> ## Documentation Index
> Fetch the complete documentation index at: https://docs.automate.ax/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Automate.ax automations are TypeScript programs.
> Use Bun for installation and command examples.
> Use Automate.ax for the product name and automate.ax for the package, CLI, and domain.
> Treat documented public APIs as current; do not invent transitional or deprecated names.

# 1Password

> Connect service accounts and Events Reporting tokens to typed 1Password actions.

```ts automations/read-production-secret.automation.ts theme={null}
import { automation, markSignificant, onSchedule } from "automate.ax"
import { onePassword } from "automate.ax/onepassword"

export default automation("Read a rotating secret", () => {
  onSchedule({ schedule: "0 * * * *" })

  const secret = onePassword.resolveSecret({
    secretReference: "op://Production/API/password",
  })
  markSignificant(secret)
})
```

## Choose a 1Password connection

Use a **service account** for secret references, items, files, sharing, vaults, groups, and Environments. Create it in 1Password with only the required vault permissions. Service-account permissions and Environment assignments are immutable. Built-in personal, private, employee, and default shared vaults are unavailable. Vault deletion and group-permission changes work only on vaults created by that service account.

Use an **Events API token** for audit events, item usages, and sign-in attempts. Choose the regional origin shown by 1Password: `events.1password.com`, `events.1password.ca`, `events.1password.eu`, or `events.ent.1password.com`. Automate.ax rejects other origins.

Create named bindings with `onePasswordAccount("name")` or pass `{ account: "name" }` as an action's second argument. `generatePassword` runs locally and needs no account.

## Use secrets in a custom integration

Use `resolveSecret` to supply credentials when you [call an unsupported API](/guides/call-an-external-api#protect-credentials-and-validate-responses). Store each restricted provider credential in a vault available to the connected service account, then pass the sensitive result signal directly to the custom action that needs it.

## Poll Events Reporting

1Password Events Reporting provides cursor-based pull APIs, not webhooks. Use the list actions from a scheduled automation. Begin with optional time bounds and a limit, then persist and pass the returned cursor to continue. The integration does not expose event triggers.

## 1Password results stay sensitive

Resolved secrets, decrypted items, files, generated passwords, Environment variables, share links, recipient identities, vault and group metadata, and event activity are declared sensitive at their action boundaries.

See 1Password's [service-account setup](https://www.1password.dev/service-accounts/get-started), [SDK documentation](https://www.1password.dev/sdks/), and [Events API setup](https://www.1password.dev/events-api/get-started).

## Exports

```ts theme={null}
import {
  onePassword,
  onePasswordAccount,
  getOnePasswordClient,
  getOnePasswordEventsApi,
} from "automate.ax/onepassword"
```

* `onePassword` contains the packaged 1Password actions.
* `onePasswordAccount("name")` selects a named 1Password connection.
* `getOnePasswordClient` creates the authenticated 1Password service-account client for a custom account-backed action.
* `getOnePasswordEventsApi` creates the authenticated 1Password Events Reporting API helper for a custom account-backed action.

## Actions

* [Archive item](/reference/integrations/1password/actions/archive-item)
* [Attach item file](/reference/integrations/1password/actions/attach-item-file)
* [Create item](/reference/integrations/1password/actions/create-item)
* [Create items](/reference/integrations/1password/actions/create-items)
* [Create item share](/reference/integrations/1password/actions/create-item-share)
* [Create vault](/reference/integrations/1password/actions/create-vault)
* [Delete item](/reference/integrations/1password/actions/delete-item)
* [Delete item file](/reference/integrations/1password/actions/delete-item-file)
* [Delete items](/reference/integrations/1password/actions/delete-items)
* [Delete vault](/reference/integrations/1password/actions/delete-vault)
* [Generate password](/reference/integrations/1password/actions/generate-password)
* [Get environment variables](/reference/integrations/1password/actions/get-environment-variables)
* [Get group](/reference/integrations/1password/actions/get-group)
* [Get item](/reference/integrations/1password/actions/get-item)
* [Get items](/reference/integrations/1password/actions/get-items)
* [Get item share policy](/reference/integrations/1password/actions/get-item-share-policy)
* [Get vault](/reference/integrations/1password/actions/get-vault)
* [Get vault overview](/reference/integrations/1password/actions/get-vault-overview)
* [Grant vault group permissions](/reference/integrations/1password/actions/grant-vault-group-permissions)
* [Introspect Events API](/reference/integrations/1password/actions/introspect-events-api)
* [List audit events](/reference/integrations/1password/actions/list-audit-events)
* [List items](/reference/integrations/1password/actions/list-items)
* [List item usages](/reference/integrations/1password/actions/list-item-usages)
* [List sign-in attempts](/reference/integrations/1password/actions/list-sign-in-attempts)
* [List vaults](/reference/integrations/1password/actions/list-vaults)
* [Read item file](/reference/integrations/1password/actions/read-item-file)
* [Replace document](/reference/integrations/1password/actions/replace-document)
* [Resolve secret](/reference/integrations/1password/actions/resolve-secret)
* [Resolve secrets](/reference/integrations/1password/actions/resolve-secrets)
* [Revoke vault group permissions](/reference/integrations/1password/actions/revoke-vault-group-permissions)
* [Update item](/reference/integrations/1password/actions/update-item)
* [Update vault](/reference/integrations/1password/actions/update-vault)
* [Update vault group permissions](/reference/integrations/1password/actions/update-vault-group-permissions)
* [Validate item share recipients](/reference/integrations/1password/actions/validate-item-share-recipients)