Best Bitwarden MCP Servers
The most trusted open source password manager for business
Why this server?
Enables programmatic management of Bitwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.Last updated534924MITWhy this server?
Allows migrating vault data from Bitwarden to facilitate policy-gated access for AI agents via the MCP protocol.
AlicenseAqualityAmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.Last updated371MITWhy this server?
Allows reading secrets from Bitwarden vaults using the `bw` CLI (read-only).
AlicenseAqualityBmaintenanceEncrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.Last updated72MITWhy this server?
Allows checking refund eligibility, cancellation penalties, return eligibility, and trial terms for Bitwarden subscriptions.
Why this server?
Allows using Bitwarden Desktop's SSH agent to authenticate SSH connections.
Alicense-qualityAmaintenanceA local MCP server that enables LLMs to execute shell commands on remote hosts over SSH with multiple authentication methods.Last updated353MITWhy this server?
Planned integration for personal password manager functionality, allowing secure credential storage and retrieval for SSH connections
Alicense-qualityCmaintenanceEnables AI assistants to execute commands anLast updatedMITWhy this server?
Enables the use of Bitwarden-stored credentials for automated browser authentication within Skyvern workflows.
Alicense-qualityBmaintenanceSkyvern MCP server lets AI agents control a real browser to navigate websites, fill forms, authenticate, and extract structured data. Supports multi-step automation workflows via natural language.Last updated21,894AGPL 3.0Why this server?
Allows AI agents to securely search, retrieve, and inject secrets from Bitwarden vaults without exposing secret values to the LLM.
Alicense-qualityCmaintenanceSecret management MCP server for AI coding agents that prevents secrets from entering the LLM context window by returning metadata only and using side-channel injection. Integrates with Bitwarden and offers hooks for auto-capture and leak prevention.Last updated1MITWhy this server?
Integrates with Bitwarden through its official CLI to manage password vault items, supporting secret retrieval, creation, updates, deletion, and synchronization operations.
Alicense-qualityDmaintenanceEnables AI agents and automation scripts to securely interact with self-hosted Vaultwarden instances through the Bitwarden CLI, automatically managing vault sessions and providing tools to read, create, update, and delete secrets programmatically.Last updated41MIT