An MCP server for Bitwarden/Vaultwarden that exposes vault items to agents with strict controls: metadata is returned without secrets, and secret values are delivered only through Bitwarden Send one-time URLs. It also supports TOTP retrieval and CREATE-only saving of agent-generated secrets into a dedicated collection.
From the registry: Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.
Please install the `mcp-server-vault` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Node.js and npx** — Install Node.js so you can run the server with npx. (https://nodejs.org/)
- **Bitwarden/Vaultwarden personal API key** — Create a personal API key in your Bitwarden/Vaultwarden instance and note the client_id and client_secret. (https://bitwarden.com/help/personal-api-key/)
- **Vault collections setup** — Create the collections used by the server in your Vaultwarden organization. By default these are mcp-exposed and mcp-agent-created. Add items you want agents to access to the exposed collection.
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["-y","@aiwerk/mcp-server-vault"]
- required environment variables:
- `VAULT_API_BASE`: Base URL of your Bitwarden/Vaultwarden instance, without a trailing slash. (example: `<your-vault-api-base>`)
- `VAULT_CLIENT_ID`: Personal API key client_id. (example: `<your-vault-client-id>`)
- `VAULT_CLIENT_SECRET`: Personal API key client_secret. (example: `<your-vault-client-secret>`)
- `VAULT_MASTER_PASSWORD`: Vault master password used for end-to-end decryption key derivation. (example: `<your-vault-master-password>`)
- optional environment variables:
- `VAULT_EXPOSED_COLLECTION`: Name of the collection visible to agents. (example: `<your-exposed-collection-name>`)
- `VAULT_AGENT_CREATED_COLLECTION`: Name of the collection for agent-created secrets. (example: `<your-agent-created-collection-name>`)
- `VAULT_API_TIMEOUT_MS`: HTTP timeout in milliseconds. (example: `<your-timeout-ms>`)
- `DRY_RUN`: Set to 1 to log write operations without executing them. (example: `<0-or-1>`)
- `READ_ONLY`: Set to 1 to block all write operations. (example: `<0-or-1>`)
Note: Server runs over stdio via npx. Default collection names described in the README are mcp-exposed and mcp-agent-created, but they are configurable via environment variables.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.VAULT_API_BASErequiredBase URL of the Bitwarden/Vaultwarden instance.VAULT_CLIENT_IDrequiredPersonal API key client_id used for authentication.VAULT_CLIENT_SECRETrequiredPersonal API key client_secret used for authentication.VAULT_MASTER_PASSWORDrequiredVault master password used for E2E decryption key derivation.Dead code, security, secrets detection and code quality for Python, TypeScript, Go.