vocabulary: "1.0.0" info: provider: 1Password description: >- Unified taxonomy of the 1Password API ecosystem, mapping operational dimensions (Connect Server, Events, and Partnership APIs) and capability dimensions (workflows, personas, tools) into a single reference vocabulary. created: "2026-04-19" modified: "2026-04-19" operational: apis: - name: 1Password Connect Server API namespace: 1password-connect version: "1.5.7" baseUrl: http://localhost:8080/v1 status: active - name: 1Password Events API namespace: 1password-events version: "1.0" baseUrl: https://events.1password.com status: active - name: 1Password Partnership API namespace: 1password-partnership version: "1.0" baseUrl: https://billing.b5test.eu/api/v1 status: active resources: - name: vaults description: 1Password vaults containing items and secrets api: 1password-connect actions: [list, get] - name: items description: Credentials, secure notes, and other secrets stored in vaults api: 1password-connect actions: [list, get, create, update, delete, patch] - name: files description: Files attached to vault items api: 1password-connect actions: [list, get, download] - name: sign-in-events description: Sign-in attempt events for security monitoring api: 1password-events actions: [query] - name: item-usage-events description: Item usage events for compliance and auditing api: 1password-events actions: [query] - name: audit-events description: Audit trail events for security compliance api: 1password-events actions: [query] - name: partner-accounts description: Partner billing accounts for 1Password customers api: 1password-partnership actions: [create, delete] actions: - name: list http_method: GET pattern: read - name: get http_method: GET pattern: read - name: create http_method: POST pattern: write - name: update http_method: PUT pattern: write - name: patch http_method: PATCH pattern: write - name: delete http_method: DELETE pattern: destructive - name: query http_method: POST pattern: read schemas: core: - name: Vault description: A 1Password vault containing items - name: Item description: A 1Password item (login, note, document, etc.) - name: Field description: A field within an item security: - name: SignInAttempt description: A sign-in attempt event record - name: ItemUsage description: An item access or usage event record - name: AuditEvent description: An audit trail event partners: - name: Account description: A partner-managed billing account parameters: pagination: - name: cursor description: Cursor for paginated event queries - name: limit description: Number of records per page identifiers: - name: vaultUuid description: Unique vault identifier - name: itemUuid description: Unique item identifier filters: - name: filter description: Filter vaults or items by name attribute authentication: schemes: - name: ConnectToken type: http scheme: bearer apis: [1password-connect] - name: ServiceAccountToken type: http scheme: bearer apis: [1password-events] - name: PartnerToken type: http scheme: bearer apis: [1password-partnership] capability: workflows: - name: 1Password Secrets Management file: capabilities/1password-secrets-management.yaml description: Unified secrets management, security monitoring, and account provisioning apis: - 1password-connect - 1password-events - 1password-partnership tools: 11 personas: - DevOps Engineer - Security Operations - 1Password Partner personas: - id: devops-engineer name: DevOps Engineer description: Manages secrets injection into applications and infrastructure using Connect Server workflows: - 1Password Secrets Management - id: security-operations name: Security Operations description: Monitors sign-in events, item usage, and audit logs for security compliance workflows: - 1Password Secrets Management - id: 1password-partner name: 1Password Partner description: Provisions and manages 1Password accounts for partner customers workflows: - 1Password Secrets Management domains: - name: Secrets Management description: Vault and item CRUD operations via Connect Server resources: [vaults, items, files] - name: Security Monitoring description: Event streaming for sign-ins, item usage, and audit trails resources: [sign-in-events, item-usage-events, audit-events] - name: Partner Management description: Account provisioning for 1Password partners resources: [partner-accounts] namespaces: consumed: - name: 1password-connect baseUri: http://localhost:8080/v1 - name: 1password-events baseUri: https://events.1password.com - name: 1password-partnership baseUri: https://billing.b5test.eu/api/v1 rest: - name: 1password-secrets-api port: 8080 mcp: - name: 1password-secrets-mcp port: 9090 transport: http binds: - name: CONNECT_TOKEN description: 1Password Connect Server bearer token workflows: [1Password Secrets Management] - name: EVENTS_TOKEN description: 1Password Events API service account token workflows: [1Password Secrets Management] - name: PARTNERSHIP_TOKEN description: 1Password Partnership API bearer token workflows: [1Password Secrets Management] crossReference: - resource: items operations: - method: GET path: /vaults/{vaultUuid}/items - method: POST path: /vaults/{vaultUuid}/items - method: GET path: /vaults/{vaultUuid}/items/{itemUuid} - method: PUT path: /vaults/{vaultUuid}/items/{itemUuid} - method: DELETE path: /vaults/{vaultUuid}/items/{itemUuid} workflows: [1Password Secrets Management] personas: [DevOps Engineer] - resource: sign-in-events operations: - method: POST path: /api/v1/signinattempts workflows: [1Password Secrets Management] personas: [Security Operations] - resource: partner-accounts operations: - method: POST path: /accounts workflows: [1Password Secrets Management] personas: [1Password Partner]