started”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”
  • [probe] https://www.1password.dev/llms.txt“PROBE runtime (recorded 2026-09-15): 1password.dev serves llms.txt ('# 1Password Developer Documentation') plus llms-full.txt, and every docs page has a real .md mirror — https://www.1password.dev/cli/get-started.md returns markdown '# Get started with 1Password CLI'. support.1password.com serves its own llms.txt of support guides.”
  • [probe] https://www.1password.dev/cli/get-started“PROBE runtime (recorded 2026-09-15): the official op CLI is packaged in Homebrew as the 1password-cli cask ('Command-line interface for 1Password', v2.39.0) — the scriptable surface behind service accounts, Connect, and secrets automation.”

Issue scoped/least-privilege API credentials for an agentweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://www.1password.dev/connect“Use the 1Password Credential Broker to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”

Build against official SDKsweight 2

2 (weight) × 8 (quality) × 1.0 (full) = 16.0 of 20 max

  • [claimed-docs] https://www.1password.dev/sdks“Secure your applications: Load secrets into your code with secret references or read environment variables from 1Password Environments.”
  • [claimed-docs] https://www.1password.dev/sdks“Automate item management: Programmatically manage items in your 1Password account.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [github] https://github.com/1Password/onepassword-sdk-js“Build integrations that programmatically interact with 1Password.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [probe] https://www.1password.dev/cli/get-started“PROBE runtime (recorded 2026-09-15): the official op CLI is packaged in Homebrew as the 1password-cli cask ('Command-line interface for 1Password', v2.39.0) — the scriptable surface behind service accounts, Connect, and secrets automation.”

Subscribe to events via webhooksweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [claimed-docs] https://www.1password.dev/events-api“The 1Password Events API allows you to retrieve information about activity in your 1Password Business account and send it to your security information and event management (SIEM) system.”

Agent-ready = 126.2 ÷ 180 × 100 = 70.1

API quality0.0/100×0.20 of the PA blend

The programmable surface once an agent is there — machine-readable spec, interactive docs, sandbox, versioning discipline.

Explore an interactive API reference with runnable examplesweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [claimed-docs] https://www.1password.dev/cli/reference“op item list --vault Private”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [probe] https://www.1password.dev/llms.txt“PROBE runtime (recorded 2026-09-15): 1password.dev serves llms.txt ('# 1Password Developer Documentation') plus llms-full.txt, and every docs page has a real .md mirror — https://www.1password.dev/cli/get-started.md returns markdown '# Get started with 1Password CLI'. support.1password.com serves its own llms.txt of support guides.”

Download a machine-readable API spec (OpenAPI or equivalent)weight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Test against a sandbox environment without touching production dataweight 1

1 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 10 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Rely on versioned APIs with a documented deprecation policyweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

API quality = 0.0 ÷ 70 × 100 = 0.0

Openness15.0/100×0.20 of the PA blend

Can you leave, inspect, or self-host — data export, open source, portability.

Do everything through the API that I can do in the UIweight 2

2 (weight) × 5 (quality) × 0.6 (partial) = 6.0 of 20 max

  • [claimed-docs] https://www.1password.dev/cli/reference“op item list --vault Private”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [claimed-docs] https://www.1password.dev/sdks“Automate item management: Programmatically manage items in your 1Password account.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [claimed-docs] https://support.1password.com/watchtower/“Watchtower tells you about breaches, weak passwords, duplicate items, and other security problems with the items you have saved in 1Password.”
  • [claimed-docs] https://releases.1password.com/“you can now create, manage, and sign in with passkeys on a growing number of websites and apps directly from the 1Password browser extension”
  • [claimed-docs] https://support.1password.com/getting-started-browser/“1Password lets you easily sign in to sites, use suggested passwords, and find what you need – all without leaving your browser.”

Export all of my data in open formats and leaveweight 3

3 (weight) × 5 (quality) × 0.6 (partial) = 9.0 of 30 max

  • [claimed-docs] https://support.1password.com/export/“You can export your information from the 1Password apps if you want to move it to a different app.”
  • [claimed-docs] https://support.1password.com/import/“You can import data into 1Password from many different browsers and applications, including applications that export data in the comma-separated values (CSV) file format”
  • [claimed-docs] https://support.1password.com/import/“Learn how to transfer your passwords and other information from other applications into 1Password.”

Read the product's source under an open licenseweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Self-host the core productweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [community] https://hn.algolia.com/api/v1/items/29993961“Use a tiny portion of that to continue support for local, non-cloud-based vault files please.”
  • [community] https://hn.algolia.com/api/v1/items/29993961“Except they have already started to diminish what used to make 1P great. We now get no native apps, no local vault storage, no upfront payments. The VC rot has already set in.”

Openness = 15.0 ÷ 100 × 100 = 15.0

Built-in AI14.7/100×0.15 of the PA blend

Inside-out: how agentic the product itself is for its users — built-in assistants, autonomous features.

Get AI-generated insights and suggestions from my data inside the productweight 2

2 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 20 max

  • [claimed-docs] https://support.1password.com/watchtower/“Watchtower tells you about breaches, weak passwords, duplicate items, and other security problems with the items you have saved in 1Password.”
  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”

Set up automations that run autonomously in the backgroundweight 2

2 (weight) × 5 (quality) × 0.6 (partial) = 6.0 of 20 max

  • [claimed-docs] https://www.1password.dev/connect“Use the 1Password Credential Broker to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.”
  • [claimed-docs] https://www.1password.dev/connect“1Password Connect Servers allow you to securely access your 1Password items and vaults in your company's apps and cloud infrastructure using a private REST API.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”
  • [claimed-docs] https://www.1password.dev/sdks“Secure your applications: Load secrets into your code with secret references or read environment variables from 1Password Environments.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”
  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”

Delegate tasks to a built-in AI assistant inside the productweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”

Operate the product with natural-language commandsweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://www.1password.dev/environments/mcp-server“The 1Password Environments MCP Server lets MCP clients such as Claude Code, Codex, Cursor, and Kiro securely manage your 1Password Environments.”
  • [probe] https://www.1password.dev/ai-readable-docs“PROBE runtime (recorded 2026-09-15): 1Password's public docs MCP server at https://www.1password.dev/mcp completed a FULL keyless initialize handshake — serverInfo {"name":"1Password Developer","version":"1.0.0"} ('The server is public and requires no authentication' per its own docs). A second official MCP, the Environments MCP Server (Beta), manages Environments 'without returning secrets to the agent'.”
  • [probe] https://www.1password.dev/environments/mcp-server“official MCP server documented at https://www.1password.dev/environments/mcp-server”

Built-in AI = 13.2 ÷ 90 × 100 = 14.7

Automation12.0/100×0.15 of the PA blend

Depth of automation primitives — rules, scheduling, bulk operations, webhooks.

Perform bulk operations across many items at onceweight 2

2 (weight) × 6 (quality) × 0.6 (partial) = 7.2 of 20 max

  • [claimed-docs] https://www.1password.dev/cli/reference“op item list --vault Private”
  • [claimed-docs] https://www.1password.dev/sdks“Automate item management: Programmatically manage items in your 1Password account.”
  • [claimed-docs] https://www.1password.dev/sdks“1Password SDKs allow you to build integrations that programmatically interact with 1Password using Go, JavaScript, or Python.”
  • [probe] https://www.1password.dev/cli/get-started“PROBE runtime (recorded 2026-09-15): the official op CLI is packaged in Homebrew as the 1password-cli cask ('Command-line interface for 1Password', v2.39.0) — the scriptable surface behind service accounts, Connect, and secrets automation.”

Define rules that trigger actions automatically on eventsweight 3

3 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 30 max

  • [claimed-docs] https://www.1password.dev/events-api“The 1Password Events API allows you to retrieve information about activity in your 1Password Business account and send it to your security information and event management (SIEM) system.”
  • [claimed-docs] https://support.1password.com/watchtower/“Watchtower tells you about breaches, weak passwords, duplicate items, and other security problems with the items you have saved in 1Password.”
  • [claimed-docs] https://www.1password.dev/connect“Use the 1Password Credential Broker to give CI/CD and other machine workflows short-lived access to secrets, without managing service account tokens.”
  • [claimed-docs] https://www.1password.dev/service-accounts“1Password Service Accounts help automate secrets management in your applications and infrastructure without the need to deploy additional services.”

Schedule recurring jobs or workflowsweight 2

n/a — not applicable to this product: excluded from numerator and denominator

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Version, review, and roll back my automationsweight 1

1 (weight) × 0 (quality) × 0.0 (none) = 0.0 of 10 max

no evidence cited — the verdict rests on absence of evidence, re-checked on refresh

Automation = 7.2 ÷ 60 × 100 = 12.0