Developer newsletter: August 2025

Be honest: have you ever shared an API key in a DM to a colleague after rotating your project’s secrets? Or have you read about a breach at another company and quietly wondered whether your team was just as vulnerable? Have you been worrying about how to get the most out of AI agents while keeping your secrets safe?

We've been asking our community these types of questions recently and thinking a lot about how developers store and share secrets. 

You’ll find the theme of secrets management all over our recent product updates and in this month’s newsletter, where we’re looking at:

• Improving your team’s developer experience with 1Password environments
• The new MCP Server for Trelica by 1Password
• New articles from the developer blog
• And our favorite finds from across the 1Password Community

Enjoy!

Manage 1Password environments in the 1Password.com admin panel 

In case you missed it, 1Password environments (beta) are now available in the 1Password desktop apps. This allows developers to collaborate and share environment variables securely through 1Password. No more struggling to share a new secret with your teammates.

To build on this release, admins can now find 1Password environments in the 1Password.com admin panel. Admins can navigate to the Developer > Environments tab to see how your team is using environment variables. 

Learn more about environments 👉

Watch the demo 👉

Try it yourself 👉

NEW: MCP Server for Trelica by 1Password

AI agents need permissions in order to work, but giving them access shouldn’t mean compromising on the principle of least privilege.

This past month, we announced MCP Server for Trelica by 1Password, which allows for a secure integration between AWS and the Trelica API. In practice, this means you can safely use agentic AI systems to ingest and summarize data related to your team’s SaaS products  – without exposing secrets to the AI agents. 

Read the blog post 👉

Read 1Password's take on MCP 👉

Migrate from Hashicorp HCP Vault Secrets

HashiCorp recently announced it will be sunsetting HCP Vault Secrets on August 30, 2025, prompting many developer and DevOps teams to start planning for a migration.

If this change impacts you, we’ve put together a tutorial on how to move your secrets over to 1Password’s secret management tools.

Read the blog post 👉

Integrate with 1Password Marketplace

Why build something yourself if someone’s already built it for you? After building dozens of integrations to better support IT, security, and dev teams, we launched 1Password Marketplace to put them all in one spot. (Plus some community contributions, too!)

Explore 1Password Marketplace to find integrations that could help simplify your workflows. And if you don’t see what you’re looking for, fill out the form to request a new integration that could make your team’s life a lot easier. 

See the Marketplace 👉

Community corner

We’ve seen lots of great contributions from developers in the 1Password Community. Here are some of our recent favorites: 

varlock by DMNO

You might remember DMNO from a developer spotlight we featured or the DMNO integration in our marketplace.

The DMNO team recently shared a post in 1Password Community on their new open source tool: varlock. It helps developers collaborate through schema-powered .env files. Check it out! 

Using the 1Password CLI in a script

Skip another local environment variable and try the 1Password CLI instead. Rob Allen shares steps for how to access a 1Password item in a script via the 1Password CLI. 

How to use Flatpak VSCode, Toolbox, and 1Password together 

Getting a bunch of tools to work together can be the type of headache you really hope someone else has posted their solution to online. Check out this Community post if these are tools you’re also using.

Random but Memorable: Season 15! 🎉

We’ve officially launched the latest season of Random but Memorable, 1Password’s podcast. And with this new season comes a new home on YouTube!

The show’s back catalog is now available on the Random but Memorable YouTube channel, and we’ll be posting new episodes over there alongside Shorts and other bonus bits. 

To kick off the new season, 1Password’s very own Allie Dusome shares 1Password productivity hacks, like keyboard shortcuts, in the first episode.

In the second episode, Rachel Tobac shares how to protect yourself from identity theft and social engineering attempts in an age of deepfakes and AI-powered tools.

Subscribe to our YouTube channel 👉

Protect yourself from AI-powered social engineering 👉

What we’re reading

Here are a couple articles that our team has been reading, bookmarking, and sharing internally:

Linux breaks the 5% desktop market share barrier in the US

Linux users will be happy to know we’ve hit a new milestone in the US. These types of increases help validate why we offer 1Password for Linux and let our customers get the best product experience on their preferred OS.

API key best practices

This is a great list of suggestions for ensuring you and your team are managing your API keys securely. If you have a //to-do in your code to fix how you handle your developer secrets, the time is now to get it updated! 

Join the 1Password Community

That's it for this month. If you want to chat about anything covered in this newsletter, join the 1Password developer Slack or start a new discussion thread here in the 1Password Community!

Sign up for the developer newsletter to get updates directly to your email.

– The developer team at 1Password