1Password MCP Reference Builder

Build the op read 'op://…' wrapper line for an OrchestKit MCP server — and pick the right vault for your setup.

MCP server

Vault (scope)

Item name

Field

Generated .mcp.json args line

Vault taxonomy — where keys should live

Private1Password's default personal vault. Correct for solo / individual setups — the docs' op item create step lands here. PlatformTeam / org-shared keys. The OrchestKit-org canon for tooling keys (Tavily, fal, 21st) per ADR-004 per-credential items. HQ-SharedCross-app runtime LLM provider keys (Anthropic, Groq). Not for dev-tooling MCP keys. HQ-InfraProvisioning / CI: Tailscale, Hetzner, GPG, SSH, PyPI.