Bitwarden Public API and Secrets Manager (unofficial)

io.github.mguttmann/the-real-bitwarden-mcp

Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.

View repository →Homepage →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "the-real-bitwarden-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "the-real-bitwarden-mcp@0.3.1"
      ],
      "env": {
        "BITWARDEN_SELFHOST_CLIENT_SECRET": "<your BITWARDEN_SELFHOST_CLIENT_SECRET>",
        "BITWARDEN_CLOUD_CLIENT_SECRET": "<your BITWARDEN_CLOUD_CLIENT_SECRET>",
        "BWS_ACCESS_TOKEN": "<your BWS_ACCESS_TOKEN>",
        "BITWARDEN_CONFIRM_WRITES": "true",
        "BITWARDEN_READ_ONLY": "false",
        "LOG_LEVEL": "warn",
        "BW_MCP_MAX_RESPONSE_BYTES": "1048576"
      }
    }
  }
}
Environment variables
  • BITWARDEN_SELFHOST_CLIENT_SECRETsecretSelf-hosted instance: organization Public API client secret. It can manage members, groups, collections and policies, including creating Owners.
  • BITWARDEN_CLOUD_CLIENT_SECRETsecretBitwarden Cloud: organization Public API client secret.
  • BWS_ACCESS_TOKENsecretOptional: Secrets Manager machine account access token; enables the bws_* tools. A malformed token is fatal at startup.
  • BITWARDEN_CONFIRM_WRITEStrue: write tools return a preview unless the call carries confirm "YES". The model sets confirm itself, so this is friction, not a security boundary.
  • BITWARDEN_READ_ONLYtrue: write tools stay listed but refuse to run, and bw_raw_request allows GET only.
  • LOG_LEVELLog level of the JSON log lines on stderr.
  • BW_MCP_MAX_RESPONSE_BYTESSuccessful tool output above this many bytes is cut to valid JSON with a responseTruncated marker that says how to narrow or page the query.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.3.1
Registry
active
Published
10/27/2026

More Developer Tools servers

Browse all Developer Tools →

Hetzner Cloud (unofficial)

mguttmann

Unofficial MCP server for the Hetzner Cloud API: one typed tool per operation, read and write.

Developer ToolsAdded 2 weeks ago

Snipe-IT (unofficial)

mguttmann

Unofficial MCP server for the Snipe-IT REST API: assets, users, licenses, guarded writes.

Developer ToolsAdded 2 weeks ago

UniFi Site Manager and Network (unofficial)

mguttmann

Unofficial MCP server for the UniFi Site Manager and Network cloud APIs, with a write-confirm guard.

Developer ToolsAdded 2 weeks ago

io.github.mgwalkerjr95/texas-grocery

mgwalkerjr95

MCP server for HEB grocery store integration - search products, manage carts, clip coupons, and more

Developer ToolsAdded 9 months ago

Embedded / IoT Mentor

mh-mansouri

Embedded/IoT mentor: picks the board and toolchain, estimates cost and battery life.

Developer ToolsAdded 3 months ago

Security Detections

MHaggis

Search security detections across Sigma, Splunk, Elastic, KQL, Sublime, CQL and Jamf with ATT&CK.

Developer ToolsAdded 6 days ago

Add the badge to your site

Show visitors that Bitwarden Public API and Secrets Manager (unofficial) is listed here — it’s also the link we check for a free listing.

Bitwarden Public API and Secrets Manager (unofficial) — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-mguttmann-the-real-bitwarden-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="Bitwarden Public API and Secrets Manager (unofficial) — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![Bitwarden Public API and Secrets Manager (unofficial) — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-mguttmann-the-real-bitwarden-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.