Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "${BITWARDEN_SELFHOST_CLIENT_SECRET}",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "${BITWARDEN_CLOUD_CLIENT_SECRET}",
        "BWS_ACCESS_TOKEN": "${BWS_ACCESS_TOKEN}",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  }
}

claude mcp add the-real-bitwarden-mcp -e "BITWARDEN_SELFHOST_CLIENT_SECRET=${BITWARDEN_SELFHOST_CLIENT_SECRET}" -e "BITWARDEN_CLOUD_CLIENT_SECRET=${BITWARDEN_CLOUD_CLIENT_SECRET}" -e "BWS_ACCESS_TOKEN=${BWS_ACCESS_TOKEN}" -e "BITWARDEN_CONFIRM_WRITES=true" -e "BITWARDEN_READ_ONLY=false" -e "LOG_LEVEL=warn" -e "BW_MCP_MAX_RESPONSE_BYTES=1048576" -- npx -y [email protected]

[mcp_servers.the-real-bitwarden-mcp]
command = "npx"
args = ["-y", "[email protected]"]
env = { "BITWARDEN_SELFHOST_CLIENT_SECRET" = "${BITWARDEN_SELFHOST_CLIENT_SECRET}", "BITWARDEN_CLOUD_CLIENT_SECRET" = "${BITWARDEN_CLOUD_CLIENT_SECRET}", "BWS_ACCESS_TOKEN" = "${BWS_ACCESS_TOKEN}", "BITWARDEN_CONFIRM_WRITES" = "true", "BITWARDEN_READ_ONLY" = "false", "LOG_LEVEL" = "warn", "BW_MCP_MAX_RESPONSE_BYTES" = "1048576" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "the-real-bitwarden-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "[email protected]"
      ],
      "enabled": true,
      "environment": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "{env:BITWARDEN_SELFHOST_CLIENT_SECRET}",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "{env:BITWARDEN_CLOUD_CLIENT_SECRET}",
        "BWS_ACCESS_TOKEN": "{env:BWS_ACCESS_TOKEN}",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  }
}

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "${BITWARDEN_SELFHOST_CLIENT_SECRET}",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "${BITWARDEN_CLOUD_CLIENT_SECRET}",
        "BWS_ACCESS_TOKEN": "${BWS_ACCESS_TOKEN}",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=the-real-bitwarden-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsInRoZS1yZWFsLWJpdHdhcmRlbi1tY3BAMC4zLjEiXSwiZW52Ijp7IkJJVFdBUkRFTl9TRUxGSE9TVF9DTElFTlRfU0VDUkVUIjoiJHtCSVRXQVJERU5fU0VMRkhPU1RfQ0xJRU5UX1NFQ1JFVH0iLCJCSVRXQVJERU5fQ0xPVURfQ0xJRU5UX1NFQ1JFVCI6IiR7QklUV0FSREVOX0NMT1VEX0NMSUVOVF9TRUNSRVR9IiwiQldTX0FDQ0VTU19UT0tFTiI6IiR7QldTX0FDQ0VTU19UT0tFTn0iLCJCSVRXQVJERU5fQ09ORklSTV9XUklURVMiOiJ0cnVlIiwiQklUV0FSREVOX1JFQURfT05MWSI6ImZhbHNlIiwiTE9HX0xFVkVMIjoid2FybiIsIkJXX01DUF9NQVhfUkVTUE9OU0VfQllURVMiOiIxMDQ4NTc2In19"
}

{
  "servers": {
    "the-real-bitwarden-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "${BITWARDEN_SELFHOST_CLIENT_SECRET}",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "${BITWARDEN_CLOUD_CLIENT_SECRET}",
        "BWS_ACCESS_TOKEN": "${BWS_ACCESS_TOKEN}",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  }
}

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "${BITWARDEN_SELFHOST_CLIENT_SECRET}",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "${BITWARDEN_CLOUD_CLIENT_SECRET}",
        "BWS_ACCESS_TOKEN": "${BWS_ACCESS_TOKEN}",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  }
}

extensions:
  "the-real-bitwarden-mcp":
    enabled: true
    name: "the-real-bitwarden-mcp"
    type: stdio
    cmd: "npx"
    args:
      - "-y"
      - "[email protected]"
    envs:
      "BITWARDEN_SELFHOST_CLIENT_SECRET": "${BITWARDEN_SELFHOST_CLIENT_SECRET}"
      "BITWARDEN_CLOUD_CLIENT_SECRET": "${BITWARDEN_CLOUD_CLIENT_SECRET}"
      "BWS_ACCESS_TOKEN": "${BWS_ACCESS_TOKEN}"
      "BITWARDEN_CONFIRM_WRITES": "true"
      "BITWARDEN_READ_ONLY": "false"
      "LOG_LEVEL": "warn"
      "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
    timeout: 300

Placeholders to fill from your own secret store: ${BITWARDEN_SELFHOST_CLIENT_SECRET}, ${BITWARDEN_CLOUD_CLIENT_SECRET}, ${BWS_ACCESS_TOKEN}. The registry never accepts secret values.

This is a local package: the command runs on your machine.

Quality – / 100not scored

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygienen/a · weight 30

n/a
tools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool list unknown

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]

Tool list unknown · checked 2026-11-07 17:28 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance90

livenessn/a

freshness100

hygiene100

+repository +namespace-matches-repo +website ~liveness-unmeasured +updated-11d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

package	registry	version	runtime	secrets
`the-real-bitwarden-mcp`	npm	0.3.1	npx	`BITWARDEN_SELFHOST_CLIENT_SECRET`, `BITWARDEN_CLOUD_CLIENT_SECRET`, `BWS_ACCESS_TOKEN`

Tools (0)

No tools observed. Local packages are never executed by the registry.

Schemas: list_tools.

Similar MCP servers

More from io.github.mguttmann

Official server.json

{
  "name": "io.github.mguttmann/the-real-bitwarden-mcp",
  "title": "Bitwarden Public API and Secrets Manager (unofficial)",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "version": "0.3.1",
  "packages": [
    {
      "version": "0.3.1",
      "transport": {
        "type": "stdio"
      },
      "identifier": "the-real-bitwarden-mcp",
      "runtimeHint": "npx",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "BITWARDEN_SELFHOST_API_BASE",
          "format": "string",
          "description": "Self-hosted instance: API base URL, e.g. https://vault.example.com/api. Configure all four BITWARDEN_SELFHOST_* or all four BITWARDEN_CLOUD_* variables (or both); a partial set is fatal."
        },
        {
          "name": "BITWARDEN_SELFHOST_IDENTITY_URL",
          "format": "string",
          "description": "Self-hosted instance: identity URL, e.g. https://vault.example.com/identity."
        },
        {
          "name": "BITWARDEN_SELFHOST_CLIENT_ID",
          "format": "string",
          "description": "Self-hosted instance: organization Public API client id (organization.<uuid>)."
        },
        {
          "name": "BITWARDEN_SELFHOST_CLIENT_SECRET",
          "format": "string",
          "isSecret": true,
          "description": "Self-hosted instance: organization Public API client secret. It can manage members, groups, collections and policies, including creating Owners."
        },
        {
          "name": "BITWARDEN_CLOUD_API_BASE",
          "format": "string",
          "description": "Bitwarden Cloud: API base URL, e.g. https://api.bitwarden.com. Used for license and subscription tools."
        },
        {
          "name": "BITWARDEN_CLOUD_IDENTITY_URL",
          "format": "string",
          "description": "Bitwarden Cloud: identity URL, e.g. https://identity.bitwarden.com."
        },
        {
          "name": "BITWARDEN_CLOUD_CLIENT_ID",
          "format": "string",
          "description": "Bitwarden Cloud: organization Public API client id (organization.<uuid>)."
        },
        {
          "name": "BITWARDEN_CLOUD_CLIENT_SECRET",
          "format": "string",
          "isSecret": true,
          "description": "Bitwarden Cloud: organization Public API client secret."
        },
        {
          "name": "BWS_ACCESS_TOKEN",
          "format": "string",
          "isSecret": true,
          "description": "Optional: Secrets Manager machine account access token; enables the bws_* tools. A malformed token is fatal at startup."
        },
        {
          "name": "BWS_ORG_ID",
          "format": "string",
          "description": "Optional: organization UUID for the Secrets Manager tools, used when a call passes no organizationId."
        },
        {
          "name": "BWS_API_BASE",
          "format": "string",
          "description": "Optional: Secrets Manager API base URL; defaults to BITWARDEN_SELFHOST_API_BASE."
        },
        {
          "name": "BWS_IDENTITY_URL",
          "format": "string",
          "description": "Optional: Secrets Manager identity URL; defaults to BITWARDEN_SELFHOST_IDENTITY_URL."
        },
        {
          "name": "BITWARDEN_CONFIRM_WRITES",
          "format": "boolean",
          "default": "true",
          "description": "true: write tools return a preview unless the call carries confirm \"YES\". The model sets confirm itself, so this is friction, not a security boundary."
        },
        {
          "name": "BITWARDEN_READ_ONLY",
          "format": "boolean",
          "default": "false",
          "description": "true: write tools stay listed but refuse to run, and bw_raw_request allows GET only."
        },
        {
          "name": "LOG_LEVEL",
          "format": "string",
          "choices": [
            "debug",
            "info",
            "warn",
            "error"
          ],
          "default": "warn",
          "description": "Log level of the JSON log lines on stderr."
        },
        {
          "name": "BW_MCP_MAX_RESPONSE_BYTES",
          "format": "number",
          "default": "1048576",
          "description": "Successful tool output above this many bytes is cut to valid JSON with a responseTruncated marker that says how to narrow or page the query."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/mguttmann/the-real-bitwarden-mcp",
    "source": "github"
  },
  "websiteUrl": "https://github.com/mguttmann/the-real-bitwarden-mcp#readme",
  "description": "Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud."
}