Best Vaultwarden MCP Servers
Vaultwarden is an unofficial Bitwarden server implementation written in Rust, formerly known as bitwarden_rs. It provides a lightweight alternative to the official Bitwarden server with compatible API for Bitwarden clients.
Why this server?
Allows the agent to fill usernames, passwords, and authenticator codes from the owner's Vaultwarden vault into web page fields, without exposing the secret values to the agent.
AlicenseAqualityAmaintenanceLet AI agents act for a person on websites, with the person's approval on their phone. The agent's browser runs in a sandboxed vault it cannot read into; when a site asks for a password, CAPTCHA or 2FA, the owner takes over from their phone.136MITWhy this server?
Enables programmatic management of Vaultwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.53751 npm20MITWhy this server?
Provides tools for interacting with a Vaultwarden vault, including listing items, retrieving metadata, revealing secrets via Bitwarden Sends, getting TOTP codes, and saving generated secrets or login items.
AlicenseAqualityAmaintenanceMCP server for secure AI agent access to Bitwarden/Vaultwarden vaults with BYOK, exposing tools to list items, reveal secrets via encrypted Sends, get TOTP codes, and save credentials.7274 npmMITWhy this server?
Allows deploying Vaultwarden from the App Store as a self-hosted password manager.
AlicenseNot gradedqualityBmaintenanceEnables AI assistants to deploy and manage apps on blitz.cloud, including databases, environment variables, DNS records, and logs.MITWhy this server?
Provides service-aware security checks for Vaultwarden configurations, including detection of exposed ports and missing Cloudflare Access.
AlicenseNot gradedqualityDmaintenanceRead-only MCP server that scans Docker Compose, Cloudflare Tunnel, and .env files for security risks in self-hosted homelabs.14 npm1MITWhy this server?
Allows reading credentials from a Bitwarden/Vaultwarden vault via `bw serve`, enabling secure secret retrieval for other integrations.
Why this server?
Provides tools for securely accessing and managing passwords, API keys, and other credentials stored in a Vaultwarden vault, enabling AI agents to retrieve items via fuzzy search, exact lookup, or custom fields.
AlicenseNot gradedqualityAmaintenanceEnables AI agents to securely retrieve passwords, API keys, and other items from a Vaultwarden/Bitwarden vault using MCP tools with fuzzy search and caching.1MITWhy this server?
Provides tools for managing secrets in a self-hosted Vaultwarden instance, including retrieving, creating, updating, and deleting secrets (logins, notes, cards, identities), with automatic session management and vault synchronization.
AlicenseNot gradedqualityDmaintenanceEnables AI agents and automation scripts to securely interact with self-hosted Vaultwarden instances through the Bitwarden CLI, automatically managing vault sessions and providing tools to read, create, update, and delete secrets programmatically.8 npm2MITWhy this server?
Provides access to Vaultwarden servers with multi-account support, enabling management of vault data.
AlicenseNot gradedqualityAmaintenanceMCP server for accessing Vaultwarden servers with multi-account support.MIT