Bitwarden Public API and Secrets Manager (unofficial) MCP Server

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add the-real-bitwarden-mcp -- npx -y the-real-bitwarden-mcp

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "the-real-bitwarden-mcp"
      ]
    }
  }
}

[mcp_servers.the-real-bitwarden-mcp]
command = "npx"
args = ["-y", "the-real-bitwarden-mcp"]

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "the-real-bitwarden-mcp"
      ]
    }
  }
}

{
  "servers": {
    "the-real-bitwarden-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "the-real-bitwarden-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: BITWARDEN_SELFHOST_API_BASE (Self-hosted instance: API base URL, e.g. https://vault.example.com/api. Configure all four BITWARDEN_SELFHOST_* or all four BITWARDEN_CLOUD_* variables (or both); a partial set is fatal), BITWARDEN_SELFHOST_IDENTITY_URL (Self-hosted instance: identity URL, e.g. https://vault.example.com/identity), BITWARDEN_SELFHOST_CLIENT_ID (Self-hosted instance: organization Public API client id (organization.<uuid>)), BITWARDEN_SELFHOST_CLIENT_SECRET (Self-hosted instance: organization Public API client secret. It can manage members, groups, collections and policies, including creating Owners), BITWARDEN_CLOUD_API_BASE (Bitwarden Cloud: API base URL, e.g. https://api.bitwarden.com. Used for license and subscription tools), BITWARDEN_CLOUD_IDENTITY_URL (Bitwarden Cloud: identity URL, e.g. https://identity.bitwarden.com), BITWARDEN_CLOUD_CLIENT_ID (Bitwarden Cloud: organization Public API client id (organization.<uuid>)), BITWARDEN_CLOUD_CLIENT_SECRET (Bitwarden Cloud: organization Public API client secret), BWS_ACCESS_TOKEN (Optional: Secrets Manager machine account access token; enables the bws_* tools. A malformed token is fatal at startup), BWS_ORG_ID (Optional: organization UUID for the Secrets Manager tools, used when a call passes no organizationId), BWS_API_BASE (Optional: Secrets Manager API base URL; defaults to BITWARDEN_SELFHOST_API_BASE), BWS_IDENTITY_URL (Optional: Secrets Manager identity URL; defaults to BITWARDEN_SELFHOST_IDENTITY_URL), BITWARDEN_CONFIRM_WRITES (true: write tools return a preview unless the call carries confirm "YES". The model sets confirm itself, so this is friction, not a security boundary), BITWARDEN_READ_ONLY (true: write tools stay listed but refuse to run, and bw_raw_request allows GET only), LOG_LEVEL (Log level of the JSON log lines on stderr), BW_MCP_MAX_RESPONSE_BYTES (Successful tool output above this many bytes is cut to valid JSON with a responseTruncated marker that says how to narrow or page the query).