MCP Server by bitwarden

by bitwarden• 302•• Scanned•Claim this listing•Request removal
Coding Agentsbitwardenmcpmcp servertypescript

MCP server for interaction with Bitwarden.

MCP Server is an open-source mcp server by bitwarden, written mainly in TypeScript, with 302 GitHub stars and the GPL-3.0 license. Its code was last updated Oct 27, 2026. The latest npm release is @bitwarden/mcp-server 2026.7.0, published Jul 7, 2026, with 1,846 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit 4fd2b49. Seen able to read environment and secrets. Scan policy

aboutREADMEsecurityreviews

How to install MCP Server

Built from the start command in the project's README: npx -y @bitwarden/mcp-server. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add mcp-server-bitwarden -- npx -y @bitwarden/mcp-server
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "mcp-server-bitwarden": {
      "command": "npx",
      "args": [
        "-y",
        "@bitwarden/mcp-server"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "mcp-server-bitwarden": {
      "command": "npx",
      "args": [
        "-y",
        "@bitwarden/mcp-server"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"mcp-server-bitwarden","command":"npx","args":["-y","@bitwarden/mcp-server"]}'

What MCP Server can touch

  • Run shell commandsNot seen in this scan
  • Run dynamic codeNot seen in this scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsFound in the code by our scan
  • Control a web browserNot seen in this scan
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 4fd2b49, Nov 5, 2026. See the scan policy.

Before you install MCP Server

AgenticMart scanned MCP Server on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.

Before you install

  1. Pin the version you reviewed instead of always installing the latest release.
  2. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by bitwarden on GitHub, 302 stars and 39 forks. Popularity is not proof of safety.
  • Last code change: Oct 27, 2026.
  • Open-source license: GPL-3.0.
Read the scan reportWhat our scan checks

Tools MCP Server exposes (59)

Listed by the server itself during our scan of commit 4fd2b49.

  • lock

    Lock the vault

  • unlock

    Unlock the Bitwarden vault. Takes no parameters. Prompts the user for their master password through a native OS dialog; the password is never exposed to the MCP protocol or the LLM. Not supported in headless or non-interactive environments — run "bw unlock --raw" manually and set BW_SESSION in that

  • sync

    Sync vault data from the Bitwarden server

  • status

    Check the status of the Bitwarden CLI

  • list

    List items from your vault or organization

  • get

    Get a specific item from your vault or organization

  • generate

    Generate a secure password or passphrase

  • create_item

    Create a new item (login, secure note, card, or identity) in your vault

  • create_folder

    Create a new folder in your vault

  • edit_item

    Edit an existing item (login, secure note, card, or identity) in your vault

  • edit_folder

    Edit an existing folder in your vault

  • delete

    Delete an item from your vault

  • confirm

    Confirm an invited organization member who has accepted their invitation

  • create_org_collection

    Create a new organization collection

  • edit_org_collection

    Edit an existing organization collection

  • edit_item_collections

    Edit which collections an item belongs to

  • move

    Move (share) a vault item to an organization (formerly the share command)

  • device_approval_list

    List all pending device approval requests for an organization

  • device_approval_approve

    Approve a pending device authorization request

  • device_approval_approve_all

    Approve all current pending device authorization requests

  • device_approval_deny

    Deny a pending device authorization request

  • device_approval_deny_all

    Deny all pending device authorization requests

  • restore

    Restore an item from trash

  • create_text_send

    Create a new Bitwarden Send for securely sharing text

  • create_file_send

    Create a new Bitwarden Send for securely sharing a file

  • list_send

    List all Bitwarden Sends

  • get_send

    Get details of a specific Bitwarden Send

  • edit_send

    Edit an existing Bitwarden Send

  • delete_send

    Delete a Bitwarden Send

  • remove_send_password

    Remove the access password from a Bitwarden Send

  • create_attachment

    Attach a file to an existing vault item

  • list_org_collections

    List all collections

  • get_org_collection

    Retrieve a collection

  • update_org_collection

    Update a collection

  • delete_org_collection

    Delete a collection

  • list_org_members

    List all members

  • get_org_member

    Retrieve a member

  • get_org_member_groups

    Retrieve a member's group ids

  • invite_org_member

    Create a member

  • update_org_member

    Update a member

MCP Server is an open-source mcp server by bitwarden, written mainly in TypeScript. MCP server for interaction with Bitwarden.

At a glance

Stars
302
Forks
39
Language
TypeScript
License
GPL-3.0
Created
May 2025
Last update
Oct 27, 2026
Type
MCP Server
Price
Free

Topics

bitwardenmcpmcp-servertypescript

Questions about MCP Server

What is MCP Server?

MCP server for interaction with Bitwarden.

Who maintains MCP Server?

MCP Server is maintained by bitwarden on GitHub (bitwarden/mcp-server). AgenticMart lists it from public repository data.

Is MCP Server safe to use?

AgenticMart scanned MCP Server on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does MCP Server use?

It is published under the GPL-3.0 license.

MCP Server alternatives

View more →

Similar mcp servers in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
MCP Server (this page)
bitwarden
302GPL-3.0Oct 27, 2026Scanned, no flagged issues
Context Mode
mksglu
33kNone foundNov 1, 2026Not scanned yet
Serena
oraios
31kNone foundOct 28, 2026Not scanned yet
Fastmcp
PrefectHQ
28kApache-2.0Nov 1, 2026Scanned, no flagged issues
Nuclear
nukeop
19kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP For Beginners
microsoft
18kMITOct 30, 2026Scanned, no flagged issues