Overview
SaaS sprawl and shadow IT create significant security vulnerabilities, exposing organizations to unmanaged apps, unauthorized access, and compliance risks.
The MCP Server for Trelica by 1Password provides a centralized, read-only control plane for SaaS visibility and access control intelligence, purpose-built for IT teams running in AWS. Backed by 350+ direct integrations with the most widely-used enterprise SaaS apps, the MCP Server makes it easy to monitor app usage, user access, and policy drift across your environment.
With no write permissions required, App Access Governance gives you visibility and context without disrupting your existing IAM or security controls.
**This MCP Server requires customers to have an active subscription to Trelica by 1Password.
This MCP Server integration empowers your IT and security teams with the ability to:
-
Retrieve and analyze audit logs: Gain insights into system activities and user behavior for compliance, monitoring, and forensic investigation.
-
List and manage all applications: View all SaaS applications in your environment and make informed decisions on access, usage, and governance.
-
Access, list, and retrieve workflows: Monitor and manage automated processes, improving operational efficiency and standardization.
-
List and retrieve people and teams: Get a complete picture of your organization's structure, including team memberships and user roles.
-
Access and list contracts: Maintain oversight of vendor agreements and reduce risks related to contract lifecycle management.
-
Retrieve and manage assets: Track and manage IT and SaaS assets, ensuring up-to-date inventories and reducing shadow IT.
Highlights
- Integrate with AWS-native workflows: Stream SaaS usage, access, and metadata into services like Lambda, CloudWatch, and your analytics or security stack.
- Monitor for compliance drift: Feed real-time access and activity data into your compliance workflows to stay ahead of audits.
- Optimize access control and governance: Get a complete view of who has access to what, and automate cleanups based on actual usage.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
---|---|---|
Trelica by 1Password MCP Server | Access Governance for every SaaS app | $10,000.00 |
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
API-Based Agents & Tools
API-Based Agents and Tools integrate through standard web protocols. Your applications can make API calls to access agent capabilities and receive responses.
Additional details
Usage instructions
To get started using the MCP Server for Trelica by 1Password, follow the instructions below:
Available Tools
This MCP server supports the following tools:
- List Apps - Lists all applications in the account
- Get App - Gets an application using its App ID
- Get App Users - Gets a list of users for a specific app using its App ID
- List Assets - Lists all assets in the account
- Get Asset - Gets a specific asset using its assetID
- List Custom Fields - Lists the custom fields of all assets
- List Audit Logs - Lists all audit log entries
- List Contracts - Lists all contracts in the account
- Get Contract - Gets a contract using its contractID
- List People - Lists all people in the account
- Get Person - Gets a person using their PersonID
- List Apps for a Person - Lists all apps for a specific person using their personID
- List All Teams (In a Hierarchy) - Lists all teams organized by their hierarchical structure
- List All Teams (In a List) - Lists all teams not considering their hierarchical structure
- List Workflow - Lists all workflows
- Get a Workflow - Gets a workflow using its workflowID
- List Workflow Runs - Lists a workflow run using its workflowID
Prerequisites
- Requires current subscription to Trelica by 1Password
- Install Node.js and npm
Authentication
Replace ACCESS_TOKEN with your actual token below.
Claude Desktop
Edit the configuration file at:
- macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
- Windows: %APPDATA%\Claude\claude_desktop_config.json
Add the below code:
{ "mcpServers": { "Trelica-MCP-Server": { "command": "npx" , "args": [ "mcp-remote" , "<https://mcp.1password.com/trelica/mcp>" , " --header" , "Authorization: Bearer <ACCESS TOKEN>" _ ] } } }Cline
Cline stores MCP server configurations in a JSON file that can be modified. In the "Installed" tab, click "Configure MCP Servers" to access the settings file.
Add the following:
{ "mcpServers": { "Trelica-MCP-Server": { "url": "<https://mcp.1password.com/trelica/mcp>", "disabled": false, "timeout": 30, “Headers”: { “Authorization”: “Bearer <ACCESS_TOKEN>” } } } }Rate Limits
- 1000 requests per hour.
- Authentication: Access tokens expire after 1 hour and must be refreshed.
- Exceeding rate limits returns an HTTP 429 Too Many Requests error.
- Implement retry and exponential backoff to handle limits.
Learn More
MCP Docs: https://trelica.gitbook.io/trelica-apiÂ
Support
Vendor support
Support is available at:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.