2つの補完的なインターフェースを通じて、AIアシスタントにBitwardenパスワードマネージャー機能への安全アクセスを提供するモデルコンテキストプロトコル(MCP)サーバーです。

• Bitwarden CLI経由のVault Management and CLIツール
• 組織管理(BitwardenパブリックAPI経由)

[!警告] このMCPサーバーはローカル専用に設計されており、決して公開またはネットワーク上で公開されてはなりません。

AIアシスタントにこのサーバーへのアクセスを許可すると、以下の機能が得られます:

• パスワード、安全なメモ、機密データなどの金庫内のアイテムを読む
• ボールトアイテムの作成、修正、削除
• 組織秘密および管理機能へのアクセス
• AI応答を通じて認証情報や金庫の内容を公開する

あなたの責任は以下の通りです:

• このサーバーがローカルマシンまたはセルフホスト環境でのみ動作するようにすること
• AIアシスタントにどのようなデータを露出しているかを理解すること
• AIの回答が意図せず機密情報を漏らす可能性があることを認識すること
• 適切なAIプロバイダーの使用(機密データにはセルフホスティングやローカルLLMを検討)
• セッショントークンやAPI認証情報を含む設定ファイルを決して共有しない

Bitwarden MCP Server

A Model Context Protocol (MCP) server that provides AI assistants with secure access to Bitwarden password manager functionality through two complementary interfaces:

• Vault Management and CLI tools via Bitwarden CLI
• Organization Administration via Bitwarden Public API

[!WARNING] This MCP server is designed exclusively for local use and must never be hosted publicly or exposed over a network.

When you grant an AI assistant access to this server, you are providing the ability to:

• Read vault items including passwords, secure notes, and sensitive data
• Create, modify, and delete vault items
• Access organization secrets and administrative functions
• Expose credentials and vault contents through AI responses

You are responsible for:

• Ensuring this server runs only on your local machine or self-hosted environment
• Understanding what data you’re exposing to your AI assistant
• Being aware that AI responses may inadvertently reveal sensitive information
• Using appropriate AI providers (consider self-hosted or local LLMs for sensitive data)
• Never sharing configuration files containing session tokens or API credentials
• Monitoring logs for unexpected activity

Never:

• Deploy this server to cloud hosting, containers, or public servers
• Share your MCP configuration files with others
• Use this server over untrusted networks
• Grant access to untrusted AI clients or services

Use this tool responsibly and at your own risk.

What is MCP?

The Model Context Protocol is an open standard that enables AI assistants to securely interact with local tools and services. This server exposes Bitwarden’s vault management and organization administration capabilities to MCP-compatible AI clients like Claude Desktop.

Features

Vault Management and CLI tools (CLI)

• Session Management: Unlock vault via native OS password dialog, lock vault, sync with server, check status
• Item Operations: List, retrieve, create, edit, delete, restore vault items
  • Supports logins, secure notes, cards, and identities
  • Advanced filtering by URL, folder, collection, or trash status
• Folder Management: Organize items with folders
• Attachments: Upload, download, and manage file attachments
• Password Tools: Generate secure passwords and retrieve TOTP codes
• Bitwarden Send: Create and manage secure ephemeral shares (text/file)
• Organization Items: Move items to organizations, manage collections
• Device Approval: Approve or deny new device login requests
• Member Management: Confirm organization member registrations

Organization Administration (API)

• Collections: Create, update, delete, and manage collection permissions