{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/1password/json-schema/1password-audit-event-response-schema.json",
  "title": "AuditEventResponse",
  "description": "The response containing audit event records and a cursor for pagination.",
  "x-generated": "2026-11-10",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/1password-audit-events-api-openapi.yml#/components/schemas/AuditEventResponse",
  "type": "object",
  "properties": {
    "cursor": {
      "type": "string",
      "description": "A cursor to use in the next request to continue fetching events."
    },
    "has_more": {
      "type": "boolean",
      "description": "Whether there are more events available to fetch using the cursor."
    },
    "items": {
      "type": "array",
      "description": "The list of audit event records.",
      "items": {
        "$ref": "#/$defs/AuditEvent"
      }
    }
  },
  "$defs": {
    "AuditEvent": {
      "type": "object",
      "description": "Represents an audit event recording an action performed by a team member within the 1Password account.",
      "properties": {
        "uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The unique identifier for the audit event."
        },
        "timestamp": {
          "type": "string",
          "format": "date-time",
          "description": "When the action was performed."
        },
        "actor_uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the user who performed the action."
        },
        "actor_details": {
          "$ref": "#/$defs/EventUser"
        },
        "action": {
          "type": "string",
          "description": "The type of action that was performed."
        },
        "object_type": {
          "type": "string",
          "description": "The type of object the action was performed on."
        },
        "object_uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The UUID of the object the action was performed on."
        },
        "object_details": {
          "type": "object",
          "description": "Additional details about the object of the action."
        },
        "aux_id": {
          "type": "integer",
          "description": "An auxiliary identifier providing additional context."
        },
        "aux_uuid": {
          "type": "string",
          "format": "uuid",
          "description": "An auxiliary UUID providing additional context."
        },
        "aux_details": {
          "type": "object",
          "description": "Additional auxiliary details about the event."
        },
        "aux_info": {
          "type": "string",
          "description": "Additional auxiliary information about the event."
        },
        "session": {
          "type": "object",
          "description": "Information about the session in which the action occurred.",
          "properties": {
            "uuid": {
              "type": "string",
              "format": "uuid",
              "description": "The UUID of the session."
            },
            "login_time": {
              "type": "string",
              "format": "date-time",
              "description": "When the session was created."
            },
            "device_uuid": {
              "type": "string",
              "format": "uuid",
              "description": "The UUID of the device used."
            },
            "ip": {
              "type": "string",
              "description": "The IP address of the client."
            }
          }
        },
        "location": {
          "$ref": "#/$defs/EventLocation"
        }
      }
    },
    "EventLocation": {
      "type": "object",
      "description": "Geographic location information associated with an event.",
      "properties": {
        "country": {
          "type": "string",
          "description": "The two-letter ISO country code.",
          "minLength": 2,
          "maxLength": 2
        },
        "region": {
          "type": "string",
          "description": "The region or state."
        },
        "city": {
          "type": "string",
          "description": "The city name."
        },
        "latitude": {
          "type": "number",
          "format": "double",
          "description": "The latitude coordinate."
        },
        "longitude": {
          "type": "number",
          "format": "double",
          "description": "The longitude coordinate."
        }
      }
    },
    "EventUser": {
      "type": "object",
      "description": "Represents a user involved in an event.",
      "properties": {
        "uuid": {
          "type": "string",
          "format": "uuid",
          "description": "The unique identifier of the user."
        },
        "name": {
          "type": "string",
          "description": "The name of the user."
        },
        "email": {
          "type": "string",
          "format": "email",
          "description": "The email address of the user."
        }
      }
    }
  }
}