Skip to main content
Nov 7, 2026 7:27 PM UTC
Question

1Password MCP installer creates /usr/local/bin with 700 permissions on macOS

On a fresh Apple Silicon Mac (macOS 27.2), /usr/local/bin did not exist. Enabling the MCP server option in the 1Password app settings created it as drwx------ root wheel (700), along with a 1password-mcp symlink that is also 700. Both have the same birth time, and they are the only entries in the directory.

As a result, no other app can read /usr/local/bin: VS Code's "Install 'code' command in PATH" fails with EACCES: permission denied, stat '/usr/local/bin/code', and anything installed there is not usable from a user shell. The 1Password MCP itself also fails to start (spawn 1password-mcp EACCES), as another user reported here: https://forum.cursor.com/t/1password-plugin-mcp-fails-to-start-spawn-1password-mcp-eacces/173073

Steps to reproduce: on a Mac where /usr/local/bin does not exist yet, enable the MCP server option in the 1Password app settings, then run ls -ld /usr/local/bin.

Workaround: sudo chmod 755 /usr/local/bin && sudo chmod -h 755 /usr/local/bin/1password-mcp

Expected: create the directory as 755 (and the symlink as 755), e.g. by setting the mode explicitly instead of relying on a restrictive umask.