Skip to content
Bitwarden MCP Server

Bitwarden MCP Server

by Bitwarden
Released
5 views
v2026.7.0
GPL-3.0
Repository Docs npm
Developer ToolsProductivity

Summary

Bitwarden's official MCP server — unlock the vault, read and edit items, generate passwords and TOTP codes, and run organisation administration. Local use only.

Features

  • Unlock, lock, sync and check vault status via the Bitwarden CLI
  • Create, read, edit, delete and restore logins, notes, cards and identities
  • Generate passwords and retrieve TOTP codes
  • Create and manage Bitwarden Sends for ephemeral sharing
  • Organisation administration: collections, members, groups, policies, audit logs
  • Local-only by design — never expose this server over a network

Installation

Set up this MCP server in your favorite AI agent — copy a ready-made configuration below.

Any MCP-compatible agent

Most agents (Claude, Cursor, Windsurf, VS Code, and more) read a standard mcpServers configuration.

  1. Open your agent's MCP configuration file.
  2. Merge the snippet below into it, filling in the environment variables with your own values.
  3. Restart the agent — the "Bitwarden MCP Server" tools will be available.
{
  "mcpServers": {
    "bitwarden-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@bitwarden/mcp-server"
      ],
      "env": {
        "BW_SESSION": "<YOUR_SESSION_TOKEN>"
      }
    }
  }
}

Description

Bitwarden's own MCP server gives an assistant two distinct surfaces onto your password manager. The CLI side wraps the Bitwarden CLI for vault work: unlocking through the native OS password dialog, locking, syncing and checking status; listing, reading, creating, editing, deleting and restoring logins, secure notes, cards and identities; filtering by URL, folder, collection or trash; managing folders and file attachments; generating passwords and retrieving TOTP codes; and creating Bitwarden Sends for ephemeral text or file shares.

The API side covers organisation administration through the Bitwarden Public API — collections and their permissions, member invitations and role changes, group creation and assignment, security policy configuration, audit-log retrieval, subscription and billing details, and bulk user or group import from external systems. Device-approval requests and member-registration confirmations are handled from the CLI side.

Read the security warning before installing. Bitwarden states plainly that this server is for local use only and must never be hosted publicly or exposed over a network: granting an agent access means granting it the ability to read passwords, secure notes and organisation secrets, and any of that can surface in a model response. Configuration files contain session tokens and API credentials, so they must never be committed or shared.

Requires Node.js 22+, a Bitwarden account and, for organisation features, a Teams or Enterprise organisation with owner or admin permissions.

Related MCP Servers

MCP: Arm MCP Server

by Arm

New

Arm's official MCP server for porting and tuning software on Arm — semantic docs search, codebase migration scanning, container architecture checks and LLVM-MCA assembly analysis.

Developer Tools

MCP: AntV Chart MCP

by AntV

New

Official AntV MCP server that turns a description of your data into a rendered chart — 26 visualization types from bar and line to sankey, mind-map, fishbone and geographic maps.

Developer ToolsDatabases & Data
1 views

MCP: Headroom

by Headroom Labs

New

Context-compression MCP server that shrinks tool outputs, logs, files and RAG chunks before they reach the model, cutting 60-95% of tokens on JSON payloads.

Developer Tools
3 views

MCP: Engram

by Gentleman Programming

New

Persistent memory for coding agents as a single Go binary — SQLite and FTS5 behind MCP, an HTTP API, a CLI and a TUI, with no Node, Python or Docker required.

Developer Tools
2 views
Browse all MCP servers →