Bitwarden Public API and Secrets Manager (unofficial)
Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.
Servidor MCP · de mguttmann
Resumen
Bitwarden Public API and Secrets Manager (unofficial) es un servidor MCP publicado por mguttmann. Marketplaces que leemos y que lo publican: 1 (Official MCP Registry). El último cambio que registramos fue el 2026-10-27. Según nuestra pasada por los marketplaces del 2026-11-06.
Qué pide
- Se ejecuta en tu equipo
- Secretos: 3
- Ajustes: 16
Requiere: BITWARDEN_CLOUD_CLIENT_SECRET (secreta), BITWARDEN_SELFHOST_CLIENT_SECRET (secreta), BWS_ACCESS_TOKEN (secreta)
Lo que declara, pide y ejecuta, completo
Instala solo plugins de desarrolladores en los que confíes. Mostramos lo que publican los marketplaces y no probamos plugins.
Paquete
npm the-real-bitwarden-mcp (the-real-bitwarden-mcp en npm)
- Descargas de npm por semana: 822 (2026-11-02)
- Descargas de npm por mes: 830 (2026-11-02)
- Última versión en npm: 0.3.1, publicada el 2026-10-27
Los datos de npm proceden del registro público de npm (registry.npmjs.org, api.npmjs.org). Cada cifra es del propio registro y nunca se suma a otra. Un registro que no publica una cifra no muestra ninguna: sin cifra no es cero.
Funciona con
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Según los marketplaces que lo listan y el transporte MCP que declara, tal como lo documenta cada cliente. No probamos plugins.
Conectar
Comandos y configuraciones generados solo a partir de lo que declaran sus marketplaces. No los ejecutamos por ti ni probamos plugins.
Como servidor MCP local: paquete npm
Generado a partir de lo que declara Official MCP Registry.
claude mcp add --env "BITWARDEN_CLOUD_CLIENT_SECRET=<YOUR_BITWARDEN_CLOUD_CLIENT_SECRET>" --env "BITWARDEN_SELFHOST_CLIENT_SECRET=<YOUR_BITWARDEN_SELFHOST_CLIENT_SECRET>" --env "BWS_ACCESS_TOKEN=<YOUR_BWS_ACCESS_TOKEN>" --transport stdio the-real-bitwarden-mcp -- npx -y the-real-bitwarden-mcp[mcp_servers.the-real-bitwarden-mcp]
command = "npx"
args = ["-y", "the-real-bitwarden-mcp"]
[mcp_servers.the-real-bitwarden-mcp.env]
BITWARDEN_CLOUD_CLIENT_SECRET = "<YOUR_BITWARDEN_CLOUD_CLIENT_SECRET>"
BITWARDEN_SELFHOST_CLIENT_SECRET = "<YOUR_BITWARDEN_SELFHOST_CLIENT_SECRET>"
BWS_ACCESS_TOKEN = "<YOUR_BWS_ACCESS_TOKEN>"{
"mcpServers": {
"the-real-bitwarden-mcp": {
"command": "npx",
"args": [
"-y",
"the-real-bitwarden-mcp"
],
"env": {
"BITWARDEN_CLOUD_CLIENT_SECRET": "<YOUR_BITWARDEN_CLOUD_CLIENT_SECRET>",
"BITWARDEN_SELFHOST_CLIENT_SECRET": "<YOUR_BITWARDEN_SELFHOST_CLIENT_SECRET>",
"BWS_ACCESS_TOKEN": "<YOUR_BWS_ACCESS_TOKEN>"
}
}
}
}Sustituya los valores entre corchetes angulares por los suyos. Mostramos los nombres de los ajustes, nunca valores.
Ajustes opcionales que también indica: BITWARDEN_CLOUD_API_BASE, BITWARDEN_CLOUD_CLIENT_ID, BITWARDEN_CLOUD_IDENTITY_URL, BITWARDEN_CONFIRM_WRITES, BITWARDEN_READ_ONLY, BITWARDEN_SELFHOST_API_BASE, BITWARDEN_SELFHOST_CLIENT_ID, BITWARDEN_SELFHOST_IDENTITY_URL, BWS_API_BASE, BWS_IDENTITY_URL, BWS_ORG_ID, BW_MCP_MAX_RESPONSE_BYTES, LOG_LEVEL.
Dónde está publicado
| Marketplace | Estado | Versión | Cifras | Verificado | Visto por primera vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir el registro) | Publicado | 0.3.1 | Descargas por mes (npm): 830 Descargas por semana (npm): 822 Forks (GitHub): 0 Estrellas (GitHub): 0 |
Sin marca |
Cada cifra es del propio marketplace y nunca se suma entre marketplaces. Un marketplace que no publica cifras no muestra ninguna: sin número no es cero.
Qué cambió
- Official MCP Registry: publicó la versión 0.3.1 (antes 0.3.0)
- Official MCP Registry: cambiaron las variables de entorno (ahora 16): añadido: BW_MCP_MAX_RESPONSE_BYTES
- Official MCP Registry: publicó la versión 0.3.0 (antes 0.2.1)
- Official MCP Registry: publicó la versión 0.2.1 (antes 0.2.0)
- Pasó a ser un producto que seguimos
- Official MCP Registry: apareció
Plugins similares
Productos cuyos propios nombres, descripciones, herramientas y skills son los más cercanos a este por su significado, en todos los marketplaces que leemos. La cercanía se ordena solo dentro de esta lista.
-
1password io.github.CakeRepository/1password
MCP server for 1Password service accounts — tools and resources for vaults and credentials
-
secretcarousel io.github.jyswee/secretcarousel
Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
-
Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only
-
Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
-
SanctumAI — Credential Vault for AI Agents
Credential vault for AI agents — encrypted storage, lease-based access, CRP support.
-
Use passwords and API keys from your KeyZula vault without the assistant seeing them.
-
Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.
-
mcp-server-vault io.github.AIWerk/mcp-server-vault
Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.
-
AI agents use your Obsidian secrets by name — values never reach their context.
-
Request and send secrets for AI agents, end-to-end encrypted and never shown in the chat.
Plugins similares por marketplace
La misma pregunta a cada marketplace por separado: ¿hay allí un equivalente de este plugin?
Publicado en Claude Code: claude-plugins-community (5)
-
WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
-
Manage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and revoke secrets in `dotsecenv` vaults where…
-
Connect AI agents to external APIs with zero credential management. The OneCLI gateway transparently proxies all HTTPS traffic and injects stored credentials (OAuth tokens, API…
-
Connect AI agents to Gmail, Slack, Jira, GitHub & 20+ apps on behalf of users with delegated OAuth, a token vault, and automatic token refresh.
-
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
Publicado en Claude Code: claude-plugins-official (5)
-
WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Sanity content platform integration with MCP server, agent skills, and slash commands. Query and author content, build and optimize GROQ queries, design schemas, and set up Visual…
-
Deploy and manage apps, databases, and infrastructure on Railway. Covers project setup, deploys, environment configuration, networking, troubleshooting, and monitoring.
Publicado en Claude: knowledge-work-plugins (5)
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Sanity content platform integration with MCP server, agent skills, and slash commands. Query and author content, build and optimize GROQ queries, design schemas, and set up Visual…
-
An authenticated hosted MCP server that accesses your PlanetScale organizations, databases, branches, schema, and Insights data. Query against your data, surface slow queries, and…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
Publicado en Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
Manage Supabase projects directly through ChatGPT. Execute SQL queries on PostgreSQL databases, design and modify table schemas, deploy serverless edge functions, and configure…
-
Work with SharePoint using the configured Microsoft SharePoint app connector.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
Publicado en Community GitHub marketplaces (5)
-
Infisical Privileged Access Manager — brokered access to databases and servers for humans and AI agents, with session recording, approvals, and no credential exposure.
-
Create and manage Infisical App Connections — the reusable authenticated links to 83 third-party services that Secret Syncs, Secret Rotations, PKI, and Secret Scanning all depend…
-
Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.
-
Connect Infisical to an identity provider — SAML, OIDC, LDAP and free Google/GitHub SSO, SCIM user and group provisioning, group-to-role mapping, and SSO enforcement with…
-
Guide for the Infisical REST API — authentication, secrets CRUD (v4), projects, identities, pagination, and rate limits.
Publicado en Copilot CLI: github/awesome-copilot (5)
-
Inspect current and historical GitHub Copilot token and AI-credit usage with per-agent rollups and in-canvas session drill-down.
-
See your local Copilot token usage by day, model, and session, and get tips to use it more efficiently.
-
Use Datadog directly in Copilot / VS Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation.
-
Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.
-
Interactive GitHub Copilot canvas for discovering, connecting, and managing hosted MCP servers from an Azure Connector Namespace.
Publicado en Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
workiq
Query Microsoft 365 data with natural language — emails, meetings, documents, Teams messages, and more.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
Publicado en Cursor: cursor/plugins (5)
-
Call the tools your admin publishes on a ServiceNow instance.
-
Let Grok Bot reach MCP servers on your private Tailscale network: connect your own tailnet, or your team's company tailnets turned on by a team admin, with each member using their…
-
Query and remediate compliance tests, controls, frameworks, risks, and vulnerabilities in Vanta.
-
Salesforce (Headless 360, Beta)
Manage records, users, and org setup across Salesforce.
-
Find mail, read scanned documents, and call Stable API endpoints.
Publicado en Docker MCP Catalog (5)
-
## :tada: __It's Official__ :tada: The Okta Open-Source MCP Server integrates with LLMs and AI agents, allowing you to perform various Okta management operations using natural…
-
The Descope Model Context Protocol (MCP) server provides an interface to interact with Descope's Management APIs, enabling the search and retrieval of project-related information.
-
Secure Okta identity and access management via Model Context Protocol (MCP). Access Okta users, groups, applications, logs, and policies through AI assistants with…
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
Publicado en Official MCP Registry (5)
-
1password io.github.CakeRepository/1password
MCP server for 1Password service accounts — tools and resources for vaults and credentials
-
secretcarousel io.github.jyswee/secretcarousel
Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
-
Self-hosted remote MCP server for Bitwarden and Vaultwarden with OAuth 2.1; agents hold tokens only
-
Use API keys from your Keyfold vault in commands and .env files. No tool returns a secret value.
-
SanctumAI — Credential Vault for AI Agents
Credential vault for AI agents — encrypted storage, lease-based access, CRP support.
Publicado en PyPI (MCP servers) (5)
-
## :tada: __It's Official__ :tada: The Okta Open-Source MCP Server integrates with LLMs and AI agents, allowing you to perform various Okta management operations using natural…
-
Google Workspace Admin Security-Audit MCP
MCP server for Google Workspace security auditing — login audit, external sharing, daily brief
-
mcp-acedatacloud io.github.AceDataCloud/mcp-acedatacloud
Manage your AceData Cloud account: services, pricing, APIs, docs, balance, usage, keys & orders
-
notion com.mcparmory/notion
Create, update, and manage pages, databases, and workspace users
-
Gmail, Calendar, Drive, Sheets, Tasks and Contacts for agents, with your own Google login
Publicado en npm registry (MCP servers) (5)
-
1password io.github.CakeRepository/1password
MCP server for 1Password service accounts — tools and resources for vaults and credentials
-
Let AI agents use secrets without seeing them: inject into a command, redact the output.
-
onepassword-agent-mcp io.github.gambadio/onepassword-agent-mcp
Save and use 1Password secrets locally without exposing plaintext to AI agents.
-
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
-
OS keychain secrets for AI coding agents, over MCP.
Encontrados por significado, no por código ni repositorio compartidos: los plugins similares siguen siendo productos distintos, y esto no es una reseña ni una recomendación.
¿Quieres esta marca para tu plugin en nuestro catálogo?
Demuestra que lo mantienes con un archivo en su repositorio, un archivo en tu dominio o un registro DNS, y podrás mostrar esta marca en la ficha, con banners en vivo para tu web y tu README. Cómo funciona la verificación
Además recibirás avisos cuando un marketplace lo publique, lo retire, cambie su marca verificada o lo que pide, y su endpoint remoto quedará monitorizado como un servicio web.
Datos de Official MCP Registry. Las cifras proceden de nuestros propios recorridos periódicos por los marketplaces, leída por última vez el . No publicamos datos de contacto de los editores de plugins.