Bitwarden MCP server

Connect Bitwarden to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

Deploy BitwardenBook a demo

What you can do with the Bitwarden MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the delete collection tool in Bitwarden
  • Use the reinvite member tool in Bitwarden
  • Use the update collection tool in Bitwarden
  • Use the update group tool in Bitwarden
  • Use the update policy tool in Bitwarden
  • Use the query event logs tool in Bitwarden

Supported Tools

delete_collection

Delete Collection

Permanently delete a collection from the Bitwarden organization. All items in the collection will lose this collection assignment.

reinvite_member

Reinvite Member

Resend the invitation email to an organization member who has not yet accepted. Useful when the original invitation expired or was missed.

update_collection

Update Collection

Update a collection's external ID and group assignments. Omitted fields and permission flags are read back and preserved; a supplied groups array replaces all group assignments. Collections cannot be created through this API. Avoid concurrent changes during the read-then-replace operation.

update_group

Update Group

Update a group's name and specified assignments. Omitted external ID and assignments are read back and preserved before the replacement update. Member assignment is a separate operation; reconcile the group if a later stage fails.

update_policy

Update Policy

Enable, disable, or configure an organization policy. Policies enforce behaviors like requiring two-step login, setting master password requirements, and restricting vault exports. Available for Enterprise organizations.

query_events

Query Event Logs

Query the organization's event logs. Filter by date range, acting user, or related item. Returns timestamped records of user actions, vault operations, collection changes, and more. Supports up to 367 days of history.

get_group

Get Group

Retrieve detailed information about a specific group, including its collection assignments and member IDs.

get_member

Get Member

Retrieve detailed information about a specific organization member, including their role, status, collection assignments, and group memberships.

delete_group

Delete Group

Permanently delete a group from the Bitwarden organization. Members in the group will lose any permissions granted through the group.

revoke_restore_member

Revoke or Restore Member

Revoke or restore organization access for a member. Revoking suspends the member's access without removing them; restoring re-enables their access.

import_organization

Import Organization Data

Bulk import members and groups from an external directory or system. This is useful for directory synchronization scenarios where you need to sync users and groups from an identity provider into Bitwarden.

list_members

List Members

List all members of the Bitwarden organization. Returns each member's role, status, email, two-factor authentication state, and collection assignments.

list_groups

List Groups

List all groups in the Bitwarden organization. Returns each group's name, access settings, external ID, and collection assignments.

list_policies

List Policies

List all organization policies and their current state. Policies control organization-wide behaviors such as requiring two-step login, enforcing master password strength, and restricting vault exports.

list_collections

List Collections

List all collections in the Bitwarden organization. Returns each collection's external ID and group assignments.

update_member

Update Member

Update an organization member's role, collection assignments, external ID, and/or group memberships. Omitted external ID, collections, groups and existing Custom permissions are read back and preserved in the native replacement PUT. Supplied assignment arrays replace that entire assignment set.

remove_member

Remove Member

Remove a member from the Bitwarden organization. This revokes their access to all shared collections but does not delete their Bitwarden user account.

invite_member

Invite Member

Invite a new member to the Bitwarden organization by email. You can assign a role, specify individual collection assignments and supported permission flags. The current Public API does not accept the legacy accessAll flag.

create_group

Create Group

Create a new group in the Bitwarden organization. Groups can be assigned to collections and have members added to simplify permission management.

get_collection

Get Collection

Read an exact organization collection and its group permissions. Discover its collectionId with list_collections. Collection names and vault items are not available through this API.

get_policy

Get Policy

Read one organization policy by its native policyType from list_policies. The provider route uses a numeric policy type, not a policy UUID.

Connect Bitwarden to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Bitwarden in Metorial. In your Metorial portal, enable the Bitwarden MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Bitwarden tools.

Run Bitwarden through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Bitwarden and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Bitwarden tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Bitwarden

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Resolve site users to numeric Person/Group LookupId values. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Retrieve site properties and search for sites across Microsoft 365.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Sentry

Track, manage, and resolve application errors and performance issues. List, query, and bulk-update issues and error events with filters like status, assignment, and tags. Create and manage releases, associate commits, and upload source maps. Configure issue alert rules and metric alert rules with notification actions. Set up cron monitors to detect missed or failed scheduled jobs. Build custom dashboards with configurable widgets. Run ad-hoc Discover queries across errors and transactions for performance analysis. Manage organizations, teams, projects, and members. Provision users via SCIM. Access session replay data.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Technical notes for Bitwarden

Manage organization members, groups, collections, and policies in Bitwarden. Invite, update, and remove members, assign roles and group memberships, and configure collection access permissions. Enforce organization-wide security policies such as two-step login and master password requirements. Query and export event logs to track user actions and organization activity. Store, retrieve, create, update, and delete developer secrets (API keys, database credentials) organized into projects with granular access control. Supports SCIM provisioning for automatic user and group syncing from identity providers.

Frequently asked questions

Common questions about connecting Bitwarden to AI agents with Metorial.

  1. How many tools does the Bitwarden MCP server have?
    The Bitwarden MCP server exposes 21 tools, including Delete Collection, Reinvite Member, Update Collection. Each one is governed and traced through Metorial.
  2. Bitwarden exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Bitwarden MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Bitwarden and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Bitwarden MCP server yourself or use the hosted gateway.

Connect Bitwarden to production AI agents

See how Metorial gives your team governed access to Bitwarden, with tracing and security controls built in.

Book a demoDeploy Bitwarden