Skip to main content
As of Feb 27, 2025, all 1Password customers have unlimited access to Connect.
A Connect server is a type of Secrets Automation workflow that allows you to securely access your 1Password items and vaults in your company’s apps and cloud infrastructure using a private REST API provided by 1Password Connect Server.You can use 1Password.com or the Connect REST API to:

​
Manage permissions

With 1Password Business or 1Password Teams, you can manage Connect server permissions with groups, or more granularly, with environments. This allows for enforcement of security best practices. Learn more about Connect security.
You can also manage group access using automated provisioning.

​
Manage global permissions

Groups allow you to specify one or more users who can access Connect servers.To assign groups (such as Owners and Administrators) to manage Connect servers:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Permissions at the top of the page, then select Secrets Automation.
  4. In the Managers section, select Manage, then choose the groups you want to manage Connect servers.
  5. Select Update Groups.
Manage Secrets Automation managers

​
Manage environment permissions

Environments allow you to override global permissions (with groups) for a specific Connect server environment. To assign groups (such as Owners and Administrators) to manage a specific Connect server:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Permissions at the top of the page, then select Secrets Automation.
  4. In the Environments section, select Manage.
  5. In the Permissions section, select Manage, then choose the groups you want to manage Connect servers in the environment.
  6. Select Update Groups.

​
Manage access tokens

You can use Connect server access tokens to authenticate with your Connect server in your applications and services.

​
Create a token

To create a Connect server access token:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment where you want to create an access token.
  4. Select New Token.
  5. Follow the onscreen instructions to issue the token.
You can’t edit the vaults a token can access after you create it. If you want to change the vaults a token can access, you must revoke the token and create a new one.
Connect server access tokens support up to 100 vaults each. If you grant a Connect token access to more than 100 vaults, the server may reject requests.

​
Set a token expiration

When you create a Connect server access token, you can set the token’s expiration time to 30, 90, or 180 days. When the expiration time elapses, 1Password revokes the token. To create a token with an expiration date:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment where you want to create an access token.
  4. Select New Token.
  5. Set the “Expires After” to 30 days, 90 days, or 180 days.
  6. Follow the onscreen instructions.

​
Revoke a token

To revoke a Connect server access token:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment where you want to manage access tokens.
  4. Select next to the token you want to revoke, then select Revoke.

​
Rename a token

To rename a Connect server access token:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment where you want to manage access tokens.
  4. Select next to the token you want to rename, then select Rename and enter a new name.

​
Grant or revoke access to vaults

To grant or revoke access to vaults:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment where you want to grant or revoke access to vaults.
  4. In the Vaults section, select Manage and choose the vaults you want to add or remove.
  5. Select Update Vaults.
You can’t grant Connect servers access to your built-in Personal, Private, or Employee vault, or your default Shared vault.
Manage which vaults have access to each token

​
Monitor item usage

Connect servers send reports about item usage to the 1Password server every time an item is accessed so you can monitor item usage.
Item usage information might take a few hours to sync with 1Password.com.
To view item usage for a Connect server:
  1. Sign in to your account on 1Password.com.
  2. Select Developer in the sidebar.
  3. Select Connect servers at the top of the page, then choose the Secrets Automation environment (Connect server) you want to monitor.
  4. Under Version, select More Actions > View Item Usage Report.
For more information, visit Create reports in 1Password Business.

​
About Connect server item usage

Items accessed through a Connect server update specific fields in the following manner:
  • The Action field in the report always shows Display.
  • The Used by field always includes the name of the Connect server (not the Connect server access token).
Connect servers only report item usage when they have a working connection to the 1Password server. If a Connect server can’t reach the 1Password server (for example, when it updates or restarts), it might lose item usage information from that time period. Item usage reporting continues when the Connect server has a working connection to the 1Password server again.