Best Bitwarden MCP Servers
The most trusted open source password manager for business
Why this server?
Provides tools for vault management (items, folders, attachments, sends, password generation, TOTP) and organization administration (collections, members, groups, policies, audit logs, subscriptions) via Bitwarden CLI and Public API.
AlicenseBqualityBmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.593,615 npm277GPL 3.0Why this server?
Allows the agent to fill usernames, passwords, and authenticator codes from the owner's Bitwarden vault into web page fields, without exposing the secret values to the agent.
AlicenseAqualityAmaintenanceLet AI agents act for a person on websites, with the person's approval on their phone. The agent's browser runs in a sandboxed vault it cannot read into; when a site asks for a password, CAPTCHA or 2FA, the owner takes over from their phone.136MITWhy this server?
Enables programmatic management of Bitwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.53751 npm20MITWhy this server?
Allows migrating vault data from Bitwarden to facilitate policy-gated access for AI agents via the MCP protocol.
AlicenseAqualityCmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.385 npm6MITWhy this server?
Allows reading secrets from Bitwarden vaults using the `bw` CLI (read-only).
AlicenseAqualityDmaintenanceEncrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.752 npm3MITWhy this server?
Provides tools for storing, retrieving, listing, and rotating secrets in Bitwarden Secrets Manager, including injecting secrets into allowlisted executables.
AlicenseAqualityCmaintenanceAn MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.7MITWhy this server?
Provides tools for interacting with a Bitwarden vault, including listing items, retrieving metadata, revealing secrets via Bitwarden Sends, getting TOTP codes, and saving generated secrets or login items.
AlicenseAqualityAmaintenanceMCP server for secure AI agent access to Bitwarden/Vaultwarden vaults with BYOK, exposing tools to list items, reveal secrets via encrypted Sends, get TOTP codes, and save credentials.7274 npmMITWhy this server?
Allows ingesting Bitwarden session tokens into the browser launcher environment for authenticated browsing with Bitwarden credentials.
AlicenseBqualityBmaintenanceStandalone MCP server exposing only the security-classified tools from Shade Browser, enabling Brave CDP browser automation across 20 isolated profile slots. Built on FastMCP and Playwright Python.18MITWhy this server?
Provides tools for managing Bitwarden organization members and vault groups, including inviting members, listing members/groups, and assigning members to groups.
AlicenseAqualityCmaintenanceMCP server that exposes Bitwarden's Public API for organization member and vault group management, enabling inviting members and assigning them to vault groups. Supports stateless, multi-tenant authentication via gateway mode or env-based credentials.9Apache 2.0