Bitwarden MCP
Open-source password vault for agents
Bitwarden's official MCP server (40+ tools) lets an AI manage your vault — list, retrieve, create and edit logins, notes, cards and identities — with a native OS unlock dialog so your master password never travels through MCP or reaches the LLM. Requires the Bitwarden CLI (bw) logged in; works with self-hosted Vaultwarden too.
Install Bitwarden MCP
Paste into claude_desktop_config.json
{
"mcpServers": {
"bitwarden": {
"command": "npx",
"args": [
"-y",
"@bitwarden/mcp-server"
]
}
}
}Run in your terminal
claude mcp add bitwarden -- npx -y @bitwarden/mcp-server Paste into .cursor/mcp.json
{
"mcpServers": {
"bitwarden": {
"command": "npx",
"args": [
"-y",
"@bitwarden/mcp-server"
]
}
}
} After adding the server, fully restart your MCP client. Replace <placeholders> (tokens, paths) with your own values.
Facts
- Stars
- ★ 1,100
- Maintainer
- Bitwarden (official)
Trust score, capability surface (filesystem, shell, network) and risk flags — reviewed in your browser.
Known limitations
Any secret the AI reads is sent to your LLM provider in plaintext and stays in the conversation. Use a dedicated, low-sensitivity folder, scope access tightly, and do not have it print live passwords into chat.