Skip to main content
Glama
Knuckles-Team

vaultwarden-mcp

List Items

vaultwarden_ciphers_list_items
Read-onlyIdempotent

List all vault items (ciphers) from a Vaultwarden/Bitwarden-compatible server, returning decrypted plaintext contents for review or processing.

Instructions

List items (vaultwarden_ciphers). Read and write vault items (ciphers).

The decrypted actions (list_items, get_item, create_item, edit_item) return or accept plaintext item contents because the caller explicitly asked for them — never log, echo, or otherwise surface that content elsewhere. move_to_trash soft-deletes items by id (recoverable). Every other ciphers API route is reachable by its route name via call_operation.

CONCEPT:VW-ECO.mcp.cipher-operations

Input Schema

NameRequiredDescriptionDefault
params_jsonNoJSON object of parameters for the action.{}

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.2.2

TDQS

B3.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so the description is not carrying the safety burden, yet it still adds real value: it discloses that decrypted actions return plaintext item contents, warns never to log or echo them, and notes that move_to_trash is a recoverable soft-delete. The one gap is that it does not describe listing behavior such as paging or result limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The plaintext warning is valuable and correctly front-loaded, but the opening two sentences mix this tool's purpose with family-level read/write semantics, and the trailing CONCEPT tag and backticked route enumeration are payload-free for an invoking agent. Roughly half the text serves the tool group rather than this call.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description need not explain return shape, and it does cover the sensitive-plaintext aspect well. It is still incomplete for a listing tool: no guidance on the params_json contents or on how listing results are scoped, which is the main decision an agent faces here.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter is a free-form params_json bag whose schema text ('JSON object of parameters for the action') conveys no field-level meaning, so the nominal 100% coverage is formal rather than substantive. The description does not say which keys the list action accepts (search terms, organization/folder filters, pagination), leaving the agent to guess the pass-through schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence names the resource ('List items (vaultwarden_ciphers)'), but the following sentence 'Read and write vault items (ciphers)' describes the whole cipher family rather than this read-only action, blurring what the tool actually does. Nothing distinguishes it from close siblings such as vaultwarden_get_ciphers, vaultwarden_get_cipher, or vaultwarden_ciphers_get_item, which an agent could easily pick instead.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: the name and 'list_items' phrase suggest a listing call, and the note that other ciphers routes are reachable via call_operation is a partial routing hint. There is no statement of when to choose this over get_item (single item) or get_ciphers, nor any prerequisites or filter conventions for listing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools