icoretech/warden-mcp

Overview

An MCP server that exposes Vaultwarden and Bitwarden vault functionality via Streamable HTTP and stdio transports. Written in TypeScript, it allows AI agents and other MCP clients to read and manage credentials from a password manager.

Best for

Best for
Developers building AI agents that need secure, programmatic access to password vaults

Use cases

• Retrieve login credentials for AI agents during automated workflows
• Manage vault items programmatically from MCP-compatible tools
• Integrate password manager access into custom developer tooling

How to use

Install

npx -y @icoretech/warden-mcp@latest --stdio

Tools exposed

• keychain_status
• keychain_sync
• keychain_search_items
• keychain_get_item
• keychain_get_username
• keychain_create_login
• X-BW-Host
• X-BW-Password
• X-BW-ClientId
• X-BW-ClientSecret
• X-BW-Unlock-Interval
• WARDEN_MCP_HOST
• WARDEN_MCP_STDIO
• MCP_APP_NAME
• TOOL_PREFIX
• TOOL_SEPARATOR
• KEYCHAIN_BW_HOME_ROOT
• KEYCHAIN_ALLOW_ENV_FALLBACK
• KEYCHAIN_SYNC_ON_WRITE
• KEYCHAIN_TEXT_COMPAT_MODE

Tested with

Claude Desktop, Claude Code, Cursor

Notes

An MCP server that exposes Vaultwarden and Bitwarden vault functionality via Streamable HTTP and stdio transports. Written in TypeScript, it allows AI agents and other MCP clients to read and manage credentials from a password manager.

4 stars on GitHub. Last updated 2026-05-31. Licensed MIT.

Use cases

• Retrieve login credentials for AI agents during automated workflows
• Manage vault items programmatically from MCP-compatible tools
• Integrate password manager access into custom developer tooling

Pros

• Supports both Streamable HTTP and stdio transport for flexible integration
• Open source with TypeScript for type safety and maintainability
• Directly interfaces with popular self-hosted Vaultwarden or Bitwarden

Cons

• Small community (4 stars) may mean limited support and slower updates
• Requires a running Vaultwarden or Bitwarden instance to function
• Exposing a password vault to AI agents introduces security considerations

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.