YogevKr

Opgate — AI skill for Claude Code

AI community

Scoped, cached 1Password secrets for shells and AI agents.

How to install Opgate

This entry records only its repository, not the path inside it, so there is no exact command to give. Open YogevKr/opgate and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Opgate does

Scoped, cached 1Password secrets for shells and AI agents.

Alternatives in AI

Maestro Companion — Quick execution for small tasks — minimal run lifecycle (start + done) with evidence recording 530 ★
Engrim — The Universal Cross-Model Episodic Memory Standard 219 ★
Herdr Agent Usage — Credential-scoped AI quota, context, and cache in Herdr for Claude, Codex, Grok, Agy, OpenCode, Pi, omp, Devin 131 ★

README

opgate

[![test](https://github.com/YogevKr/opgate/actions/workflows/test.yml/badge.svg)](https://github.com/YogevKr/opgate/actions/workflows/test.yml)

Scoped, cached secrets for shells and AI agents, from 1Password and the macOS keychain.

`opgate` provides three access modes:

Personal account access uses native 1Password approval.
Work account access uses separate native 1Password approval.
Unattended agents use a service account restricted to the agents vault.

The agent service account needs `read_items,write_items` to read, create, edit, and delete items. 1Password enforces these permissions. Environment profiles select variables; they do not define vault permissions.

# Start an agent with personal or work account access.
opgate session --profile personal -- codex
opgate session --profile work -- claude

# Query or change items without loading a fixed list of environment variables.
opgate op --profile agent -- item list --vault agents
opgate op --profile agent -- item get  --vault agents
opgate op --profile agent -- item edit  --vault agents

# Give selected environment values to one command.
opgate exec --profile agent --backend fnox -- some-tool
opgate exec --profile agent --backend native -- some-tool

The existing `opgate ` and `op` shortcuts remain available. They load environment values through the original cache system. They do not open full account sessions. Use `opgate session` for that purpose.

Help and discovery

Help does not require a profile, credentials, or native approval:

opgate --help
opgate exec --help
opgate op --help
opgate session --help
opgate help accounts
opgate op -- item create --help

All built-in commands accept `-h` and `--help`. Explicit modes accept help before the `--` command delimiter. Arguments after that delimiter belong to the child. Exact native help forms such as `item create --help` also bypass authentication and cache invalidation. Faile