1Password · Schema

AuditEvent

Represents an audit event recording an action performed by a team member within the 1Password account.

Password ManagerPasswordsSecuritySecrets

Properties

Name	Type	Description
uuid	string	The unique identifier for the audit event.
timestamp	string	When the action was performed.
actor_uuid	string	The UUID of the user who performed the action.
actor_details	object
action	string	The type of action that was performed.
object_type	string	The type of object the action was performed on.
object_uuid	string	The UUID of the object the action was performed on.
object_details	object	Additional details about the object of the action.
aux_id	integer	An auxiliary identifier providing additional context.
aux_uuid	string	An auxiliary UUID providing additional context.
aux_details	object	Additional auxiliary details about the event.
aux_info	string	Additional auxiliary information about the event.
session	object	Information about the session in which the action occurred.
location	object

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/1password/refs/heads/main/json-schema/1password-events-audit-event-schema.json",
  "title": "AuditEvent",
  "description": "Represents an audit event recording an action performed by a team member within the 1Password account.",
  "type": "object",
  "properties": {
    "uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The unique identifier for the audit event."
    },
    "timestamp": {
      "type": "string",
      "format": "date-time",
      "description": "When the action was performed."
    },
    "actor_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The UUID of the user who performed the action."
    },
    "actor_details": {
      "$ref": "#/components/schemas/EventUser"
    },
    "action": {
      "type": "string",
      "description": "The type of action that was performed."
    },
    "object_type": {
      "type": "string",
      "description": "The type of object the action was performed on."
    },
    "object_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The UUID of the object the action was performed on."
    },
    "object_details": {
      "type": "object",
      "description": "Additional details about the object of the action."
    },
    "aux_id": {
      "type": "integer",
      "description": "An auxiliary identifier providing additional context."
    },
    "aux_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "An auxiliary UUID providing additional context."
    },
    "aux_details": {
      "type": "object",
      "description": "Additional auxiliary details about the event."
    },
    "aux_info": {
      "type": "string",
      "description": "Additional auxiliary information about the event."
    },
    "session": {
      "type": "object",
      "description": "Information about the session in which the action occurred.",
      "properties": {
        "uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the session."
        },
        "login_time": {
          "type": "string",
          "format": "date-time",
          "description": "When the session was created."
        },
        "device_uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the device used."
        },
        "ip": {
          "type": "string",
          "description": "The IP address of the client."
        }
      }
    },
    "location": {
      "$ref": "#/components/schemas/EventLocation"
    }
  }
}