Best Bitwarden MCP Servers
The most trusted open source password manager for business
Why this server?
Provides tools for vault management (items, folders, attachments, sends, password generation, TOTP) and organization administration (collections, members, groups, policies, audit logs, subscriptions) via Bitwarden CLI and Public API.
AlicenseBqualityAmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.59754229GPL 3.0Why this server?
Provides tools for managing Bitwarden organization members and vault groups, including inviting members, listing members/groups, and assigning members to groups.
AlicenseAqualityCmaintenanceMCP server that exposes Bitwarden's Public API for organization member and vault group management, enabling inviting members and assigning them to vault groups. Supports stateless, multi-tenant authentication via gateway mode or env-based credentials.9Apache 2.0Why this server?
Enables programmatic management of Bitwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.5334112MITWhy this server?
Allows migrating vault data from Bitwarden to facilitate policy-gated access for AI agents via the MCP protocol.
AlicenseAqualityAmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.3185MITWhy this server?
Allows reading secrets from Bitwarden vaults using the `bw` CLI (read-only).
AlicenseAqualityBmaintenanceEncrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.71003MITWhy this server?
Provides tools for storing, retrieving, listing, and rotating secrets in Bitwarden Secrets Manager, including injecting secrets into allowlisted executables.
AlicenseAqualityBmaintenanceAn MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.7MITWhy this server?
Provides tools for interacting with a Bitwarden vault, including listing items, retrieving metadata, revealing secrets via Bitwarden Sends, getting TOTP codes, and saving generated secrets or login items.
AlicenseAqualityBmaintenanceMCP server for secure AI agent access to Bitwarden/Vaultwarden vaults with BYOK, exposing tools to list items, reveal secrets via encrypted Sends, get TOTP codes, and save credentials.784MITWhy this server?
Allows ingesting Bitwarden session tokens into the browser launcher environment for authenticated browsing with Bitwarden credentials.
AlicenseBqualityBmaintenanceStandalone MCP server exposing only the security-classified tools from Shade Browser, enabling Brave CDP browser automation across 20 isolated profile slots. Built on FastMCP and Playwright Python.18MITWhy this server?
Manages Bitwarden organization vaults with ACID transactions, WAL logging, and human-in-the-loop approval for mutations while keeping secrets blind from AI agents.