Mcp Server Vault

Lets an AI assistant read and write secrets in a Bitwarden or Vaultwarden vault, including TOTP codes and one-time Sends.

What you can do

Connects an assistant to a Bitwarden or Vaultwarden vault so it can list tagged items, retrieve stored credentials, generate TOTP codes, create one-time Sends, and save new secrets. It runs locally over stdio and authenticates with a Bitwarden personal API key plus the vault master password. No tool list is published, so the exact command set is not documented in the supplied material.

When to use it

Useful when an assistant needs to look up or store credentials during a workflow, for example retrieving an API key or password for a task, producing a TOTP code, or sharing a secret through a one-time Send link. It is aimed at users who already keep their secrets in Bitwarden or a self-hosted Vaultwarden instance.

Requirements

Runs as a local npm package (@aiwerk/mcp-server-vault) over stdio, so Node.js is required. Needs VAULT_CLIENT_ID, VAULT_CLIENT_SECRET and VAULT_MASTER_PASSWORD, plus VAULT_REGION (us, eu, or self-hosted). For self-hosted Vaultwarden, set VAULT_API_BASE to the scheme and host only; omit it for Bitwarden cloud. Network access to the vault server is required.