1Password

1Password is a comprehensive password management and secrets management platform that securely stores and manages sensitive information for individuals and teams. It provides secure vault infrastructure for storing passwords, credentials, API keys, certificates, credit card information, identity documents, medical records, software licenses, secure notes, and other confidential data. Organizations use 1Password for credential management, secrets rotation, privileged access management, and secure sharing of sensitive information across teams.

Category	Secrets management
Direction	Query source
Sign-in	Connect Token
Query languages	SQLite
Tables	11
Query templates	50
Website	1password.com

Before you start

Huntbase signs in to 1Password with Connect Token. Create the credential in 1Password first, then keep it to hand for the Connect step.

1. Sign in to 1Password.com, go to Developer › Directory, select Other under Infrastructure Secrets Management, then select Create a Connect server. Skip this if you already run a Connect server.
2. Follow the onscreen instructions to create the Secrets Automation environment, choose the vaults it can access, and deploy the Connect server with its 1password-credentials.json file.
3. To issue a token for Huntbase, go to Developer › Connect servers, choose your environment, select New Token, and follow the onscreen instructions.
4. Copy the token and save it in 1Password.

Permissions:

• Access is limited to the vaults you grant the token. Grant only the vaults Huntbase should read.

Watch out for

• You can't change which vaults a token can access after you create it. Issue a new token instead.
• Connect servers can't access the built-in Personal, Private or Employee vault, or the default Shared vault.

For the vendor's own instructions, see 1Password Connect server management.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect 1Password

1. Go to Connections and click New connection, or click New connection on the 1Password product page.
2. On Product, pick 1Password and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings

Where your 1Password lives:

Field	Required	Notes
Connect Host URL	No	The address of your self-hosted Connect server, not 1Password.com. The server listens on port 8080 by default, such as http://connect.example.internal:8080.

Credentials

The only Method is Connect Token. Enter a Credential label (for example Production), then fill in:

Field	Required	Notes
Connect Token	Yes	Secret — not shown again after you save it.

Query it

Once connected, 1Password can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 11 tables listed below, alongside every other connected source.

Example: SQLite

Get the number of identities for each occupation — Explore the distribution of identities across different occupations.

select
  occupation,
  count(*)
from
  onepassword_item_identity
group by
  occupation;

1Password ships with 50 query templates. Find them in Library › Queries — see Query templates.

Tables

1Password adds 11 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 11 tables

Table	Contains
onepassword_item	Retrieve information about your items.
onepassword_item_api_credential	Retrieve information about your API credentials.
onepassword_item_credit_card	Retrieve information about your credit cards.
onepassword_item_file	Retrieve information about your files.
onepassword_item_identity	Retrieve information about your identities.
onepassword_item_login	Retrieve information about your logins.
onepassword_item_medical_record	Retrieve information about your medical records.
onepassword_item_password	Retrieve information about your passwords.
onepassword_item_secure_note	Retrieve information about your secure notes.
onepassword_item_software_license	Retrieve information about your software licenses.
onepassword_vault	Retrieve information about your vaults.

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog