op-loader
| Crates.io | op-loader |
| lib.rs | op-loader |
| version | 0.1.1 |
| created_at | 2026-01-24 18:38:48.627564+00 |
| updated_at | 2026-01-24 18:46:06.40234+00 |
| description | TUI for configuring 1password secrets for injection into your shell environment |
| homepage | |
| repository | https://github.com/idiomattic/op-loader |
| max_upload_size | |
| id | 2067201 |
| size | 116,086 |
Matthew Lese (idiomattic)
documentation
README
op-loader
A TUI and CLI tool for managing 1Password secrets as environment variables.
Overview
op-loader provides a terminal UI for browsing your 1Password vaults and configuring which fields to inject as environment variables. Once configured, use the env subcommand to load secrets into your shell session.
Installation
Via Cargo
cargo install op-loader
Or build from source:
git clone https://github.com/idiomattic/op-loader
cd op-loader
cargo install --path .
Prerequisites
- 1Password CLI (
op) must be installed and authenticated
Usage
TUI Mode
op-loader
Launch the interactive terminal UI to:
- Browse accounts and vaults
- Search items with fuzzy matching
- Select fields to map to environment variables
- Set default account/vault (persisted across sessions)
Navigation
| Key | Action |
|---|---|
0, 1, 2, 3 |
Focus panel (Accounts, Vaults, Items, Details) |
j / k or arrows |
Navigate lists |
Enter |
Select item / confirm |
/ |
Start fuzzy search |
Esc |
Clear search / close modal |
f |
Favorite (set as default) account or vault |
q |
Quit |
Inject Environment Variables
eval "$(op-loader env)"
Reads your configured mappings and outputs export statements. Add this to your shell rc file (.bashrc, .zshrc, etc.) to load secrets on shell startup.
Configuration
Show config file location:
op-loader config path
View current settings:
op-loader config get -k default_vault_id
op-loader config get -k default_account_id
How It Works
- Use the TUI to browse your 1Password vaults and select fields
- Map fields to environment variable names (e.g.,
op://Personal/GitHub/token->GITHUB_TOKEN) - Mappings are saved to the config file
- Run
eval "$(op-loader env)"to inject secrets into your shell
Configuration
Default config location: ~/.config/op_loader/default-config.toml
Available settings
default_account_id: Auto-select this account on startupdefault_vault_id: Auto-select this vault on startupinject_vars: Map of environment variable names to 1Password references
Privacy
All secrets are fetched directly from 1Password via the op CLI. No secrets are stored locally - only the references (e.g., op://vault/item/field) are saved in your config file.
License
MIT