MCP.Market

Vault MCP server

by AIWerk·io.github.AIWerk/mcp-server-vault·v0.2.1
No reviews yet

Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

0 stars40 downloads/wk

Reviews

Write one

Nobody has reviewed Vault yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Vault tools (7, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_totp_code

    Get the current TOTP code for a vault login item with TOTP configured.

  • get_vault_metadata

    Get full metadata for a named vault item.

  • health_check

    Check connectivity and configuration of the Bitwarden/Vaultwarden vault.

  • list_vault_items

    List vault items from the mcp-exposed and mcp-agent-created collections.

  • reveal_secret_via_sendwrite action

    Reveal a vault secret through a Bitwarden Send — an E2E-encrypted one-time URL.

  • save_generated_secret

    Save an agent-generated secret into the mcp-agent-created collection.

  • save_login_item

    Save login credentials (username, password, URL, optional TOTP seed) as a Vaultwarden login item

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan11 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 47 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Vault compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,273 servers
Tools
7
the typical server has 7
Tools that change things
14%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
40
more than 33% of 11,915 servers with a package

What its tools let an agent do: 4 read · 2 create · 1 change

Install Vault in Claude Code, Cursor or VS Code

Runs npx -y @aiwerk/mcp-server-vault on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-server-vault -- npx -y @aiwerk/mcp-server-vault
Add to Cursor

What the publisher says

From the Vault repository's README, as published. We do not edit it. Read it on GitHub

@aiwerk/mcp-server-vault

Bitwarden / Vaultwarden MCP server — BYOK vault access for AI agents.

Exposes 6 tools over stdio. Secret values are never sent in plaintext through listvaultitems or getvaultmetadata — secrets are delivered only through Bitwarden Sends (E2E-encrypted one-time URLs).

Install

npx -y @aiwerk/mcp-server-vault

Configure

Auth — Personal API Key

  1. Log in to your Bitwarden/Vaultwarden instance
  2. Go to Account Settings → Security → Keys → API Key
  3. Note the clientid and clientsecret
  4. Reference: https://bitwarden.com/help/personal-api-key/

Vault Setup

Before using this server, create two collections in your Vaultwarden organization:

  • mcp-exposed — items you want to expose to agents (your existing secrets: API keys, passwords, etc.)
  • mcp-agent-created — items written by agents via savegeneratedsecret

Add items to mcp-exposed via the Vaultwarden web UI.

Custom fields

Optionally add these custom fields to items in mcp-exposed for fine-grained control:

Tools

Security model

  • Opt-in exposure: only items in mcp-exposed or mcp-agent-created are accessible; all other items return itemnotvisible
  • Read-only existing items: no update, delete, or change_* tools exist
  • Secret value delivery via Send only: listvaultitems and getvaultmetadata never return passwords, TOTP seeds, or api-key values
  • E2E encryption preserved: the server decrypts vault data locally (master password stays in env vars, never sent over the wire)
  • Constrained agent writes: savegeneratedsecret and saveloginitem are CREATE-only into the dedicated mcp-agent-created collection

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Vault: common questions

Is Vault MCP server safe?
Mostly: it is graded B (75/100). Read the Vault safety report
How do I install Vault?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Vault need an API key?
Yes. The registry entry asks for VAULT_CLIENT_ID, VAULT_CLIENT_SECRET, VAULT_MASTER_PASSWORD.
Is Vault maintained?
The last commit was 84 days ago (2026-08-10). The latest release is v0.2.1.
How does Vault compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,273 servers); tools 7 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from AIWerk →