1Password

Splitkick has no integration with 1Password of its own. Your agents do: they run your local op CLI, and the secret never appears in the chat.

For the agents

1. Install the 1Password CLI and turn on the desktop app integration, so op unlocks with Touch ID.
2. Store the secret in a vault.
3. In a session, tell the agent which item to use: "Run the migration with DATABASE_URL=$(op read 'op://Dev/staging-db/url')."

The agent shells out to op in the worktree; approval goes through the 1Password app on your Mac.

For the app itself

The keys Splitkick needs for Linear and Sentry are stored in Settings in plain text today. Reading them from 1Password is on the roadmap.