Description

A service account API token is generally found in a base64 encoded string. The contents when decoded will be close to the example found below. A service account (and related API token) can only be used to access a single vault and its content.

Example of decoded API token (this is not a valid token, values have been changed.)

{
   "signInAddress":"utexas.1password.com",
   "userAuth":{
      "method":"SRPr-4096",
      "alg":"PBES2h-HS256",
      "iterations":650000,
      "salt":"EAviE5tg7kXNQ8Um5NgiFQ"
   },
   "email":"7qu55tbcjwwpk@1passwordserviceaccounts.com",
   "srpX":"584rg65sdf81234s6r5gsr84sffght3s4rv3s4f3s84r4f8r84g6a3rg34",
   "muk":{
      "alg":"A256GCM",
      "ext":true,
      "k":"6sg485rvsGR1V6864grfegfS864E84F",
      "key_ops":[
         "encrypt",
         "decrypt"
      ],
      "kty":"oct",
      "kid":"mp"
   },
   "secretKey":"A3-364EDB-BV697D-YNKJB-Z7A8Z-GNZ4N-SF4C5",
   "throttleSecret":{
      "seed":"646fesfag5rs6gs4f84684vrsrfrdagrd464vrs446s4f6rs4avr8",
      "uuid":"D4G68VR8846G8Z6E464ZSZG8E"
   },
   "deviceUuid":"rg54s68efe86s4f8ev48"
}

(1P/DC) Service Account API Token Structure and Example

Description