Skip to main content

1Password Events Reporting API

The 1Password Events API allows you to retrieve information about activity in your 1Password Business account and send it to your security information and event management (SIEM) system. With the Events API, you can keep track of:

  • Actions team members take in the account, such as changes to vaults, groups, users, and more.
  • How and when items in shared vaults are used, like when an item is viewed, copied, or edited.
  • Attempts to sign in to the 1Password account, including when and where a user signed in to the account, and detailed information about failed sign in attempts.

Get started

  1. Sign up for 1Password Business.
  2. Set up an Events Reporting integration in your account. You'll need to be an account owner or administrator.
  3. Create a bearer token and select the event features it can access.
  4. Connect your 1Password account to your SIEM.
  5. Create a usage report for a team member or vault.

After you set up your integration, read more about the 1Password Events API and take a look at some example scripts.

Reference documentation

Was this page helpful?