generated: '2026-06-20'
method: derived
source: openapi/1password-connect-openapi.yml, openapi/1password-events-openapi.yml, openapi/1password-partnership-openapi.yml
standards:
  - id: oauth2
    conforms: false
    evidence: All three APIs use HTTP bearer tokens (Connect access tokens / Events API tokens), not OAuth2 authorization flows.
  - id: oidc
    conforms: false
  - id: http-bearer
    conforms: true
    evidence: securitySchemes bearerAuth (type http, scheme bearer, JWT) across all three specs.
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use a custom JSON envelope (status + message [+ code for Partnership]) with application/json, not application/problem+json.
  - id: cursor-pagination
    conforms: true
    evidence: Events API uses cursor-based pagination (request cursor/limit/start_time; response cursor + has_more).
  - id: rate-limit-signaling
    conforms: true
    evidence: Events API returns 429 Too Many Requests (TooManyRequests response component).
  - id: openapi-3.1
    conforms: true
    evidence: All three specs declare openapi 3.1.0.
  - id: scim
    conforms: false
  - id: fhir
    conforms: false
  - id: json-api
    conforms: false