Skip to main content
Glama
mguttmann

the-real-bitwarden-mcp

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
LOG_LEVELNoLog level: debug, info, warn, or error.warn
BWS_ORG_IDNoOrganization UUID used by Secrets Manager project/secret tools when organizationId is not passed.
BWS_API_BASENoSecrets Manager API base URL. Optional; defaults to the self-host API base.
HTTP_TIMEOUT_MSNoTimeout for API, OAuth token, and Secrets Manager SDK calls.30000
BWS_ACCESS_TOKENNoMachine-account access token for Bitwarden Secrets Manager. Optional; required for Secrets Manager tools. Malformed tokens are fatal.
BWS_IDENTITY_URLNoSecrets Manager identity URL. Optional; defaults to the self-host identity URL.
BITWARDEN_READ_ONLYNoWhen true, write tools stay listed but refuse to run.false
PAGINATION_MAX_ITEMSNoMaximum number of items to paginate.1000
PAGINATION_MAX_PAGESNoMaximum number of pages to paginate.20
BITWARDEN_CLOUD_API_BASENoBitwarden Cloud API base URL, e.g. https://api.bitwarden.com. Required when using cloud mode.
BITWARDEN_CONFIRM_WRITESNoWhen true, write tools return a preview unless invoked with confirm: "YES".true
BITWARDEN_CLOUD_CLIENT_IDNoBitwarden Cloud Public API client ID. Required when using cloud mode.
BITWARDEN_SELFHOST_API_BASENoSelf-hosted Bitwarden API base URL, e.g. https://vault.example.com/api. Required when using self-host mode.
BITWARDEN_CLOUD_IDENTITY_URLNoBitwarden Cloud identity URL, e.g. https://identity.bitwarden.com. Required when using cloud mode.
BITWARDEN_SELFHOST_CLIENT_IDNoSelf-hosted Public API client ID, e.g. organization.<orgId>. Required when using self-host mode.
BITWARDEN_CLOUD_CLIENT_SECRETNoBitwarden Cloud Public API client secret. Required when using cloud mode.
BW_MCP_MAX_LIST_RESPONSE_BYTESNoAdds a note warning to list responses that exceed this size.60000
BITWARDEN_SELFHOST_IDENTITY_URLNoSelf-hosted Bitwarden identity URL, e.g. https://vault.example.com/identity. Required when using self-host mode.
BITWARDEN_SELFHOST_CLIENT_SECRETNoSelf-hosted Public API client secret. Required when using self-host mode.

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Server capabilities have not been inspected yet.

Tools

Functions exposed to the LLM to take actions

NameDescription

No tools

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources