AuditEvent

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/1password/refs/heads/main/json-schema/1password-events-audit-event-schema.json",
  "title": "AuditEvent",
  "description": "Represents an audit event recording an action performed by a team member within the 1Password account.",
  "type": "object",
  "properties": {
    "uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The unique identifier for the audit event."
    },
    "timestamp": {
      "type": "string",
      "format": "date-time",
      "description": "When the action was performed."
    },
    "actor_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The UUID of the user who performed the action."
    },
    "actor_details": {
      "$ref": "#/components/schemas/EventUser"
    },
    "action": {
      "type": "string",
      "description": "The type of action that was performed."
    },
    "object_type": {
      "type": "string",
      "description": "The type of object the action was performed on."
    },
    "object_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "The UUID of the object the action was performed on."
    },
    "object_details": {
      "type": "object",
      "description": "Additional details about the object of the action."
    },
    "aux_id": {
      "type": "integer",
      "description": "An auxiliary identifier providing additional context."
    },
    "aux_uuid": {
      "type": "string",
      "format": "uuid",
      "description": "An auxiliary UUID providing additional context."
    },
    "aux_details": {
      "type": "object",
      "description": "Additional auxiliary details about the event."
    },
    "aux_info": {
      "type": "string",
      "description": "Additional auxiliary information about the event."
    },
    "session": {
      "type": "object",
      "description": "Information about the session in which the action occurred.",
      "properties": {
        "uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the session."
        },
        "login_time": {
          "type": "string",
          "format": "date-time",
          "description": "When the session was created."
        },
        "device_uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the device used."
        },
        "ip": {
          "type": "string",
          "description": "The IP address of the client."
        }
      }
    },
    "location": {
      "$ref": "#/components/schemas/EventLocation"
    }
  }
}