|
| 1 | +{ |
| 2 | + "$schema": "../schemas/server-definition.schema.json", |
| 3 | + "id": "com.bitwarden-mcp-npx", |
| 4 | + "name": "Bitwarden (npx)", |
| 5 | + "alias": "bitwarden", |
| 6 | + "description": "Securely access your Bitwarden vault and administer your organization through the Bitwarden CLI and Public API. Manage vault items, folders, collections, Sends, and password generation, plus organization members, groups, policies, and audit logs.", |
| 7 | + "logo": "https://avatars.githubusercontent.com/u/15990069?v=4", |
| 8 | + "schema_version": "2.1", |
| 9 | + "categories": [ |
| 10 | + "security" |
| 11 | + ], |
| 12 | + "tags": [ |
| 13 | + "bitwarden", |
| 14 | + "password-manager", |
| 15 | + "vault", |
| 16 | + "secrets", |
| 17 | + "credentials", |
| 18 | + "security" |
| 19 | + ], |
| 20 | + "transport": { |
| 21 | + "type": "stdio", |
| 22 | + "command": "npx", |
| 23 | + "args": [ |
| 24 | + "-y", |
| 25 | + "@bitwarden/mcp-server" |
| 26 | + ], |
| 27 | + "env": { |
| 28 | + "BW_SESSION": "${input:BW_SESSION}", |
| 29 | + "BW_CLIENT_ID": "${input:BW_CLIENT_ID}", |
| 30 | + "BW_CLIENT_SECRET": "${input:BW_CLIENT_SECRET}" |
| 31 | + }, |
| 32 | + "metadata": { |
| 33 | + "inputs": [ |
| 34 | + { |
| 35 | + "id": "BW_SESSION", |
| 36 | + "label": "Bitwarden Session Token", |
| 37 | + "description": "Session token that authenticates vault operations through the Bitwarden CLI. Required for vault management tools (items, folders, attachments, Sends, password generation). Obtain it by running 'bw login' then 'bw unlock --raw'.", |
| 38 | + "type": "text", |
| 39 | + "required": true, |
| 40 | + "secret": true, |
| 41 | + "placeholder": "****************************************************", |
| 42 | + "obtain": { |
| 43 | + "url": "https://bitwarden.com/help/cli/#unlock", |
| 44 | + "instructions": "1. Install the Bitwarden CLI (npm install -g @bitwarden/cli)\n2. Run 'bw login' and authenticate\n3. Run 'bw unlock --raw' to print a session token\n4. Copy the printed session token", |
| 45 | + "button_label": "CLI Unlock Docs" |
| 46 | + } |
| 47 | + }, |
| 48 | + { |
| 49 | + "id": "BW_CLIENT_ID", |
| 50 | + "label": "Organization API Client ID", |
| 51 | + "description": "Bitwarden Public API client ID (starts with 'organization.'). Required for organization administration tools (members, groups, collections, policies, audit logs, subscriptions). Note: the MCP server uses BW_CLIENT_ID with an underscore, distinct from the CLI's BW_CLIENTID.", |
| 52 | + "type": "text", |
| 53 | + "required": false, |
| 54 | + "secret": true, |
| 55 | + "placeholder": "organization.****************************************", |
| 56 | + "obtain": { |
| 57 | + "url": "https://bitwarden.com/help/public-api/", |
| 58 | + "instructions": "1. Open the Bitwarden Web Vault\n2. Switch to your organization\n3. Go to Settings > My Organization\n4. In the 'API Key' section click 'View API Key'\n5. Copy the client_id value", |
| 59 | + "button_label": "Get Organization API Key" |
| 60 | + } |
| 61 | + }, |
| 62 | + { |
| 63 | + "id": "BW_CLIENT_SECRET", |
| 64 | + "label": "Organization API Client Secret", |
| 65 | + "description": "Bitwarden Public API client secret paired with the client ID. Required for organization administration tools. Note: the MCP server uses BW_CLIENT_SECRET with an underscore, distinct from the CLI's BW_CLIENTSECRET.", |
| 66 | + "type": "text", |
| 67 | + "required": false, |
| 68 | + "secret": true, |
| 69 | + "placeholder": "********************************", |
| 70 | + "obtain": { |
| 71 | + "url": "https://bitwarden.com/help/public-api/", |
| 72 | + "instructions": "1. Open the Bitwarden Web Vault\n2. Switch to your organization\n3. Go to Settings > My Organization\n4. In the 'API Key' section click 'View API Key'\n5. Copy the client_secret value", |
| 73 | + "button_label": "Get Organization API Key" |
| 74 | + } |
| 75 | + } |
| 76 | + ] |
| 77 | + } |
| 78 | + }, |
| 79 | + "auth": { |
| 80 | + "type": "api_key", |
| 81 | + "instructions": "Vault tools need a BW_SESSION token from 'bw login' then 'bw unlock --raw'. Organization administration tools additionally need a Public API key (BW_CLIENT_ID + BW_CLIENT_SECRET) from the Web Vault under Organization Settings > My Organization > API Key." |
| 82 | + }, |
| 83 | + "contributor": { |
| 84 | + "name": "Bitwarden", |
| 85 | + "github": "bitwarden", |
| 86 | + "url": "https://bitwarden.com" |
| 87 | + }, |
| 88 | + "links": { |
| 89 | + "repository": "https://github.com/bitwarden/mcp-server", |
| 90 | + "homepage": "https://bitwarden.com", |
| 91 | + "documentation": "https://github.com/bitwarden/mcp-server#readme" |
| 92 | + }, |
| 93 | + "platforms": [ |
| 94 | + "all" |
| 95 | + ], |
| 96 | + "capabilities": { |
| 97 | + "tools": true, |
| 98 | + "resources": false, |
| 99 | + "prompts": false, |
| 100 | + "read_only_mode": false |
| 101 | + }, |
| 102 | + "changelog_url": "https://github.com/bitwarden/mcp-server/releases" |
| 103 | +} |
0 commit comments