@@ -137,18 +137,42 @@ func (c VaultsCmd) ListItems(ctx context.Context, vault, output string) error {
 		pterm.Info.Println("No vault items found")
 		return nil
 	}
-	rows := pterm.TableData{{"Key", "Type", "Provider", "Status", "Action"}}
-	for _, item := range *items {
+	filtered, err := vaultSafeJSONSlice(*items, vaultItemFields)
+	if err != nil {
+		return err
+	}
+	data, err := json.Marshal(filtered)
+	var safe []kernel.VaultItemUnion
+	if err != nil || json.Unmarshal(data, &safe) != nil {
+		return fmt.Errorf("invalid vault item response")
+	}
+	rows := pterm.TableData{{"Key", "Type", "Provider", "Status", "Site", "Action"}}
+	for _, item := range safe {
 		actions, err := effectiveVaultItemActions(&item)
 		if err != nil {
 			return err
 		}
-		rows = append(rows, []string{item.Key, item.Type, item.Spec.Provider, item.State.Status, util.OrDash(actions.RequiredAction)})
+		rows = append(rows, []string{item.Key, item.Type, item.Spec.Provider, item.State.Status, util.OrDash(vaultItemSite(item)), util.OrDash(actions.RequiredAction)})
 	}
 	PrintTableNoPad(rows, true)
 	return nil
 }
 
+// vaultItemSite names the site a credential signs in to so agents can reuse it.
+func vaultItemSite(item kernel.VaultItemUnion) string {
+	if item.Type != "credential" {
+		return ""
+	}
+	if item.Spec.Provider != "1password" {
+		return item.Spec.Description
+	}
+	websites := make([]string, 0, len(item.Spec.Requests.Entries))
+	for _, entry := range item.Spec.Requests.Entries {
+		websites = append(websites, entry.Parameters.Website)
+	}
+	return strings.Join(websites, ", ")
+}
+
 func validateVaultWait(wait int64) error {
 	if wait < 0 || wait > 60 {
 		return fmt.Errorf("--wait must be between 0 and 60 seconds")
@@ -212,10 +236,13 @@ func (c VaultsCmd) Invoke(ctx context.Context, vault, key, operation string, par
 	if operation == "prepare_checkout" && (params == nil || params.Checkout == nil) {
 		return fmt.Errorf("prepare_checkout requires checkout parameters")
 	}
+	if isOnePasswordOperation(operation) && (params == nil || params.OnePassword == nil) {
+		return fmt.Errorf("%s requires its documented parameters", operation)
+	}
 	item, err := c.vaults.Items.Get(ctx, key, kernel.VaultItemGetParams{IDOrName: vault}, option.WithMaxRetries(0))
 	if err != nil {
-		if operation == "fill" {
-			return fmt.Errorf("could not retrieve vault item; fill was not invoked")
+		if operation == "fill" || operation == "1pw_fill" {
+			return vaultFillLookupError(err, operation)
 		}
 		return util.CleanedUpSdkError{Err: err}
 	}
@@ -240,13 +267,22 @@ func (c VaultsCmd) Invoke(ctx context.Context, vault, key, operation string, par
 		}
 	}
 	if !available {
+		if isOnePasswordOperation(operation) {
+			return fmt.Errorf("operation %q is not advertised in available_operations; inspect the item with items get -o json. For 1Password credentials, check that the linked credential_account is connected and the credential state; do not delete or recreate the item to reset it", operation)
+		}
 		return fmt.Errorf("operation %q is not advertised in available_operations; inspect the item", operation)
 	}
 	if operation == "fill" {
 		return c.fill(ctx, vault, key, params.Fill, output)
 	}
+	if operation == "1pw_fill" {
+		return c.onePasswordFill(ctx, vault, key, params.OnePassword, output)
+	}
 	request := kernel.VaultItemPerformOperationParams{IDOrName: vault}
-	if operation == "prepare_checkout" {
+	if params != nil && params.OnePassword != nil {
+		request = *params.OnePassword
+		request.IDOrName = vault
+	} else if operation == "prepare_checkout" {
 		if item.Type != "card" || item.Spec.Provider != "agentcard" {
 			return fmt.Errorf("prepare_checkout requires an AgentCard card")
 		}
@@ -259,12 +295,15 @@ func (c VaultsCmd) Invoke(ctx context.Context, vault, key, operation string, par
 	}
 	response, err := c.vaults.Items.PerformOperation(ctx, key, request, option.WithMaxRetries(0))
 	if err != nil {
-		if item.Type == "credential" {
+		if isOnePasswordOperation(operation) {
+			return onePasswordOperationError(err, operation)
+		}
+		if item.Type == "credential" || item.Type == "credential_account" {
 			return vaultCredentialError(err)
 		}
 		return util.CleanedUpSdkError{Err: err}
 	}
-	if response == nil || (response.Type != "card" && response.Type != "wallet" && response.Type != "credential") {
+	if response == nil || (response.Type != "card" && response.Type != "wallet" && response.Type != "credential" && response.Type != "credential_account") {
 		return fmt.Errorf("unexpected vault operation response; inspect the item and do not retry")
 	}
 	var updated kernel.VaultItemUnion
 
@@ -52,12 +52,14 @@ func vaultPreRun(cmd *cobra.Command, args []string) error {
 func newVaultsCommand() *cobra.Command {
 	cmd := &cobra.Command{
 		Use: "vaults", Aliases: []string{"vault"}, Short: "Collect user credentials and manage payment credentials",
-		Long: `Collect user credentials and manage payment credentials; fill never submits website forms.
+		Long: `Collect user credentials and manage payment credentials.
 
 Do not use credential items to store, collect, or fill credit card data.
 Use wallet and card item types for credit cards and payment checkout instead.
 
-User credential flow:
+` + vaultCredentialPathsHelp + `
+
+Kernel-hosted credential flow (fill never submits website forms):
 1. Create a vault per end user and create a browser with --vault <id-or-name>.
 2. Navigate to a sensitive form and define its fields in natural top-to-bottom order with credentials create --spec-file; that array order controls the user-facing collection form.
 3. Present the returned collection URL to the user. Poll items get --wait 60 for ready.
@@ -66,6 +68,10 @@ Use credentials update --version for edits, or items invoke collect to reopen th
 Credential values belong in protected files/stdin, never command-line arguments.
 See credentials --help and items invoke --help for examples.
 
+1Password credential flow: reuse or connect the owner's account with credentials connect,
+create a 1password credential for the site's login entries, then invoke only the
+advertised 1pw_* operations. See credentials --help.
+
 Payment credential flow:
 
 Optionally select a project with --project <id-or-name> or KERNEL_PROJECT.
@@ -122,7 +128,7 @@ JSON output preserves returned public fields but omits unknown/opaque provider d
 	addVaultJSONOutputFlag(get)
 	cmd.AddCommand(create, list, get, newVaultDeleteCommand(false))
 
-	items := &cobra.Command{Use: "items", Short: "Inspect readiness and collection URLs, or invoke collect/fill", Long: "Use get --wait 60 to observe readiness and get -o json for schema/version/presence.\nUse invoke collect to obtain a collection URL, or invoke fill --spec-file to fill a browser.\nCreate and edit credentials with vaults credentials; payment items use wallets/cards."}
+	items := &cobra.Command{Use: "items", Short: "Inspect readiness and collection URLs, or invoke collect/fill", Long: "Use get --wait 60 to observe readiness and get -o json for schema/version/presence.\nUse invoke collect to obtain a collection URL, or invoke fill --spec-file to fill a browser.\n1Password credentials use the advertised 1pw_* operations instead of collect/fill.\nCreate and edit credentials with vaults credentials; payment items use wallets/cards."}
 	itemList := &cobra.Command{Use: "list <vault>", Short: "List items by vault ID or name", Args: cobra.ExactArgs(1), PreRunE: vaultPreRun,
 		RunE: func(cmd *cobra.Command, args []string) error {
 			return getVaultsHandler(cmd).ListItems(cmd.Context(), args[0], vaultOutput(cmd))
@@ -185,20 +191,47 @@ establish test mode; merchant credentials determine it.
 Use only when advertised for an AgentCard card. Keep the returned approval page open,
 poll until ready_to_submit, then submit native Pay before preparation.expires_at.
 Preparations are single-use, including after failure or expiry; never retry automatically.
-collect/authorize/prepare_checkout may use --open. Fill returns value-free per-field outcomes;
-completed exits 0, failed/unknown exit nonzero with valid JSON retained on stdout in -o json.`,
+collect/authorize/prepare_checkout/1pw_recover may use --open. Fill returns value-free per-field outcomes;
+completed exits 0, failed/unknown exit nonzero with valid JSON retained on stdout in -o json.
+
+1Password credentials (see credentials --help) use --params or --spec-file without type:
+1pw_create_access_request: browser_id (vault-bound session ID); optional goal (<=140),
+  reason (<=100), keywords (1-5 strings); reason and keywords only for single-entry
+  credentials. Present the returned onepassword:// approval link and instructions to
+  the account owner unchanged; invoke it once per credential.
+1pw_access_request_status: browser_id; optional timeout_seconds 0-120 (default 10).
+  Check status after the account owner has the approval link.
+1pw_fill: browser_id and the exact page_url of one open login page on a requested
+  origin; entry_id when several approved entries share that origin; optional
+  timeout_ms 1-30000. The extension selects fields and submits. fill_submitted exits 0
+  and does not confirm sign-in; inspect the page. fill_failed and fill_unknown exit
+  nonzero. After fill_unknown, do not retry in the same browser.
+1pw_update_access_token (stored-token credentials only): --spec-file, never --params,
+  with access_token only.
+1pw_recover (credential accounts, no parameters): returns a new 1Password link that
+  recovers a failed account connection. Share it with the account owner, then run
+  credentials connect again with the same key; never delete the item to recover.
+Never retry 1Password operations after failures or uncertain outcomes, and never delete
+and recreate an item to reset an uncertain outcome; stop and tell the user instead.`,
 		Example: `  kernel vaults items invoke user-vault login collect
   kernel vaults items invoke user-vault login fill --spec-file - <<'JSON'
 {"browser_id":"<browser-id>","fields":[{"field":"username","selector":"#username"},{"field":"password","selector":"#password"}]}
 JSON
+  kernel vaults items invoke user-vault github 1pw_create_access_request --params '{"browser_id":"<browser-id>","reason":"Sign in to GitHub"}'
+  kernel vaults items invoke user-vault github 1pw_access_request_status --params '{"browser_id":"<browser-id>","timeout_seconds":60}'
+  kernel vaults items invoke user-vault github 1pw_fill --params '{"browser_id":"<browser-id>","page_url":"https://github.com/login"}'
+  kernel vaults items invoke user-vault github 1pw_fill --params '{"browser_id":"<browser-id>","page_url":"https://github.com/login","entry_id":"<entry-id>"}'
   kernel vaults items invoke checkout order-1 fill --params '{"browser_id":"browser-session-id","page_url":"https://shop.example/checkout","fields":[{"field":"number","selector":"#card-number"}]}' -o json`,
 		RunE: func(cmd *cobra.Command, args []string) error {
 			open, _ := cmd.Flags().GetBool("open")
 			raw, _ := cmd.Flags().GetString("params")
 			paramsSet := cmd.Flags().Changed("params")
+			if args[2] == "1pw_update_access_token" && paramsSet {
+				return fmt.Errorf("1pw_update_access_token accepts the access token only through --spec-file <path|->, never command-line arguments")
+			}
 			if cmd.Flags().Changed("spec-file") {
-				if args[2] != "fill" && args[2] != "prepare_checkout" {
-					return fmt.Errorf("--spec-file is only supported for fill and prepare_checkout")
+				if !vaultOperationTakesParams(args[2]) {
+					return fmt.Errorf("--spec-file is only supported for fill, prepare_checkout, and 1Password operations with parameters")
 				}
 				data, err := readVaultSpecFile(cmd)
 				if err != nil {
@@ -212,8 +245,8 @@ JSON
 			}
 			return getVaultsHandler(cmd).Invoke(cmd.Context(), args[0], args[1], args[2], params, vaultOutput(cmd), open)
 		}}
-	invoke.Flags().String("params", "", "Fill or prepare_checkout parameters JSON (maximum 128 KiB); omit type and credential values")
-	invoke.Flags().String("spec-file", "", "Fill or prepare_checkout parameters JSON file (use '-' for stdin; maximum 128 KiB)")
+	invoke.Flags().String("params", "", "Operation parameters JSON for fill, prepare_checkout, or 1pw_* (maximum 128 KiB); omit type and credential values; 1pw_update_access_token requires --spec-file")
+	invoke.Flags().String("spec-file", "", "Operation parameters JSON file (use '-' for stdin; maximum 128 KiB)")
 	invoke.MarkFlagsMutuallyExclusive("params", "spec-file")
 	invoke.Flags().Bool("open", false, "Open a returned HTTPS action URL in your browser")
 	addVaultJSONOutputFlag(invoke)