MCP Server Vault runs on your own machine — the client starts it, so there is no endpoint to ping. 72 installs a week from npm. Last commit 10 Aug 2026.
Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.
Today is the operative word: we check MCP Server Vault every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server-vault -- npx -y @aiwerk/mcp-server-vault
{
"mcpServers": {
"mcp-server-vault": {
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"command": "npx"
}
}
}
[mcp_servers.mcp-server-vault]
command = "npx"
args = ["-y", "@aiwerk/mcp-server-vault"]
{
"mcpServers": {
"mcp-server-vault": {
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"mcp-server-vault": {
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
VAULT_REGION (Bitwarden region or self-hosted mode (e.g. us, eu, or self-hosted).), VAULT_API_BASE (Base URL for self-hosted Vaultwarden, scheme+host only (e.g. https://pass.example.com). Omit for Bitwarden cloud.), VAULT_CLIENT_ID (Bitwarden API client_id (personal API key).), VAULT_CLIENT_SECRET (Bitwarden API client_secret (personal API key).), VAULT_MASTER_PASSWORD (Vault master password, used to unlock and decrypt items.).
The author declared them in the registry entry; get the values from the project itself.
Real email inboxes for AI agents: open an address, read the one-time code, send mail.
Browser + dev-server logs on one correlated timeline, for Claude Code and AI agents.
Rent a real UK phone number and receive SMS/OTP codes — built for AI coding agents.
MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed.
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.
Mermaid to assets. Source code to maps. MCP for agents.
Provision real-SIM US phone numbers, receive SMS, and extract OTP codes for AI agents.
Answers built from our own checks of this server.