Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official 1Password server

1Password Device Trust MCP server

Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio. It runs locally with API key auth.

Last verified 15 tools4 sources

Install

Claude Code

About Claude Code
Terminal
claude mcp add kolide -- uv --directory /absolute/path/to/device-trust-mcp-server run kolide-mcp-stdio

Cursor

About Cursor
JSON
{
  "mcpServers": {
    "kolide": {
      "url": "http://localhost:8000/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_MCP_AUTH_TOKEN"
      }
    }
  }
}

VS Code

JSON
{
  "servers": {
    "kolide": {
      "type": "http",
      "url": "http://localhost:8000/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_MCP_AUTH_TOKEN"
      }
    }
  }
}

Generic

JSON
{
  "mcpServers": {
    "kolide": {
      "command": "uv",
      "args": [
        "--directory", "/absolute/path/to/device-trust-mcp-server",
        "run", "kolide-mcp-stdio"
      ],
      "env": {
        "KOLIDE_API_KEY": "your-api-key-here"
      }
    }
  }
}

Tools

kolide_issue_resolution_stats
Compute resolution time statistics (avg, median, min, max, p90) for issues of a specific check.
kolide_count_table_records_by_field
Count records in a reporting table grouped by a field, returned as ranked results.
kolide_refresh_reporting_tables
Refresh the cached list of valid reporting table names from the API.
kolide_whoami
Get organization information.
kolide_list_devices
List all devices.
kolide_get_device
Get device details.
kolide_get_device_open_issues
Get open issues for a device.
kolide_get_device_check_results
Get check results for a device.
kolide_list_people
List all people.
kolide_list_person_devices
List devices for a person.
kolide_list_issues
List all issues.
kolide_list_checks
List security checks.
kolide_get_check_results
Get results for a check.
kolide_create_live_query_campaign
Create a new osquery live query campaign.
kolide_update_exemption_request
Approve or deny an exemption request.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Requires a Device Trust API key and a 1Password Device Trust Connect or Unified Access Pro plan.
  • Installed by cloning the repo (no published package); Python 3.11+, uv or pip.
  • HTTP mode requires a self-generated MCP_AUTH_TOKEN bearer token and binds to 127.0.0.1:8000 by default; stdio mode needs only KOLIDE_API_KEY.
  • Exposes 60 tools in total (57 endpoint tools plus 3 composite); a subset is listed.
  • The repo has no LICENSE file but the README's License section states MIT; there are no GitHub releases or tags (pyproject version 0.1.0; latest main commit 2026-10-01).
  • The support page was published October 14, 2026.
  • The Cursor snippet is from the 1Password support page; the Claude Code, VS Code and generic stdio snippets are from the repo README.

More MCP servers for auth and security

Related reading

FAQ

What does the 1Password Device Trust MCP server do?

Self-hosted Python MCP server that exposes the 1Password Device Trust (formerly Kolide) API so agents can query devices, people, checks, issues and live query campaigns, with auto-pagination and aggregation helpers. It runs locally over Streamable HTTP or stdio. The vendor documents 15 tools, including kolide_issue_resolution_stats, kolide_count_table_records_by_field, kolide_refresh_reporting_tables and kolide_whoami.

How do I add the 1Password Device Trust MCP server to Claude Code?

Run claude mcp add kolide -- uv --directory /absolute/path/to/device-trust-mcp-server run kolide-mcp-stdio, copied from 1Password's docs. This page also has snippets for Cursor, VS Code and Generic.

Does the 1Password Device Trust MCP server need authentication?

Yes, API key. Transport: Streamable HTTP, stdio. Status: Unlabelled, last checked October 17, 2026.

Sources

Last verified against 4 1Password pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.