Access is granted per session, limited to specific approved items and not carried over. Because passwords, usernames and one-time MFA codes are injected through a secure channel managed by 1Password, they stay outside the model's view. The company pitches this as the missing trust layer for personal agent tasks such as booking restaurants, buying gifts or planning holidays, which usually require handing over credentials. "An agent should be able to do the job it's been asked to do without getting permanent access to everything behind the account," said chief product officer Aashish Tripathi.

The system is designed to work with a range of AI agents including Meta Muse, ChatGPT Work and Dots, Claude Duet, Grok Bot and Town, with more partners such as Browserbase, Browser Use, Perplexity and Ramp working on support. 1Password has not yet revealed pricing or availability.

There are limits to what the system protects against. Agents may keep your secrets to themselves, but they can still make ordering mistakes or book the wrong holiday with no way to cancel, so approving each request carefully remains advisable.