Bitwarden MCP Server
Vault management and organization administration tools for AI assistants.
Data last scanned today · Reviewed today
Overview
This official Bitwarden MCP server provides AI models with the ability to interact with your password vault and administrative controls. It utilizes two main channels: the Bitwarden CLI for individual vault operations and the Bitwarden Public API for organizational management. Users can perform tasks ranging from listing vault items and generating secure passwords to managing organization members and collection permissions directly through an AI interface. The server is designed exclusively for local deployment. It supports a comprehensive range of item operations including creation, modification, and deletion of logins, secure notes, and attachments. It also facilitates administrative tasks such as managing device approvals and Bitwarden Send ephemeral shares.
Our verdict
With a security score of 66/100, this server is classified as medium risk. The primary security concern is the lack of a read-only mode, meaning any AI client connected to this server gains full write access to your vault. Because the server can handle sensitive credentials and administrative functions, it should only be used by individuals who are comfortable with the risks of providing LLMs access to their password manager. It is not suitable for public or shared environments.
- Maintained by the official Bitwarden organization
- Active development with commits as recent as three days ago
- Small supply-chain footprint with only three direct dependencies
- Comprehensive functionality for both personal and organizational vault management
- No read-only mode restricts the ability to limit AI actions
- Missing OAuth support complicates secure credential handling
- Not yet editorially reviewed for potential security edge cases
Setup
{
"mcpServers": {
"bitwarden-mcp-server": {
"args": [
"-y",
"@bitwarden/mcp-server"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| lock | Lock the vault. | medium |
| unlock | Unlock the vault. | medium |
| sync | Sync the vault. | low |
| status | Check vault status. | low |
| list | List vault items. | low |
| get | Get a vault item. | low |
| create_item | Create a vault item. | medium |
| edit_item | Edit a vault item. | medium |
| delete | Delete a vault item. | high |
| restore | Restore a deleted vault item. | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›Can I host this server publicly or on a cloud platform?
No. The server is designed exclusively for local use and must never be hosted publicly or exposed over a network due to the sensitivity of the vault data it accesses.
›What software do I need to install before setting up the server?
You must have Node.js 22+ installed. For vault management features, you also need the Bitwarden CLI installed.
›What permissions are required for the Organization Administration features?
You must have a Bitwarden Teams or Enterprise organization account and hold organization owner or admin permissions to use the API-based administration features.
›How do I secure my configuration files containing session tokens?
You should never commit your configuration files to version control or share them with others, as they contain sensitive credentials that grant access to your vault.
›What specific actions can an AI assistant perform with this server?
The server allows AI assistants to list, retrieve, create, edit, delete, and restore vault items, manage folders and attachments, generate passwords, retrieve TOTP codes, and perform organization administrative tasks.
›How are organization API credentials obtained?
You can obtain your organization API credentials by navigating to the API Key section under your organization's settings in the Bitwarden Web Vault.
Badge
Maintain this server? Add the live badge to your README.