Skip to main content
Glama
jr2804

vaultwarden-mcp

by jr2804

Vaultwarden MCP

MCP server for Vaultwarden — search, read, and sync vault entries via the Model Context Protocol.

Pure Rust binary using modelcontextprotocol/rust-sdk (MCP v3.0, 2026-07-28 spec). Multi-account support. Stdio and Streamable HTTP transports.

Features

  • 🔐 Vault search — find credentials by name, URI, or username

  • 📋 Cipher read — retrieve full credential details by ID

  • 🔄 Vault sync — refresh cipher cache from Vaultwarden server

  • 👥 Multi-account — connect to multiple vaults simultaneously

  • 🛡️ Credential verification — HMAC-checked master key derivation on connect (wrong password caught immediately)

  • 📡 MCP v3.0 — compliant with the 2026-07-28 protocol spec

  • 🚀 Single binary — no runtime dependencies, no Python, no Node.js

Related MCP server: wundervault

Installation

Download the latest release binary from GitHub Releases:

# Linux (x86_64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-x86_64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# Linux (ARM64)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-linux-aarch64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# macOS (Apple Silicon)
curl -sL https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-macos-aarch64 \
  -o vaultwarden-mcp && chmod +x vaultwarden-mcp

# Windows (PowerShell)
$url = "https://github.com/jr2804/vaultwarden-mcp/releases/latest/download/vaultwarden-mcp-windows-x86_64.exe"
Invoke-WebRequest -Uri $url -OutFile vaultwarden-mcp.exe

??? tip "Build from source"

Requires Rust 1.88+. See the [Build guide](build.md) for instructions.

Configuration

Set environment variables to connect to your Vaultwarden server:

export VAULTWARDEN_SERVER="https://vault.example.com"
export VAULTWARDEN_CLIENT_ID="your-client-id"
export VAULTWARDEN_CLIENT_SECRET="your-client-secret"
export VAULTWARDEN_PASSWORD="your-vault-password"
export VAULTWARDEN_ACCOUNT_NAME="my-vault"           # optional, defaults to "default"
export VAULTWARDEN_ALLOW_HTTP="true"                  # only for http:// servers

Multi-account

For multiple vaults, set VAULTWARDEN_ACCOUNTS as a comma-separated list and prefix per-account vars:

export VAULTWARDEN_ACCOUNTS="personal,work"

# Personal vault
export VAULTWARDEN_ACCOUNT_PERSONAL_SERVER="https://personal-vault.example.com"
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_PERSONAL_PASSWORD="..."

# Work vault
export VAULTWARDEN_ACCOUNT_WORK_SERVER="https://work-vault.example.com"
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_ID="..."
export VAULTWARDEN_ACCOUNT_WORK_CLIENT_SECRET="..."
export VAULTWARDEN_ACCOUNT_WORK_PASSWORD="..."

MCP Client Setup

Use add-mcp to configure vaultwarden-mcp for any MCP-compatible agent:

npx add-mcp /path/to/vaultwarden-mcp --args "serve --transport stdio" \
  --env VAULTWARDEN_SERVER=https://vault.example.com \
  --env VAULTWARDEN_CLIENT_ID="your-client-id" \
  --env VAULTWARDEN_CLIENT_SECRET="your-client-secret" \
  --env VAULTWARDEN_PASSWORD="your-vault-password"

add-mcp supports Claude Code, Codex, Cursor, OpenCode, VS Code, Gemini CLI, and 17 more agents.

MCP Tools

Tool

Parameters

Description

search

query, account (optional)

Search vault by name, URI, or username

get_cipher

cipher_id, account (optional)

Get full credential details by ID

sync

account (optional)

Refresh cipher cache from server

list_accounts

List all connected vault accounts

Usage

# Stdio transport (for MCP clients)
vaultwarden-mcp serve --transport stdio

# HTTP transport (Streamable HTTP at /mcp)
vaultwarden-mcp serve --transport http --host 127.0.0.1 --port 8080

# Show version
vaultwarden-mcp --version

Security

  • No plaintext secrets stored — all cipher operations decrypt in-memory only

  • Credential verification on connect — wrong password or credential mismatch caught immediately (HMAC check on symmetric key)

  • Per-account isolation — separate sessions per vault identity

  • No logging of secrets — tracing limited to operation metadata

Documentation

License

MIT — see LICENSE for details.

A
license - permissive license
Not graded
quality - not tested
A
maintenance

Maintenance

Maintainers
Response time
1dRelease cycle
6Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    MCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.
    53
    904
    15
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    MCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.
    6
    92
    2
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    MCP server for the Nextcloud Passwords app, enabling reading and managing password entries (list, search, create, update, delete) with strong security guarantees.
    MIT
  • F
    license
    B
    quality
    D
    maintenance
    MCP server that enables AI models to securely interact with a Bitwarden password manager vault via the rbw CLI.
    11
    1

View all related MCP servers

Related MCP Connectors

  • An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform

  • MCP server for Blockscout

  • A basic MCP server to operate on the Postman API.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/jr2804/vaultwarden-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server