Best Bitwarden MCP Servers
The most trusted open source password manager for business
Why this server?
Provides tools for vault management (items, folders, attachments, sends, password generation, TOTP) and organization administration (collections, members, groups, policies, audit logs, subscriptions) via Bitwarden CLI and Public API.
AlicenseBqualityBmaintenanceEnables AI assistants to securely manage Bitwarden vault items, folders, attachments, and organization administration through the Model Context Protocol.Last updated59677215GPL 3.0Why this server?
Provides tools for storing, retrieving, listing, and rotating secrets in Bitwarden Secrets Manager, including injecting secrets into allowlisted executables.
AlicenseAqualityBmaintenanceAn MCP server for using Bitwarden Secrets Manager as durable credential storage for agent workflows, enabling secure secret storage, retrieval, and injection into trusted executables.Last updated7MITWhy this server?
Allows reading secrets from Bitwarden vaults using the `bw` CLI (read-only).
AlicenseAqualityBmaintenanceEncrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.Last updated71043MITWhy this server?
Enables programmatic management of Bitwarden vaults, allowing agents to create, search, read, update, and move vault items, manage attachments, and handle organization or collection operations.
AlicenseAqualityAmaintenanceMCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.Last updated5332512MITWhy this server?
Allows migrating vault data from Bitwarden to facilitate policy-gated access for AI agents via the MCP protocol.
AlicenseAqualityAmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.Last updated3555MITWhy this server?
Manages Bitwarden organization vaults with ACID transactions, WAL logging, and human-in-the-loop approval for mutations while keeping secrets blind from AI agents.
Why this server?
Provides tools for interacting with a Bitwarden vault, including listing items, retrieving metadata, revealing secrets via Bitwarden Sends, getting TOTP codes, and saving generated secrets or login items.
Alicense-qualityBmaintenanceMCP server for secure AI agent access to Bitwarden/Vaultwarden vaults with BYOK, exposing tools to list items, reveal secrets via encrypted Sends, get TOTP codes, and save credentials.Last updated99MITWhy this server?
Planned integration for personal password manager functionality, allowing secure credential storage and retrieval for SSH connections
Alicense-qualityCmaintenanceEnables AI assistants to execute commands anLast updatedMITWhy this server?
Enables the use of Bitwarden-stored credentials for automated browser authentication within Skyvern workflows.
Alicense-qualityBmaintenanceSkyvern MCP server lets AI agents control a real browser to navigate websites, fill forms, authenticate, and extract structured data. Supports multi-step automation workflows via natural language.Last updated22,645AGPL 3.0