← Index

io.github.AIWerk/mcp-server-vault

io.github.AIWerk/mcp-server-vault·v0.2.1·Security

Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
VAULT_REGION
required

Bitwarden region or self-hosted mode (e.g. us, eu, or self-hosted).

VAULT_API_BASE

Base URL for self-hosted Vaultwarden, scheme+host only (e.g. https://pass.example.com). Omit for Bitwarden cloud.

VAULT_CLIENT_ID
requiredsecret

Bitwarden API client_id (personal API key).

VAULT_CLIENT_SECRET
requiredsecret

Bitwarden API client_secret (personal API key).

VAULT_MASTER_PASSWORD
requiredsecret

Vault master password, used to unlock and decrypt items.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
5
Alternatives in Security