← Back to search

@bitwarden/mcp-server

GitHub Actions Scanned 13d ago

Bitwarden MCP Server

B
76.2 / 100

Versions

2026.7.0latest
Jul 7, 2026
2026.5.1
May 27, 2026
2026.5.0
May 20, 2026
2026.2.0
Feb 18, 2026
2026.1.0
Jan 7, 2026
+ show 13 moreshow less
2025.10.4
Oct 29, 2025
2025.10.3
Oct 21, 2025
2025.10.2
Oct 10, 2025
2025.10.1
Oct 9, 2025
2025.10.0
Oct 1, 2025
2025.9.0
Sep 30, 2025
2025.8.2
Aug 8, 2025
2025.8.1
Aug 1, 2025
2025.8.0
Aug 1, 2025
2025.7.2
Jul 11, 2025
2025.7.1
Jul 10, 2025
2025.7.0
Jul 9, 2025
2025.7.0-beta.1
Jul 9, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 59

revoke_org_member
annotations: none low

Revoke a member's access to an organization

restore_org_member
annotations: none low

Restore a previously revoked member

update_org_group_members
annotations: none low

Update a group's members

list_org_policies
annotations: none low

List all policies

get_org_policy
annotations: none low

Retrieve a policy

update_org_policy
annotations: none low

Update a policy

get_org_events
annotations: none low

List all events

list_org_collections
annotations: none low

List all collections

get_org_collection
annotations: none low

Retrieve a collection

update_org_collection
annotations: none low

Update a collection

delete_org_collection
annotations: none low

Delete a collection

list_org_members
annotations: none low

List all members

get_org_member
annotations: none low

Retrieve a member

invite_org_member
annotations: none low

Create a member

update_org_member
annotations: none low

Update a member

remove_org_member
annotations: none low

Remove a member

list_org_groups
annotations: none low

List all groups

get_org_group
annotations: none low

Retrieve a group

create_org_group
annotations: none low

Create a group

update_org_group
annotations: none low

Update a group

delete_org_group
annotations: none low

Delete a group

get_org_member_groups
annotations: none low

Retrieve a member's group ids

get_org_group_members
annotations: none low

Retrieve a group's member ids

update_org_member_groups
annotations: none low

Update a member's groups

reinvite_org_member
annotations: none low

Re-invite a member

get_org_subscription
annotations: none low

Retrieve the subscription details for the current organization

update_org_subscription
annotations: none low

Update the organization's current subscription for Password Manager and/or Secrets Manager

import_org_users_and_groups
annotations: none low

Import members and groups from an external system

lock
annotations: none low

Lock the vault

unlock
annotations: none low

Unlock the Bitwarden vault. Takes no parameters. Prompts the user for their master password through a native OS dialog; the password is never exposed to the MCP protocol or the LLM. Not supported in headless or non-interactive environments — run "bw unlock --raw" manually and set BW_SESSION in that case.

sync
annotations: none low

Sync vault data from the Bitwarden server

status
annotations: none low

Check the status of the Bitwarden CLI

list
annotations: none low

List items from your vault or organization

get
annotations: none low

Get a specific item from your vault or organization

generate
annotations: none low

Generate a secure password or passphrase

create_item
annotations: none low

Create a new item (login, secure note, card, or identity) in your vault

create_folder
annotations: none low

Create a new folder in your vault

edit_item
annotations: none low

Edit an existing item (login, secure note, card, or identity) in your vault

edit_folder
annotations: none low

Edit an existing folder in your vault

delete
annotations: none low

Delete an item from your vault

confirm
annotations: none low

Confirm an invited organization member who has accepted their invitation

create_org_collection
annotations: none low

Create a new organization collection

edit_org_collection
annotations: none low

Edit an existing organization collection

edit_item_collections
annotations: none low

Edit which collections an item belongs to

move
annotations: none low

Move (share) a vault item to an organization (formerly the share command)

device_approval_list
annotations: none low

List all pending device approval requests for an organization

device_approval_approve
annotations: none low

Approve a pending device authorization request

device_approval_approve_all
annotations: none low

Approve all current pending device authorization requests

device_approval_deny
annotations: none low

Deny a pending device authorization request

device_approval_deny_all
annotations: none low

Deny all pending device authorization requests

restore
annotations: none low

Restore an item from trash

create_text_send
annotations: none low

Create a new Bitwarden Send for securely sharing text

create_file_send
annotations: none low

Create a new Bitwarden Send for securely sharing a file

list_send
annotations: none low

List all Bitwarden Sends

get_send
annotations: none low

Get details of a specific Bitwarden Send

edit_send
annotations: none low

Edit an existing Bitwarden Send

delete_send
annotations: none low

Delete a Bitwarden Send

remove_send_password
annotations: none low

Remove the access password from a Bitwarden Send

create_attachment
annotations: none low

Attach a file to an existing vault item

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 131

info
Tool: get_org_events manifest_parser · 90%
low
Tool 'list_org_collections' has no annotations annotation_checker · 100%
low
Tool 'get_org_collection' has no annotations annotation_checker · 100%
low
Tool 'update_org_collection' has no annotations annotation_checker · 100%
low
Tool 'delete_org_collection' has no annotations annotation_checker · 100%
low
Tool 'list_org_members' has no annotations annotation_checker · 100%
low
Tool 'get_org_member' has no annotations annotation_checker · 100%
low
Tool 'invite_org_member' has no annotations annotation_checker · 100%
low
Tool 'update_org_member' has no annotations annotation_checker · 100%
low
Tool 'remove_org_member' has no annotations annotation_checker · 100%
low
Tool 'list_org_groups' has no annotations annotation_checker · 100%
low
Tool 'get_org_group' has no annotations annotation_checker · 100%
low
Tool 'create_org_group' has no annotations annotation_checker · 100%
low
Tool 'update_org_group' has no annotations annotation_checker · 100%
low
Tool 'delete_org_group' has no annotations annotation_checker · 100%
low
Tool 'get_org_member_groups' has no annotations annotation_checker · 100%
low
Tool 'get_org_group_members' has no annotations annotation_checker · 100%
low
Tool 'update_org_member_groups' has no annotations annotation_checker · 100%
low
Tool 'reinvite_org_member' has no annotations annotation_checker · 100%
low
Tool 'revoke_org_member' has no annotations annotation_checker · 100%
low
Tool 'restore_org_member' has no annotations annotation_checker · 100%
low
Tool 'update_org_group_members' has no annotations annotation_checker · 100%
low
Tool 'list_org_policies' has no annotations annotation_checker · 100%
low
Tool 'get_org_policy' has no annotations annotation_checker · 100%
low
Tool 'update_org_policy' has no annotations annotation_checker · 100%
low
Tool 'get_org_events' has no annotations annotation_checker · 100%
low
Tool 'get_org_subscription' has no annotations annotation_checker · 100%
low
Tool 'update_org_subscription' has no annotations annotation_checker · 100%
low
Tool 'import_org_users_and_groups' has no annotations annotation_checker · 100%
low
Tool 'lock' has no annotations annotation_checker · 100%
low
Tool 'unlock' has no annotations annotation_checker · 100%
low
Tool 'sync' has no annotations annotation_checker · 100%
low
Tool 'status' has no annotations annotation_checker · 100%
low
Tool 'list' has no annotations annotation_checker · 100%
low
Tool 'get' has no annotations annotation_checker · 100%
low
Tool 'generate' has no annotations annotation_checker · 100%
low
Tool 'create_item' has no annotations annotation_checker · 100%
low
Tool 'create_folder' has no annotations annotation_checker · 100%
low
Tool 'edit_item' has no annotations annotation_checker · 100%
low
Tool 'edit_folder' has no annotations annotation_checker · 100%
low
Tool 'delete' has no annotations annotation_checker · 100%
low
Tool 'confirm' has no annotations annotation_checker · 100%
low
Tool 'create_org_collection' has no annotations annotation_checker · 100%
low
Tool 'edit_org_collection' has no annotations annotation_checker · 100%
low
Tool 'edit_item_collections' has no annotations annotation_checker · 100%
low
Tool 'move' has no annotations annotation_checker · 100%
low
Tool 'device_approval_list' has no annotations annotation_checker · 100%
low
Tool 'device_approval_approve' has no annotations annotation_checker · 100%
low
Tool 'device_approval_approve_all' has no annotations annotation_checker · 100%
low
Tool 'device_approval_deny' has no annotations annotation_checker · 100%
low
Tool 'device_approval_deny_all' has no annotations annotation_checker · 100%
low
Tool 'restore' has no annotations annotation_checker · 100%
low
Tool 'create_text_send' has no annotations annotation_checker · 100%
low
Tool 'create_file_send' has no annotations annotation_checker · 100%
low
Tool 'list_send' has no annotations annotation_checker · 100%
low
Tool 'get_send' has no annotations annotation_checker · 100%
low
Tool 'edit_send' has no annotations annotation_checker · 100%
low
Tool 'delete_send' has no annotations annotation_checker · 100%
low
Tool 'remove_send_password' has no annotations annotation_checker · 100%
low
Tool 'create_attachment' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in bitwarden-mcp-server-620c075/tests/unlock.spec.ts:822 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: list_org_collections manifest_parser · 90%
info
Tool: get_org_collection manifest_parser · 90%
info
Tool: update_org_collection manifest_parser · 90%
info
Tool: delete_org_collection manifest_parser · 90%
info
Tool: list_org_members manifest_parser · 90%
info
Tool: get_org_member manifest_parser · 90%
info
Tool: invite_org_member manifest_parser · 90%
info
Tool: update_org_member manifest_parser · 90%
info
Tool: remove_org_member manifest_parser · 90%
info
Tool: list_org_groups manifest_parser · 90%
info
Tool: get_org_group manifest_parser · 90%
info
Tool: create_org_group manifest_parser · 90%
info
Tool: update_org_group manifest_parser · 90%
info
Tool: delete_org_group manifest_parser · 90%
info
Tool: get_org_member_groups manifest_parser · 90%
info
Tool: get_org_group_members manifest_parser · 90%
info
Tool: update_org_member_groups manifest_parser · 90%
info
Tool: reinvite_org_member manifest_parser · 90%
info
Tool: revoke_org_member manifest_parser · 90%
info
Tool: restore_org_member manifest_parser · 90%
info
Tool: update_org_group_members manifest_parser · 90%
info
Tool: list_org_policies manifest_parser · 90%
info
Tool: get_org_policy manifest_parser · 90%
info
Tool: update_org_policy manifest_parser · 90%
info
Tool: get_org_subscription manifest_parser · 90%
info
Tool: update_org_subscription manifest_parser · 90%
info
Tool: import_org_users_and_groups manifest_parser · 90%
info
Tool: lock manifest_parser · 90%
info
Tool: unlock manifest_parser · 90%
info
Tool: sync manifest_parser · 90%
info
Tool: status manifest_parser · 90%
info
Tool: list manifest_parser · 90%
info
Tool: get manifest_parser · 90%
info
Tool: generate manifest_parser · 90%
info
Tool: create_item manifest_parser · 90%
info
Tool: create_folder manifest_parser · 90%
info
Tool: edit_item manifest_parser · 90%
info
Tool: edit_folder manifest_parser · 90%
info
Tool: delete manifest_parser · 90%
info
Tool: confirm manifest_parser · 90%
info
Tool: create_org_collection manifest_parser · 90%
info
Tool: edit_org_collection manifest_parser · 90%
info
Tool: edit_item_collections manifest_parser · 90%
info
Tool: move manifest_parser · 90%
info
Tool: device_approval_list manifest_parser · 90%
info
Tool: device_approval_approve manifest_parser · 90%
info
Tool: device_approval_approve_all manifest_parser · 90%
info
Tool: device_approval_deny manifest_parser · 90%
info
Tool: device_approval_deny_all manifest_parser · 90%
info
Tool: restore manifest_parser · 90%
info
Tool: create_text_send manifest_parser · 90%
info
Tool: create_file_send manifest_parser · 90%
info
Tool: list_send manifest_parser · 90%
info
Tool: get_send manifest_parser · 90%
info
Tool: edit_send manifest_parser · 90%
info
Tool: delete_send manifest_parser · 90%
info
Tool: remove_send_password manifest_parser · 90%
info
Tool: create_attachment manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 653 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%