Credentials. This flow touches your 1Password vault and login secrets, so only point it at sites you own and check which vault items the agent can reference.
Who it is forA developer who uses 1Password and wants an agent to log into a site without being given the password or 2-step code.
The problemAgents need to log in to reach pages, but handing them passwords or one-time codes is a security risk.
The outcomeChrome Relay types the password, 2-step code or passkey from your shared 1Password vault into the login page, and the agent only sees the result of the sign-in.
What you need first
- A Mac with macOS and Google Chrome
- Go 1.25 or newer (`brew install go`)
- Chrome Relay extension installed from the Chrome Web Store and pinned in each Chrome profile agents should use
- Optional: Xcode command line tools for 1Password and Secure Enclave passkeys
- Optional: 1Password, for sign-ins and op:// references
- Optional: the Chrome Relay Approve iPhone app from TestFlight, for approvals away from the Mac
Steps
- Build with Xcode command line tools installed (
xcode-select --install), then run./buildand./chrome-relay setup - Install and pin the Chrome Relay extension in the profile you use for the site
- Use an op:// reference for the secret field, for example
chrome-relay fill <field> op://<vault>/<item>/<field>(inferred, check the README) - Run the login step and check the page with
chrome-relay snapshot --text(inferred, check the README)
Prompt for your agent
Using the Chrome Relay repo at aindeev/agent-chrome-relay, sign in to <site URL> by filling the password field with an op:// reference from 1Password, never printing the value. Expected output: the signed-in page's title. Verify that the title matches <expected title> before reporting success.
Caveat. The README says 1Password is the only password manager supported for now, and passkeys and the Secure Enclave need the Xcode command line tools.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Disclaimer
Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked "Seen in the wild", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email [email protected] and we will look at it promptly. Full disclaimer page