Feature request: per-item authorization with item names in the prompt

Our workflow

We run local TypeScript maintenance scripts against production. By policy our engineers have no access to our cloud provider's secret manager, so 1Password is the store of record for production secrets. A script declares which secrets it needs, and the engineer approves the read at runtime via the desktop app. Increasingly these scripts are written and executed by AI coding agents (Claude Code, Codex) running in the engineer's terminal.

The problem

The authorization prompt shows the account name and the requesting process — for us that renders as "Allow Code to get CLI access", i.e. VS Code, the app hosting the terminal. It does not say which item is being read. Combined with two documented behaviours:

• authorization is per-account, not per-item, and
• it "extends to sub-shell processes in that window"

…approving one read grants every subprocess in that terminal access to every item in the account until lock, timeout, or op signout.

So the engineer clicking Approve cannot tell what they are approving. We worked around it with our own dialog that lists the item titles before calling op — but that dialog is TypeScript in the same repo the agent is editing. An agent can change the displayed name while requesting a different item, or skip our code and call op directly. The consent UI is inside the blast radius, so it cannot be trusted. Only 1Password's own prompt is outside it.

The ask

Extend what the SSH agent already does to op item get / op read and the SDKs:

1. Per-item authorization — the SSH agent's default is already "per key, per application".
2. Item titles in the prompt — the SSH agent has a "Display key names when authorizing connections" setting. We want the equivalent for secret reads.

That would let us delete our custom dialog and rely on a prompt an agent cannot forge.

Related

Overlaps with the existing request for remote/mobile approval for agentic workflows (ref CFP-19201): https://www.1password.community/discussions/developers/feature-request-remote-approval-for-op-cli--desktop-prompts-to-support-agentic-w/167877

Or: https://www.1password.community/1password-at-work-58/add-some-more-context-to-the-touch-id-modal-25134