logi-approval

Name: logi-approval
Author: 1pass.dev

Local

docs.1pass.devSecurity0Updated 12w ago

Repository Visit website

About logi-approval

logi-approval is a logi / 1pass plugin for agents that pauses high-risk actions until a human approves them on a phone using Face ID or a passkey. It is intended for agent users who need a human approval gate before sensitive actions.

Key features

01Phone-based human approval
02Face ID or passkey verification
03Gate for high-risk agent actions

Use cases

01Require approval before a sensitive agent action
02Confirm an action with Face ID on a phone
03Use passkey approval for an agent workflow

MCP support

Bundles the `@logi-auth/mcp-approval` MCP server, which supports the phone-based approval flow.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "dev-1pass-logi-approval": {
      "command": "npx",
      "args": [
        "-y",
        "@logi-auth/mcp-approval"
      ],
      "env": {
        "LOGI_AGENT_TOKEN": "<LOGI_AGENT_TOKEN>",
        "LOGI_AGENT_PUBLIC_ID": "<LOGI_AGENT_PUBLIC_ID>",
        "LOGI_AGENT_PRIVATE_KEY": "<LOGI_AGENT_PRIVATE_KEY>",
        "LOGI_API_URL": "<LOGI_API_URL>"
      }
    }
  }
}

Run commandnpx -y @logi-auth/mcp-approval

Environment variables to set

LOGI_AGENT_TOKENSecretBearer token issued at agent registration (start.1pass.dev developer console).

LOGI_AGENT_PUBLIC_IDPublic agent id (agt_...).

LOGI_AGENT_PRIVATE_KEYSecretEd25519 private key PEM for signed mode (recommended).

LOGI_API_URLlogi API base URL. Defaults to https://api.1pass.dev.

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npm@logi-auth/mcp-approval0.1.2stdio

Tools

Saved tool list · updated 2w ago

Parameter	Type	Required
body	string	Yes
title	string	Yes
context	object	No
action_type	string	Yes
ttl_seconds	number	No
wait_for_decision	boolean	No

Details

From the project README

logi (1pass) — Claude Code plugins

Agent plugins for logi / 1pass, the passkey-first sign-in service.

Plugin	What it does
logi-integrate	Integrate 1pass sign-in into your app — a skill that walks the agent through RP registration and OIDC integration, plus the `@1pass/mcp` server for managing your apps, redirect URIs, and docs lookup.
logi-approval	Agent Approval Gate — the agent asks a human for Face ID / passkey approval on their phone before performing a high-risk action. Bundles `@logi-auth/mcp-approval`.

Install (Claude Code)

claude plugin marketplace add dcode-co/logi-plugins
claude plugin install logi-integrate@logi
claude plugin install logi-approval@logi   # optional

Then set the env vars each server needs:

logi-integrate: LOGI_API_KEY — a Personal API Key from start.1pass.dev (Settings → API Keys).
logi-approval: LOGI_AGENT_TOKEN, LOGI_AGENT_PUBLIC_ID (and LOGI_AGENT_PRIVATE_KEY for signed mode) — see the Agent Approval quickstart.

Other agent clients (Cursor, Codex, Copilot, …)

The skills follow the open Agent Skills format — copy any plugins/*/skills/<name>/ directory into your client's skills directory. Add the MCP servers with your client's MCP configuration using the same npx commands found in each plugin's .mcp.json.

Single-file skill install without the plugin system:

curl -fsSL https://docs.1pass.dev/skills/logi-rp-integrate/SKILL.md \
  -o ~/.claude/skills/logi-rp-integrate/SKILL.md --create-dirs

Docs

Integration guides: https://docs.1pass.dev
LLM-readable docs: https://docs.1pass.dev/llms.txt

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.