Warden MCP Server

Returns Bitwarden CLI status (locked/unlocked, server, user).

Base64-encode a string (bw encode).

Generate a password/passphrase (bw generate). Returning the value requires reveal=true.

Generate a username like the Bitwarden generator (random word, plus-addressed email, catch-all). Returning the value requires reveal=true.

List Bitwarden folders (personal).

Create a Bitwarden folder (personal).

Rename a Bitwarden folder (personal).

Delete a Bitwarden folder (personal).

List organization collections.

Create an organization collection.

Rename an organization collection.

Delete an organization collection.

Move an item to an organization (optionally assigning collection ids).

List organizations available to the current Bitwarden user.

List collections (optionally filtered by organization).

Search vault items by text and filters (org/folder/collection/url).

Get a vault item by id.

Get a login URI by search term (bw get uri).

Get item notes by search term (bw get notes).

Check exposed status by search term (bw get exposed).

Get a folder by id (bw get folder).

Get a collection by id (bw get collection).

Get an organization by id (bw get organization).

Get an org collection by id (bw get org-collection).

Delete an item by id (soft-delete by default; set permanent=true to hard delete).

Delete multiple items by id. Returns per-id results (soft-delete by default; set permanent=true to hard delete).

Restore an item from trash by id.

Attach a file (base64) to an existing item. Returns the updated (redacted) item.

Delete an attachment from an item. Returns the updated (redacted) item.

Download an attachment from an item and return it as base64 (bw get attachment).

List all the Sends owned by you (bw send list).

Get json templates for send objects (bw send template).

Get Sends owned by you. Use text=true to return text content; downloadFile=true to download a file send (bw send get).

Create a Bitwarden Send. For file sends, pass filename+contentBase64. (bw send).

Create a Send via bw send create. Provide encodedJson (base64) or json (will be bw-encoded). Optional: text, hidden, or file (filename+contentBase64).

Edit a Send via bw send edit. Provide encodedJson (base64) or json (will be bw-encoded). Optional: itemId (maps to --itemid).

Remove a Send's saved password (bw send remove-password).

Delete a Send (bw send delete).

Access a Bitwarden Send from a url. Use obj=true for JSON object; downloadFile=true for file content. (bw receive)

Get a login username by search term (bw get username).

Get a login password by search term (bw get password). Returning a password requires reveal=true.

Get a TOTP code/seed by search term (bw get totp). Returning a TOTP requires reveal=true.

Get an item password history (if any). Returning passwords requires reveal=true.

Create a login item.

Create multiple login items in a single call.

Set or update the URIs (and per-URI match types) for a login item. mode=replace overwrites; mode=merge updates/adds by uri.

Create a secure note item.

Create an SSH key object (stored as secure note with fields).

Create a payment card item.

Create an identity item.

Update selected fields of an item by id.