Bitwarden MCP Server

Bitwarden's own MCP server gives an assistant two distinct surfaces onto your password manager. The CLI side wraps the Bitwarden CLI for vault work: unlocking through the native OS password dialog, locking, syncing and checking status; listing, reading, creating, editing, deleting and restoring logins, secure notes, cards and identities; filtering by URL, folder, collection or trash; managing folders and file attachments; generating passwords and retrieving TOTP codes; and creating Bitwarden Sends for ephemeral text or file shares.

The API side covers organisation administration through the Bitwarden Public API — collections and their permissions, member invitations and role changes, group creation and assignment, security policy configuration, audit-log retrieval, subscription and billing details, and bulk user or group import from external systems. Device-approval requests and member-registration confirmations are handled from the CLI side.

Read the security warning before installing. Bitwarden states plainly that this server is for local use only and must never be hosted publicly or exposed over a network: granting an agent access means granting it the ability to read passwords, secure notes and organisation secrets, and any of that can surface in a model response. Configuration files contain session tokens and API credentials, so they must never be committed or shared.

Requires Node.js 22+, a Bitwarden account and, for organisation features, a Teams or Enterprise organisation with owner or admin permissions.