Bitwarden MCP Server

A Model Context Protocol (MCP) server that provides AI assistants with secure access to Bitwarden password manager functionality through two complementary interfaces:

• Vault Management and CLI tools via Bitwarden CLI
• Organization Administration via Bitwarden Public API

[!WARNING] This MCP server is designed exclusively for local use and must never be hosted publicly or exposed over a network.

When you grant an AI assistant access to this server, you are providing the ability to:

• Read vault items including passwords, secure notes, and sensitive data
• Create, modify, and delete vault items
• Access organization secrets and administrative functions
• Expose credentials and vault contents through AI responses

You are responsible for:

• Ensuring this server runs only on your local machine or self-hosted environment
• Understanding what data you're exposing to your AI assistant
• Being aware that AI responses may inadvertently reveal sensitive information
• Using appropriate AI providers (consider self-hosted or local LLMs for sensitive data)
• Never sharing configuration files containing session tokens or API credentials
• Monitoring logs for unexpected activity

Never:

• Deploy this server to cloud hosting, containers, or public servers
• Share your MCP configuration files with others
• Use this server over untrusted networks