Best Bitwarden MCP Servers
The most trusted open source password manager for business
Why this server?
Provides tools for vault management (items, folders, attachments, sends, password generation, TOTP) and organization administration (collections, members, groups, policies, audit logs, subscriptions) via Bitwarden CLI and Public API.
AlicenseBqualityBmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.Last updated59618205GPL 3.0Why this server?
Provides tools for storing, retrieving, listing, and rotating secrets in Bitwarden Secrets Manager, including injecting secrets into allowlisted executables.
AlicenseAqualityBmaintenanceAn MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.Last updated7MITWhy this server?
Allows reading secrets from Bitwarden vaults using the `bw` CLI (read-only).
AlicenseAqualityBmaintenanceEncrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.Last updated71233MITWhy this server?
Enables programmatic management of Bitwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.Last updated5314611MITWhy this server?
Allows migrating vault data from Bitwarden to facilitate policy-gated access for AI agents via the MCP protocol.
AlicenseAqualityAmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.Last updated3185MITWhy this server?
Manages Bitwarden organization vaults with ACID transactions, WAL logging, and human-in-the-loop approval for mutations while keeping secrets blind from AI agents.
Why this server?
Integrates with Bitwarden through its official CLI to manage password vault items, supporting secret retrieval, creation, updates, deletion, and synchronization operations.
Alicense-qualityDmaintenanceEnables AI agents and automation scripts to securely interact with self-hosted Vaultwarden instances through the Bitwarden CLI, automatically managing vault sessions and providing tools to read, create, update, and delete secrets programmatically.Last updated41MITWhy this server?
Planned integration for personal password manager functionality, allowing secure credential storage and retrieval for SSH connections
Alicense-qualityCmaintenanceEnables AI assistants to execute commands anLast updatedMITWhy this server?
Enables the use of Bitwarden-stored credentials for automated browser authentication within Skyvern workflows.
Alicense-qualityCmaintenanceSkyvern MCP server lets AI agents control a real browser to navigate websites, fill forms, authenticate, and extract structured data. Supports multi-step automation workflows via natural language.Last updated22,584AGPL 3.0