slug: passage-1password
provider: Passage by 1Password
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 4
edges:
- tag: Devices
  spec_file: passage-1password-devices-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: GET /apps/{app_id}/users/{user_id}/devices listUserDevices; schema WebAuthnDevice — "passwordless
    / passkey authentication platform"
  reason: Management of a user's registered WebAuthn authenticator devices is part of identity and access
    management (authentication credential lifecycle).
- tag: Magic Links
  spec_file: passage-1password-magic-links-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: POST /apps/{app_id}/magic-links createMagicLink Create a magic link; schemas MagicLink, CreateMagicLinkRequest
  reason: Issuing magic links is a passwordless authentication credential mechanism, squarely Identity
    & Access Management.
- tag: Tokens
  spec_file: passage-1password-tokens-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: DELETE /apps/{app_id}/users/{user_id}/tokens revokeUserRefreshTokens Revoke a user's refresh
    tokens
  reason: Session/refresh-token revocation for authenticated users is an access management function.
- tag: Users
  spec_file: passage-1password-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: createUser, activateUser, deactivateUser — "Server-side REST Management API for Passage by
    1Password, the passwordless / passkey authentication platform"
  reason: CRUD plus activation/deactivation of authentication user accounts is identity lifecycle management,
    not customer master data.