Bitwarden MCP Server (Giulio Librando)
Bitwarden and Vaultwarden items accessible for search, creation, and secure management tasks.
Data last scanned today · Reviewed today
Overview
This Python-based MCP server facilitates interaction with Bitwarden or self-hosted Vaultwarden instances. It provides tools for the full lifecycle of password management, including searching for existing entries, viewing secure notes, and organizing credentials into folders directly from an AI interface. Users can create, update, or delete sensitive items as needed through the configured environment. The server supports authentication via both password and OAuth2, and is deployed easily using Docker Compose with environment-based configuration for the Bitwarden base URL and user credentials.
Our verdict
This server carries a high-risk score of 26/100 due to its community-maintained status and lack of an official vendor association. Specifically, the server provides full write access for every installation with no read-only mode, and it lacks an explicit license, making legal terms of use unclear. It is recommended only for experienced users comfortable with managing these security implications, as it has not undergone editorial review and features a single-contributor bus-factor risk.
- Supports OAuth2 alongside traditional password authentication
- Zero direct dependencies reduces the supply-chain surface area
- Provides full-featured CRUD operations for Bitwarden items
- High security risk due to lack of read-only mode
- Unclear usage rights resulting from missing software license
- Single-contributor repository increases long-term maintenance risk
- Not an official release from the Bitwarden vendor
Tools
| Tool | Description | Risk |
|---|---|---|
| search_bitwarden_items | Search items in Bitwarden | low |
| get_bitwarden_item | Get details of a specific item | low |
| list_bitwarden_folders | List all folders | low |
| create_bitwarden_login | Create a new login | medium |
| create_bitwarden_note | Create a new secure note | medium |
| create_bitwarden_folder | Create a new folder | medium |
| update_bitwarden_item | Update an existing item | medium |
| delete_bitwarden_item | Delete an item | high |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›Does this server work with self-hosted instances like Vaultwarden?
Yes, you can specify your self-hosted URL by configuring the BITWARDEN_BASE_URL environment variable.
›What authentication methods does the server support?
The server supports both password authentication and OAuth2.
›Are API credentials required to run the server?
API credentials are optional; you can provide them via the BITWARDEN_CLIENT_ID and BITWARDEN_CLIENT_SECRET environment variables.
›Can I perform write operations like creating or deleting items?
Yes, the server provides specific tools for creating, updating, and deleting both logins and secure notes.
Badge
Maintain this server? Add the live badge to your README.