Skip to main content
Glama
jr2804

vaultwarden-mcp

by jr2804

Vaultwarden MCP

MCP server for Vaultwarden (Bitwarden-compatible password manager) — search, read, and sync vault entries via the Model Context Protocol.

Pure Rust binary using modelcontextprotocol/rust-sdk (MCP v3.0, 2026-07-28 spec). Multi-account support. Stdio and Streamable HTTP transports.

Features

  • šŸ” Vault search — find credentials by name, URI, or username

  • šŸ“‹ Cipher read — retrieve full credential details by ID

  • šŸ”„ Vault sync — refresh cipher cache from Vaultwarden server

  • šŸ‘„ Multi-account — connect to multiple vaults simultaneously

  • šŸ›”ļø Credential verification — HMAC-checked master key derivation on connect (wrong password caught immediately)

  • šŸ“” MCP v3.0 — compliant with the 2026-07-28 protocol spec

  • šŸš€ Single binary — no runtime dependencies, no Python, no Node.js

Related MCP server: wundervault

Installation

Download the latest release binary from GitHub Releases:

# Linux (x86_64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-x86_64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# Linux (ARM64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-aarch64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# macOS (Apple Silicon)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-macos-aarch64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# Windows (PowerShell)
Invoke-WebRequest -Uri "https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-windows-x86_64.exe" \
  -OutFile vaultwarden-mcp.exe

Build from source

Requires Rust 1.88+.

git clone https://github.com/jr2804/vaultwarden-mcp.git
cd vaultwarden-mcp/native
cargo build --release

The binary is at target/release/vaultwarden-mcp.

Configuration

Set environment variables to connect to your Vaultwarden server:

export VAULTWARDEN_SERVER="https://vault.example.com"
export VAULTWARDEN_CLIENT_ID="your-client-id"
export VAULTWARDEN_CLIENT_SECRET="your-client-secret"
export VAULTWARDEN_PASSWORD="your-vault-password"
export VAULTWARDEN_ACCOUNT_NAME="my-vault"           # optional, defaults to "default"
export VAULTWARDEN_ALLOW_HTTP="true"                  # only for http:// servers

Multi-account

For multiple vaults, set VAULTWARDEN_ACCOUNTS as a comma-separated list and prefix per-account vars:

export VAULTWARDEN_ACCOUNTS="personal,work"

# Personal vault
export VAULTWARDEN_ACCOUNT_PERSONAL_SERVER="https://personal-vault.example.com"
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_PASSWORD="..."

# Work vault
export VAULTWARDEN_ACCOUNT_WORK_SERVER="https://work-vault.example.com"
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_WORK_PASSWORD="..."

Claude Desktop / AI IDEs

Add to your MCP client configuration:

{
  "mcpServers": {
    "vaultwarden": {
      "command": "/path/to/vaultwarden-mcp",
      "args": ["serve", "--transport", "stdio"],
      "env": {
        "VAULTWARDEN_SERVER": "https://vault.example.com",
        "VAULTWARDEN_CLIENT_ID": "...",
        "VAULTWARDEN_CLIENT_SECRET": "...",
        "VAULTWARDEN_PASSWORD": "..."
      }
    }
  }
}

MCP Tools

Tool

Parameters

Description

search

query, account (optional)

Search vault by name, URI, or username

get_cipher

cipher_id, account (optional)

Get full credential details by ID

sync

account (optional)

Refresh cipher cache from server

list_accounts

—

List all connected vault accounts

Usage

# Stdio transport (for MCP clients like Claude Desktop)
vaultwarden-mcp serve --transport stdio

# HTTP transport (Streamable HTTP at /mcp)
vaultwarden-mcp serve --transport http --host 127.0.0.1 --port 8080

# Show version
vaultwarden-mcp --version

Architecture

ā”Œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”
│  Rust binary (single exe, no runtime deps)   │
│                                               │
│  vaultwarden-cli     rmcp (MCP SDK v3)       │
│   (REST API /        ServerHandler            │
│    PBKDF2 keys)      search, get_cipher,      │
│                   ──▶ sync, list_accounts     │
ā””ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”˜
           │ stdio            │ streamable_http
     MCP clients        HTTP clients

See development-documentation/architecture.md for details.

Security

  • No plaintext secrets stored — all cipher operations decrypt in-memory only

  • Credential verification on connect — wrong password or credential mismatch caught immediately (HMAC check on symmetric key)

  • Per-account isolation — separate sessions per vault identity

  • No logging of secrets — tracing limited to operation metadata

Versioning

CalVer (YYYY.MM.N). Git tags in the format 2026.8.0 trigger automated releases via GitHub Actions.

License

MIT — see LICENSE for details.

Contributing

  1. Fork the repository

  2. Create a feature branch

  3. Make your changes

  4. Run cargo check && cargo test in native/

  5. Submit a pull request

A
license - permissive license
-
quality - not tested
A
maintenance

Maintenance

–Maintainers
–Response time
–Release cycle
1Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    MCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.
    Last updated
    53
    374
    12
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    MCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.
    Last updated
    6
    39
    2
    AGPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.
    Last updated
    7
    MIT
  • F
    license
    -
    quality
    C
    maintenance
    MCP server for the Nextcloud Passwords app, enabling reading and managing password entries (list, search, create, update, delete) with strong security guarantees.
    Last updated

View all related MCP servers

Related MCP Connectors

  • An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform

  • MCP server for Blockscout

  • A basic MCP server to operate on the Postman API.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/jr2804/vaultwarden-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server