Any way to access to 1P SSH Agent on a Headless remote, if local agent can't be forwarded?

Glad you're liking the product! As for the use case you're describing, OpenSSH actually has a solution for this built in to their tooling, called SSH agent forwarding. You can enable it on a per-host basis in your local ~/.ssh/config file:


Host myserver
ForwardAgent yes


If you then connect to myserver and run ssh-add -l, you should see all your keys from 1Password. And if you then run, say, git fetch on the remote host, you'll get prompted by your local 1Password app!

One important note on agent forwarding: After approving a prompt, any SSH command ran as the same OS user on that host during your SSH connection will be able to use the key you've approved, so make sure you only enable SSH agent forwarding for trusted hosts.