Bitwarden MCP Server

An MCP (Model Context Protocol) server for interacting with Bitwarden/Vaultwarden for password and secure note management.

Local serverstdio

What is the Bitwarden MCP server?

An MCP (Model Context Protocol) server for interacting with Bitwarden/Vaultwarden for password and secure note management. That is what the bitwarden mcp server brings to an AI assistant: the same capability, reachable through the Model Context Protocol rather than a separate app or dashboard.

The short version

  • Password Management — Create, update, delete, and search passwords
  • Secure Notes — Manage secure notes and sensitive information
  • Folders — Organize items in folders
  • Advanced Search — Search items by name, type, folder
  • Secure Authentication — Supports OAuth2 and password authentication

The tools it exposes

The server publishes 1 tool. What each one is for:

  • Creation — The Creation tool exposed by this server

What it needs from you

Configuration is passed through the environment: BITWARDEN_BASE_URL, BITWARDEN_CLIENT_ID, BITWARDEN_CLIENT_SECRET. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Getting it running

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client.

How it compares

This sits in the planning and project tracking group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Bitwarden's toolset — Creation — is a fair guide to whether it matches your workflow. It is maintained by giuliolibrando; worth a glance at recent repository activity before you build anything load-bearing on it.

We check each listing at SyncDev against the project's documentation before it goes live — if something here drifts out of date, it is a bug worth reporting.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
CreationThe Creation tool exposed by this server.

Configuration

VariableDescriptionRequired
BITWARDEN_BASE_URLEndpoint or connection string the server talks to.Yes
BITWARDEN_CLIENT_IDConfiguration value read at startup.Optional
BITWARDEN_CLIENT_SECRETCredential the server authenticates with.Yes

Example prompts to try

  • Use Bitwarden to Creation.

Frequently asked questions

It connects Bitwarden to MCP-compatible AI assistants such as Claude and Cursor, exposing 1 tool (Creation) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Bitwarden directly.