MCP Server by bitwarden

Findings (29)

• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/client@2.0.0: 2 known vulnerabilities

  GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/server@2.0.0: 4 known vulnerabilities

  GHSA-46jr-4wx8-v453, GHSA-f897-62hf-6gxq, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@1.1.15: 6 known vulnerabilities

  GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@2.1.1: 6 known vulnerabilities

  GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  brace-expansion@5.0.7: 5 known vulnerabilities

  GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  browserslist@4.28.4: 2 known vulnerabilities

  GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fast-uri@3.1.3: 12 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +7 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  ip-address@10.2.0: 8 known vulnerabilities

  GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  js-yaml@3.15.0: 2 known vulnerabilities

  GHSA-2883-xcg3-v3hh, GHSA-5p4m-2wfm-xmqj

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  undici@8.11.2: 8 known vulnerabilities

  GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.3.1: 6 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.4.3: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@1.19.14: 2 known vulnerabilities

  GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@2.1.1: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @modelcontextprotocol/server-legacy@2.0.0: 1 known vulnerability

  GHSA-rvq5-wwqv-78pq

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  baseline-browser-mapping@2.10.40: 1 known vulnerability

  GHSA-w5vr-8v7q-w6rv

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  deepmerge@4.3.1: 1 known vulnerability

  GHSA-gcqx-w48m-w2h4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@10.5.0: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.10: 1 known vulnerability

  GHSA-5r4p-p66f-jhc7

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@10.2.5: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@9.0.9: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.15.3: 3 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  husky

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (59)

• lock

  Lock the vault

• unlock

  Unlock the Bitwarden vault. Takes no parameters. Prompts the user for their master password through a native OS dialog; the password is never exposed to the MCP protocol or the LLM. Not supported in headless or non-interactive environments — run "bw unlock --raw" manually and set BW_SESSION in that

• sync

  Sync vault data from the Bitwarden server

• status

  Check the status of the Bitwarden CLI

• list

  List items from your vault or organization

• get

  Get a specific item from your vault or organization

• generate

  Generate a secure password or passphrase

• create_item

  Create a new item (login, secure note, card, or identity) in your vault

• create_folder

  Create a new folder in your vault

• edit_item

  Edit an existing item (login, secure note, card, or identity) in your vault

• edit_folder

  Edit an existing folder in your vault

• delete

  Delete an item from your vault

• confirm

  Confirm an invited organization member who has accepted their invitation

• create_org_collection

  Create a new organization collection

• edit_org_collection

  Edit an existing organization collection

• edit_item_collections

  Edit which collections an item belongs to

• move

  Move (share) a vault item to an organization (formerly the share command)

• device_approval_list

  List all pending device approval requests for an organization

• device_approval_approve

  Approve a pending device authorization request

• device_approval_approve_all

  Approve all current pending device authorization requests

• device_approval_deny

  Deny a pending device authorization request

• device_approval_deny_all

  Deny all pending device authorization requests

• restore

  Restore an item from trash

• create_text_send

  Create a new Bitwarden Send for securely sharing text

• create_file_send

  Create a new Bitwarden Send for securely sharing a file

• list_send

  List all Bitwarden Sends

• get_send

  Get details of a specific Bitwarden Send

• edit_send

  Edit an existing Bitwarden Send

• delete_send

  Delete a Bitwarden Send

• remove_send_password

  Remove the access password from a Bitwarden Send

• create_attachment

  Attach a file to an existing vault item

• list_org_collections

  List all collections

• get_org_collection

  Retrieve a collection

• update_org_collection

  Update a collection

• delete_org_collection

  Delete a collection

• list_org_members

  List all members

• get_org_member

  Retrieve a member

• get_org_member_groups

  Retrieve a member's group ids

• invite_org_member

  Create a member

• update_org_member

  Update a member

• update_org_member_groups

  Update a member's groups

• remove_org_member

  Remove a member

• reinvite_org_member

  Re-invite a member

• revoke_org_member

  Revoke a member's access to an organization

• restore_org_member

  Restore a previously revoked member

• list_org_groups

  List all groups

• get_org_group

  Retrieve a group

• get_org_group_members

  Retrieve a group's member ids

• create_org_group

  Create a group

• update_org_group

  Update a group

• delete_org_group

  Delete a group

• update_org_group_members

  Update a group's members

• list_org_policies

  List all policies

• get_org_policy

  Retrieve a policy

• update_org_policy

  Update a policy

• get_org_events

  List all events

• get_org_subscription

  Retrieve the subscription details for the current organization

• update_org_subscription

  Update the organization's current subscription for Password Manager and/or Secrets Manager

• import_org_users_and_groups

  Import members and groups from an external system