MCP server

Registry

Bitwarden Public API and Secrets Manager (unofficial) MCP Server

Name: Bitwarden Public API and Secrets Manager (unofficial) MCP Server
Author: mguttmann

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

Bitwarden Public API and Secrets Manager (unofficial) scores 37 (Limited), licensed MIT and written in TypeScript. It installs as a local process. It does not declare tools yet. Filed under Uncategorized. GitHub shows 0 stars. Install configs are generated for 10 clients. Being listed in the registry is not the same as being vendor-official.

by mguttmannMITTypeScript0 stars

Install View on GitHub

Trust score

37Limited

Limited trust

37 of 100 from six public signals. Nobody can buy a point.

OSI-style license: mit.

How we score trust

Scorecard

License, quality and maintenance

How grades work

License: Grade A
MIT is a permissive open source license.
How license is graded
Quality: Not graded
No README or tool list has been captured yet.
How quality is graded
Maintenance: Grade A
Last commit or release 13 days ago.
How maintenance is graded

Trust breakdown

Where the 37 comes from

0 + 20 + 0 + 10 + 4 + 3 = 37. Each factor is capped, so no single signal can carry a listing.

Registry0 / 30

Active in the official MCP registry, plus a known vendor namespace.

Maintenance20 / 20

How recently the repository saw a commit or release.

Popularity0 / 20

GitHub stars and weekly downloads, on a log scale.

License10 / 10

A clear, OSI-style open-source license.

Security4 / 10

Not archived, a secure install path, a pinned version.

Docs3 / 10

A real summary, a README with depth, listed tools.

Install

Pick your client, copy the config, paste it in.

Add to Cursor Install in VS Code Install in VS Code Insiders

Needs Cursor or VS Code installed on this device. The button opens the app and asks you to confirm before it adds the server.

~/Library/Application Support/Claude/claude_desktop_config.json

{  "mcpServers": {    "mguttmann-the-real-bitwarden-mcp": {      "command": "npx",      "args": [        "-y",        "the-real-bitwarden-mcp@0.3.1"      ],      "env": {        "BITWARDEN_SELFHOST_API_BASE": "",        "BITWARDEN_SELFHOST_IDENTITY_URL": "",        "BITWARDEN_SELFHOST_CLIENT_ID": "",        "BITWARDEN_SELFHOST_CLIENT_SECRET": "YOUR_BITWARDEN_SELFHOST_CLIENT_SECRET",        "BITWARDEN_CLOUD_API_BASE": "",        "BITWARDEN_CLOUD_IDENTITY_URL": "",        "BITWARDEN_CLOUD_CLIENT_ID": "",        "BITWARDEN_CLOUD_CLIENT_SECRET": "YOUR_BITWARDEN_CLOUD_CLIENT_SECRET",        "BWS_ACCESS_TOKEN": "YOUR_BWS_ACCESS_TOKEN",        "BWS_ORG_ID": "",        "BWS_API_BASE": "",        "BWS_IDENTITY_URL": "",        "BITWARDEN_CONFIRM_WRITES": "true",        "BITWARDEN_READ_ONLY": "false",        "LOG_LEVEL": "warn",        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"      }    }  }}

Install guide

Environment variables

Name	Required	Notes
`BITWARDEN_SELFHOST_API_BASE`	Optional	Self-hosted instance: API base URL, e.g. https://vault.example.com/api. Configure all four BITWARDEN_SELFHOST_* or all four BITWARDEN_CLOUD_* variables (or both); a partial set is fatal.
`BITWARDEN_SELFHOST_IDENTITY_URL`	Optional	Self-hosted instance: identity URL, e.g. https://vault.example.com/identity.
`BITWARDEN_SELFHOST_CLIENT_ID`	Optional	Self-hosted instance: organization Public API client id (organization.<uuid>).
`BITWARDEN_SELFHOST_CLIENT_SECRET`Secret	Optional	Self-hosted instance: organization Public API client secret. It can manage members, groups, collections and policies, including creating Owners.
`BITWARDEN_CLOUD_API_BASE`	Optional	Bitwarden Cloud: API base URL, e.g. https://api.bitwarden.com. Used for license and subscription tools.
`BITWARDEN_CLOUD_IDENTITY_URL`	Optional	Bitwarden Cloud: identity URL, e.g. https://identity.bitwarden.com.
`BITWARDEN_CLOUD_CLIENT_ID`	Optional	Bitwarden Cloud: organization Public API client id (organization.<uuid>).
`BITWARDEN_CLOUD_CLIENT_SECRET`Secret	Optional	Bitwarden Cloud: organization Public API client secret.
`BWS_ACCESS_TOKEN`Secret	Optional	Optional: Secrets Manager machine account access token; enables the bws_* tools. A malformed token is fatal at startup.
`BWS_ORG_ID`	Optional	Optional: organization UUID for the Secrets Manager tools, used when a call passes no organizationId.
`BWS_API_BASE`	Optional	Optional: Secrets Manager API base URL; defaults to BITWARDEN_SELFHOST_API_BASE.
`BWS_IDENTITY_URL`	Optional	Optional: Secrets Manager identity URL; defaults to BITWARDEN_SELFHOST_IDENTITY_URL.
`BITWARDEN_CONFIRM_WRITES`	Optional	true: write tools return a preview unless the call carries confirm "YES". The model sets confirm itself, so this is friction, not a security boundary.
`BITWARDEN_READ_ONLY`	Optional	true: write tools stay listed but refuse to run, and bw_raw_request allows GET only.
`LOG_LEVEL`	Optional	Log level of the JSON log lines on stderr.
`BW_MCP_MAX_RESPONSE_BYTES`	Optional	Successful tool output above this many bytes is cut to valid JSON with a responseTruncated marker that says how to narrow or page the query.

Tools

All capabilities

Tools show up when the registry metadata or the repository README lists them. Public READMEs are read directly. A GitHub token is used only when one is already configured.

About

Local stdio MCP server for Bitwarden (Public API + Secrets Manager). 50+ admin tools for members, groups, collections, policies, licensing, projects, and secrets. For Claude Desktop / Claude Code.

Frequently asked questions

What is Bitwarden Public API and Secrets Manager (unofficial) MCP Server?

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

How do I install Bitwarden Public API and Secrets Manager (unofficial) MCP Server in Claude Desktop, Cursor, or VS Code?

Pick your client in the Install section on this page and copy the generated config into the client's config file. Step-by-step guides: Claude Desktop, Cursor, and VS Code. Bitwarden Public API and Secrets Manager (unofficial) MCP Server runs locally from the npm package the-real-bitwarden-mcp with the command npx -y the-real-bitwarden-mcp@0.3.1.

Is Bitwarden Public API and Secrets Manager (unofficial) MCP Server free and open source?

Yes. Bitwarden Public API and Secrets Manager (unofficial) MCP Server is released under the MIT license, an OSI-approved open-source license, so you can use, modify, and self-host it under those terms.

Does Bitwarden Public API and Secrets Manager (unofficial) MCP Server support remote (HTTP) connections?

No remote endpoint is listed for Bitwarden Public API and Secrets Manager (unofficial) MCP Server. It runs locally on your machine over stdio, started by your MCP client.

How is Bitwarden Public API and Secrets Manager (unofficial) MCP Server's trust score calculated?

Bitwarden Public API and Secrets Manager (unofficial) MCP Server scores 37 out of 100 (Limited). The score adds six capped public signals: registry status, maintenance, popularity, license, documentation, and security. Nobody can pay for points. Read the methodology for the full formula.

Reviews

No reviews yet

—Be the first to review

5 star0

4 star0

3 star0

2 star0

1 star0

No published reviews yet. Used it? Tell the next person how it went.

Add badge to your README

Paste either snippet into the repository README. The image links to this listing.

Markdown

HTML

Manage this listing

Claim this server

Limited trust

License, quality and maintenance

License: Grade A

Quality: Not graded

Maintenance: Grade A