AI agents are playing an increasing role in software development. They are also creating a host of new security concerns.
Toronto-based 1Password has expanded its work with Silicon Valley AI giant OpenAI in an attempt to help businesses deploy autonomous AI agents to securely build products.
“As coding agents take on more of the software development lifecycle, the question isn’t whether to give them access, but how.”
Nancy Wang, 1Password
Like other agents or users, OpenAI’s software engineering assistant Codex requires login credentials to tap into databases, application programming interfaces, and deployment pipelines. Per 1Password, “that access is often managed by copying credentials into local files, passing them through prompts, or hardcoding them into repositories where they can be easily exfiltrated.”
1Password claims it has developed a more secure approach: the cybersecurity company announced a new Codex integration today that allows developers to grant Codex access to credentials directly inside their workflows without putting them directly into prompts or files.
The company is doing this through its new 1Password Environments Model Context Protocol (MCP) Server for Codex, which it claims “ensures secrets never leave 1Password” with the help of a secure runtime environment where those credentials are “mounted, used, and discarded,” with user authentication required at access.
“As coding agents take on more of the software development lifecycle, the question isn’t whether to give them access, but how,” 1Password CTO Nancy Wang said in a news release. “A credential that persists is already compromised. That’s why just-in-time credentials are the only viable security model for AI-native development.”
RELATED: 1Password launches new platform to rein in companies’ AI agents
Founded in 2005 and formally known as AgileBits, 1Password is one of Canada’s most valuable tech companies. It sells identity security and access management software that helps individuals and corporate clients like Asana, Canva, Figma, GitHub, Hugging Face, Notion, Salesforce, Stripe, and Wiz.
In recent years, 1Password has evolved from a consumer-facing password manager to a broader digital security platform for businesses. The 1,400-person company, which surpassed $400 million USD in annual recurring revenue last year while remaining free cash flow-positive, now serves more than 180,000 companies, stores 1.3 billion human and machine credentials, and is used by one million developers.
As 1Password CEO David Faugno told BetaKit last year, 1Password sees “a huge opportunity” in helping businesses navigate the security considerations associated with AI, and has been leaning into this “aggressively,” including via its recently launched Unified Access Platform.
Feature image courtesy 1Password.
The post OpenAI partners with 1Password to secure coding agent Codex first appeared on BetaKit.
