{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.mguttmann/the-real-bitwarden-mcp","description":"Unofficial MCP server for the Bitwarden Public API and Secrets Manager, self-hosted or cloud.","title":"Bitwarden Public API and Secrets Manager (unofficial)","repository":{"url":"https://github.com/mguttmann/the-real-bitwarden-mcp","source":"github"},"version":"0.3.0","websiteUrl":"https://github.com/mguttmann/the-real-bitwarden-mcp#readme","packages":[{"registryType":"npm","identifier":"the-real-bitwarden-mcp","version":"0.3.0","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Self-hosted instance: API base URL, e.g. https://vault.example.com/api. Configure all four BITWARDEN_SELFHOST_* or all four BITWARDEN_CLOUD_* variables (or both); a partial set is fatal.","format":"string","name":"BITWARDEN_SELFHOST_API_BASE"},{"description":"Self-hosted instance: identity URL, e.g. https://vault.example.com/identity.","format":"string","name":"BITWARDEN_SELFHOST_IDENTITY_URL"},{"description":"Self-hosted instance: organization Public API client id (organization.<uuid>).","format":"string","name":"BITWARDEN_SELFHOST_CLIENT_ID"},{"description":"Self-hosted instance: organization Public API client secret. It can manage members, groups, collections and policies, including creating Owners.","format":"string","isSecret":true,"name":"BITWARDEN_SELFHOST_CLIENT_SECRET"},{"description":"Bitwarden Cloud: API base URL, e.g. https://api.bitwarden.com. Used for license and subscription tools.","format":"string","name":"BITWARDEN_CLOUD_API_BASE"},{"description":"Bitwarden Cloud: identity URL, e.g. https://identity.bitwarden.com.","format":"string","name":"BITWARDEN_CLOUD_IDENTITY_URL"},{"description":"Bitwarden Cloud: organization Public API client id (organization.<uuid>).","format":"string","name":"BITWARDEN_CLOUD_CLIENT_ID"},{"description":"Bitwarden Cloud: organization Public API client secret.","format":"string","isSecret":true,"name":"BITWARDEN_CLOUD_CLIENT_SECRET"},{"description":"Optional: Secrets Manager machine account access token; enables the bws_* tools. A malformed token is fatal at startup.","format":"string","isSecret":true,"name":"BWS_ACCESS_TOKEN"},{"description":"Optional: organization UUID for the Secrets Manager tools, used when a call passes no organizationId.","format":"string","name":"BWS_ORG_ID"},{"description":"Optional: Secrets Manager API base URL; defaults to BITWARDEN_SELFHOST_API_BASE.","format":"string","name":"BWS_API_BASE"},{"description":"Optional: Secrets Manager identity URL; defaults to BITWARDEN_SELFHOST_IDENTITY_URL.","format":"string","name":"BWS_IDENTITY_URL"},{"description":"true: write tools return a preview unless the call carries confirm \"YES\". The model sets confirm itself, so this is friction, not a security boundary.","format":"boolean","default":"true","name":"BITWARDEN_CONFIRM_WRITES"},{"description":"true: write tools stay listed but refuse to run, and bw_raw_request allows GET only.","format":"boolean","default":"false","name":"BITWARDEN_READ_ONLY"},{"description":"Log level of the JSON log lines on stderr.","format":"string","default":"warn","choices":["debug","info","warn","error"],"name":"LOG_LEVEL"},{"description":"Successful tool output above this many bytes is cut to valid JSON with a responseTruncated marker that says how to narrow or page the query.","format":"number","default":"1048576","name":"BW_MCP_MAX_RESPONSE_BYTES"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-27T17:36:33.400219Z","publishedAt":"2026-10-27T17:36:33.400219Z","updatedAt":"2026-10-27T17:36:33.400219Z","isLatest":true}}}