Integration · Security and identity
AI agents for 1Password
Watch a 1Password Business account's security activity through the Events API.
- Actions
- 4
- Read
- 4
- Write
- 0
Actions
What your agents can do in 1Password
Watch a 1Password Business account's security activity through the Events API: sign-in attempts (successes, failures, unusual locations), who used, copied or shared which vault items, and admin audit events (people invited, suspended or removed, vault and group changes). Read-only; it never sees vault contents.
Read 4
Look things up. Nothing changes.
List sign-in attempts
Reads sign-in attempts to the 1Password account in a time window (the last 120 days at most; one hour back when no start is given), oldest first.
List item usage
Reads who used shared vault items in a time window (the last 120 days at most), oldest first.
List audit events
Reads admin and account changes in a time window (the last 120 days at most), oldest first.
Check what the token can read
Reads the Events API token's own details: uuid, issued_at, account_uuid and features (which of signinattempts, itemusages and auditevents it may read).
Write 0
Create, change or send.
This tool only reads, so nothing in it changes.
Read only
Every action here only reads, so an agent can look things up in 1Password but cannot change anything there.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Paste an API key from your 1Password account.
What you enter
- Bearer token
Settings
- Events API server
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your 1Password data
Ask a question in plain words. The agent can list sign-in attempts, list item usage or list audit events in 1Password, then answers with what it found.
- 02
Share what it finds in Slack
Give one agent 1Password and Slack: it can list sign-in attempts in 1Password and post a summary to a Slack channel in the same run.
- 03
Run it as a workflow step
Add "List sign-in attempts" to a workflow, and it runs in 1Password the same way every time, with or without an agent.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- Google Workspace Admin9 actionsManage people and groups in a Google Workspace domain.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- Vanta8 actionsTrack compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
FAQ
1Password and MyDeepAgents
Can MyDeepAgents connect to 1Password?
Yes. The 1Password connector has 4 actions, all of which only read. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect 1Password?
Paste an API key from your 1Password account. You'll need: Bearer token. The connection also asks for: Events API server. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in 1Password without asking?
No. Every 1Password action only reads, so an agent can look things up there but cannot change anything.
Can I use 1Password in workflows as well as agents?
Yes. Every 1Password action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put 1Password to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.