Skip to main content
POST
/
api
/
v2
/
auditevents
curl --request POST \
  --url https://events.1password.com/api/v2/auditevents \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "cursor": "aGVsbG8hIGlzIGl0IG1lIHlvdSBhcmUgbG9va2luZyBmb3IK"
}
'
{
  "items": [
    {
      "uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "timestamp": "2020-06-11T16:32:50-03:00",
      "actor_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "actor_details": {
        "uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
        "name": "Jack O'Neill",
        "email": "jsmith@example.com"
      },
      "actor_account_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "account_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "object_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "object_details": {
        "uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
        "name": "Jack O'Neill",
        "email": "jsmith@example.com"
      },
      "aux_id": 123,
      "aux_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
      "aux_details": {
        "uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
        "name": "Jack O'Neill",
        "email": "jsmith@example.com"
      },
      "aux_info": "<string>",
      "session": {
        "uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
        "login_time": "2020-06-11T16:32:50-03:00",
        "device_uuid": "56YE2TYN2VFYRLNSHKPW5NVT5E",
        "ip": "13.227.95.22"
      },
      "location": {
        "country": "CA",
        "region": "Ontario",
        "city": "Toronto",
        "longitude": 43.64,
        "latitude": -79.433
      }
    }
  ],
  "cursor": "aGVsbG8hIGlzIGl0IG1lIHlvdSBhcmUgbG9va2luZyBmb3IK",
  "has_more": true
}

Authorizations

​
Authorization
string
header
required

A JWT SA token issued to this service

Body

application/json

Cursor

​
cursor
string

Cursor to fetch more data if available or continue the polling process if required

Example:

"aGVsbG8hIGlzIGl0IG1lIHlvdSBhcmUgbG9va2luZyBmb3IK"

Response

Audit events response object

An object wrapping cursor properties and a list of audit events

​
items
object[]
​
cursor
string

Cursor to fetch more data if available or continue the polling process if required

Example:

"aGVsbG8hIGlzIGl0IG1lIHlvdSBhcmUgbG9va2luZyBmb3IK"

​
has_more
boolean

Whether there may still be more data to fetch using the returned cursor. If true, the subsequent request could still be empty.