vaultwarden-mcp
Provides access to Vaultwarden servers with multi-account support, enabling management of vault data.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@vaultwarden-mcpsearch my vault for the Netflix password"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Vaultwarden MCP
MCP server for Vaultwarden (Bitwarden-compatible password manager) ā search, read, and sync vault entries via the Model Context Protocol.
Pure Rust binary using modelcontextprotocol/rust-sdk (MCP v3.0, 2026-07-28 spec). Multi-account support. Stdio and Streamable HTTP transports.
Features
š Vault search ā find credentials by name, URI, or username
š Cipher read ā retrieve full credential details by ID
š Vault sync ā refresh cipher cache from Vaultwarden server
š„ Multi-account ā connect to multiple vaults simultaneously
š”ļø Credential verification ā HMAC-checked master key derivation on connect (wrong password caught immediately)
š” MCP v3.0 ā compliant with the 2026-07-28 protocol spec
š Single binary ā no runtime dependencies, no Python, no Node.js
Related MCP server: wundervault
Installation
Download (recommended)
Download the latest release binary from GitHub Releases:
# Linux (x86_64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-x86_64 \
-o vaultwarden-mcp && chmod +x vaultwarden-mcp
# Linux (ARM64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-aarch64 \
-o vaultwarden-mcp && chmod +x vaultwarden-mcp
# macOS (Apple Silicon)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-macos-aarch64 \
-o vaultwarden-mcp && chmod +x vaultwarden-mcp
# Windows (PowerShell)
Invoke-WebRequest -Uri "https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-windows-x86_64.exe" \
-OutFile vaultwarden-mcp.exeBuild from source
Requires Rust 1.88+.
git clone https://github.com/jr2804/vaultwarden-mcp.git
cd vaultwarden-mcp/native
cargo build --releaseThe binary is at target/release/vaultwarden-mcp.
Configuration
Set environment variables to connect to your Vaultwarden server:
export VAULTWARDEN_SERVER="https://vault.example.com"
export VAULTWARDEN_CLIENT_ID="your-client-id"
export VAULTWARDEN_CLIENT_SECRET="your-client-secret"
export VAULTWARDEN_PASSWORD="your-vault-password"
export VAULTWARDEN_ACCOUNT_NAME="my-vault" # optional, defaults to "default"
export VAULTWARDEN_ALLOW_HTTP="true" # only for http:// serversMulti-account
For multiple vaults, set VAULTWARDEN_ACCOUNTS as a comma-separated list and prefix per-account vars:
export VAULTWARDEN_ACCOUNTS="personal,work"
# Personal vault
export VAULTWARDEN_ACCOUNT_PERSONAL_SERVER="https://personal-vault.example.com"
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_PASSWORD="..."
# Work vault
export VAULTWARDEN_ACCOUNT_WORK_SERVER="https://work-vault.example.com"
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_WORK_PASSWORD="..."Claude Desktop / AI IDEs
Add to your MCP client configuration:
{
"mcpServers": {
"vaultwarden": {
"command": "/path/to/vaultwarden-mcp",
"args": ["serve", "--transport", "stdio"],
"env": {
"VAULTWARDEN_SERVER": "https://vault.example.com",
"VAULTWARDEN_CLIENT_ID": "...",
"VAULTWARDEN_CLIENT_SECRET": "...",
"VAULTWARDEN_PASSWORD": "..."
}
}
}
}MCP Tools
Tool | Parameters | Description |
|
| Search vault by name, URI, or username |
|
| Get full credential details by ID |
|
| Refresh cipher cache from server |
| ā | List all connected vault accounts |
Usage
# Stdio transport (for MCP clients like Claude Desktop)
vaultwarden-mcp serve --transport stdio
# HTTP transport (Streamable HTTP at /mcp)
vaultwarden-mcp serve --transport http --host 127.0.0.1 --port 8080
# Show version
vaultwarden-mcp --versionArchitecture
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
ā Rust binary (single exe, no runtime deps) ā
ā ā
ā vaultwarden-cli rmcp (MCP SDK v3) ā
ā (REST API / ServerHandler ā
ā PBKDF2 keys) search, get_cipher, ā
ā āāā¶ sync, list_accounts ā
āāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāāā¬āāāāāāāāāāāāāāāāāā
ā stdio ā streamable_http
MCP clients HTTP clientsSee development-documentation/architecture.md for details.
Security
No plaintext secrets stored ā all cipher operations decrypt in-memory only
Credential verification on connect ā wrong password or credential mismatch caught immediately (HMAC check on symmetric key)
Per-account isolation ā separate sessions per vault identity
No logging of secrets ā tracing limited to operation metadata
Versioning
CalVer (YYYY.MM.N). Git tags in the format 2026.8.0 trigger automated releases via GitHub Actions.
License
MIT ā see LICENSE for details.
Contributing
Fork the repository
Create a feature branch
Make your changes
Run
cargo check && cargo testinnative/Submit a pull request
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.Last updated5337412MIT

wundervaultofficial
AlicenseAqualityAmaintenanceMCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol ā secrets are decrypted server-side and never returned to the agent in plaintext.Last updated6392AGPL 3.0- AlicenseAqualityBmaintenanceAn MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.Last updated7MIT
- Flicense-qualityCmaintenanceMCP server for the Nextcloud Passwords app, enabling reading and managing password entries (list, search, create, update, delete) with strong security guarantees.Last updated
Related MCP Connectors
An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform
MCP server for Blockscout
A basic MCP server to operate on the Postman API.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/jr2804/vaultwarden-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server