1Password · Arazzo Workflow

1Password Decommission an Item

Version 1.0.0

Confirm an item exists, then permanently delete it from its vault.

1 workflow 1 source API 1 provider

View Spec View on GitHub Password ManagerPasswordsSecuritySecretsArazzoWorkflows

Provider

1password

Workflows

decommission-item

Verify an item exists and then permanently delete it from its vault.

Reads the target item to confirm it exists and capture its title for the audit trail, then permanently deletes the item from its vault.

2 steps inputs: itemUuid, vaultUuid outputs: deletedItemId, deletedTitle

confirmItem

getItemById

Read the target item to confirm it exists and capture its title before deletion.

deleteItem

Permanently delete the confirmed item from its vault. This action cannot be undone.

Source API Descriptions

openapi

connectApi https://raw.githubusercontent.com/api-evangelist/1password/refs/heads/main/openapi/1password-connect-openapi.yml

Arazzo Workflow Specification

arazzo: 1.0.1
info:
  title: 1Password Decommission an Item
  summary: Confirm an item exists, then permanently delete it from its vault.
  description: >-
    A safe deletion pattern for 1Password Connect. The workflow first reads the
    target item to confirm it exists and to capture identifying metadata for the
    audit trail, then permanently deletes the item from its vault. Each step
    spells out its request inline so the flow can be read and executed without
    opening the underlying OpenAPI description.
  version: 1.0.0
sourceDescriptions:
- name: connectApi
  url: ../openapi/1password-connect-openapi.yml
  type: openapi
workflows:
- workflowId: decommission-item
  summary: Verify an item exists and then permanently delete it from its vault.
  description: >-
    Reads the target item to confirm it exists and capture its title for the
    audit trail, then permanently deletes the item from its vault.
  inputs:
    type: object
    required:
    - vaultUuid
    - itemUuid
    properties:
      vaultUuid:
        type: string
        description: The UUID of the vault containing the item.
      itemUuid:
        type: string
        description: The UUID of the item to decommission.
  steps:
  - stepId: confirmItem
    description: >-
      Read the target item to confirm it exists and capture its title before
      deletion.
    operationId: getItemById
    parameters:
    - name: vaultUuid
      in: path
      value: $inputs.vaultUuid
    - name: itemUuid
      in: path
      value: $inputs.itemUuid
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      itemId: $response.body#/id
      title: $response.body#/title
  - stepId: deleteItem
    description: >-
      Permanently delete the confirmed item from its vault. This action cannot
      be undone.
    operationId: deleteItem
    parameters:
    - name: vaultUuid
      in: path
      value: $inputs.vaultUuid
    - name: itemUuid
      in: path
      value: $steps.confirmItem.outputs.itemId
    successCriteria:
    - condition: $statusCode == 204
    outputs:
      statusCode: $statusCode
  outputs:
    deletedItemId: $steps.confirmItem.outputs.itemId
    deletedTitle: $steps.confirmItem.outputs.title