I believe 1Password has a sort of MCP server now as well, have you tried that out? I'm curious how well that works in place of using the CLI like this

Proton Pass with `pass-cli` has a similar thing, for anyone using that. You can give agents an expirable token and get an audit log of what item was read and when.

1Password + `op` cli is a good alternative choice here.