Lists vaults and items a service account can reach, reads an item's fields, files new credentials, and permanently removes retired ones.
6actions available
Every action runs live through MCP. Nothing to build, nothing to maintain.
Ayro retrieves stored credentials, API keys, or secrets from your vault without copying. Customers access passwords they need directly within your support conversation.
Ayro securely stores a new password, API key, or secret in your team vault. The credential becomes immediately available to authorized members with full audit trail.
Ayro modifies an existing password or secret while keeping previous versions in history. Your team adopts the refreshed credential with no service interruption.
Each card is one request a support team gets, and the 1password actions Ayro runs to close it.
Ayro lists the vaults the 1Password service account can reach and the items inside a chosen vault, so an internal request for a specific record is narrowed down before anything is retrieved.
When a new key, login, or secure note is issued, Ayro creates the item in the correct vault and updates its title or field values later, so the record does not sit in a chat message or a spreadsheet.
Ayro reads the item to confirm which record is which, then permanently deletes the one that has been rotated out, keeping the vault free of superseded keys.
How it works
Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Ayro reads the 1password actions it has and picks the ones a request needs.
Authorize the 1password account your team already uses — one consent screen, no API keys, no mapping tables. Ayro can only do what you granted that account, and you can disconnect it at any time.
Describe the job the way you would hand it to a teammate. Ayro maps it to the 1password actions that close it and chains as many as the request needs.
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started free1password · Ayro
What can you do in 1password without me setting anything up?
These, right away:
Great, let's start with the first one.
FAQ
Setup, permissions, and the limits of what Ayro can do inside 1password.
Only the ones granted to the 1Password service account you connect. List Vaults returns exactly that set, so scoping access is a 1Password permissions decision rather than something configured on our side.
All 6 actions your agent can call on 1password, straight from the live MCP connection.
Creates a new item in a 1Password vault.
Permanently deletes an item from a 1Password vault.
Retrieves a specific item from a vault, including all fields and secrets.
Lists all items in a given vault.
Lists all vaults the service account has access to.
Updates an existing item's title or field values.
Same connection, same setup. Pick the next one your team already uses.
Checks channel presence, publishes realtime and batch messages, sends push notifications, and maintains the Ably device registry.
Reads Bubble records by ID, creates them singly or in bulk, triggers your backend API workflows, and patches or deletes records that are wrong.
Reports what deployed and what is queued, summarises what a release contains, aborts a bad deployment, and stands new projects up against their servers.
Searches Hacker News discussions, resolves ranked story IDs into readable items, and reads Ask HN, Show HN, job, and user feeds.
Issues credentials over OpenID4VC and DIDComm, raises verification requests, maintains credential templates, and manages DIDComm connections.
Optimizes images in batches of 100, reports where a queued image stands, and manages the domains and credits behind the ShortPixel CDN.

Authorize the account and your agent has all 6 actions from the first conversation.
