vaultwarden-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| HOST | No | Host interface to bind the MCP server to (e.g. 127.0.0.1). | |
| PORT | No | Port for the network transport (e.g. 8000). | |
| DEBUG | No | Verbose logging. | |
| MCP_URL | No | URL of the MCP server the agent connects to. | |
| MODEL_ID | No | Operator-configured model id for the agent. | |
| PROVIDER | No | Operator-configured LLM provider for the agent. | |
| ADMINTOOL | No | Enable the vaultwarden_admin tool domain. | |
| AUTH_TYPE | No | Authentication type for network listeners (e.g. none). | |
| SENDSTOOL | No | Enable the vaultwarden_sends tool domain. | |
| TRANSPORT | No | Transport mode: stdio, streamable-http, or sse. | |
| SYSTEMTOOL | No | Enable the vaultwarden_system tool domain. | |
| CIPHERSTOOL | No | Enable the vaultwarden_ciphers tool domain. | |
| ENABLE_OTEL | No | Set to True to enable OpenTelemetry/Langfuse telemetry. | |
| FOLDERSTOOL | No | Enable the vaultwarden_folders tool domain. | |
| ACCOUNTSTOOL | No | Enable the vaultwarden_accounts tool domain. | |
| EUNOMIA_TYPE | No | Eunomia access governance mode: none, embedded, or remote. | |
| ENABLE_WEB_UI | No | Serve the AG-UI web interface. | |
| MCP_TOOL_MODE | No | Tool surface mode: intent, condensed, verbose, or both. Default is intent. | intent |
| OIDC_CLIENT_ID | No | OIDC client id (service-account auth). | |
| MAINTENANCETOOL | No | Enable the vaultwarden_maintenance tool domain. | |
| MCP_CLIENT_AUTH | No | Outbound MCP child auth: oidc-client-credentials, basic, or none. | |
| MCP_ENABLED_TAGS | No | Comma-separated tag allow-list. | |
| PYTHONUNBUFFERED | No | Unbuffered stdout (recommended in containers). | |
| MCP_DISABLED_TAGS | No | Comma-separated tag deny-list. | |
| MCP_ENABLED_TOOLS | No | Comma-separated tool allow-list. | |
| ORGANIZATIONSTOOL | No | Enable the vaultwarden_organizations tool domain. | |
| EUNOMIA_REMOTE_URL | No | Remote Eunomia authorization server URL. | |
| MCP_DISABLED_TOOLS | No | Comma-separated tool deny-list. | |
| EUNOMIA_POLICY_FILE | No | Path to the Eunomia policy file. | |
| VAULTWARDEN_MCP_IMAGE | No | Container image reference for the MCP server. | |
| OIDC_CLIENT_SECRET_REF | No | Runtime secret reference for the OIDC service account. | |
| MCP_BASIC_AUTH_USERNAME | No | HTTP Basic username for MCP_CLIENT_AUTH=basic. | |
| VAULTWARDEN_AGENT_IMAGE | No | Container image reference for the agent server. | |
| MCP_BASIC_AUTH_PASSWORD_REF | No | Runtime secret reference for HTTP Basic auth. | |
| OTEL_EXPORTER_OTLP_ENDPOINT | No | OTLP collector endpoint. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues