74
/ 100
1 month ago
glama
Warden MCP Server
MCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
1 tools verified — handlers match their declared behaviour
1 read-only tool verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: BW_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
BW_BIN— if you set it explicitlyconfig
BW_CLIENTID— user.xxxxx \config
BW_CLIENTSECRET— The examples below use Bitwarden API-key auth. If you prefer username/password login, replace BW_CLIENTID + with BW_USER.config
BW_HOST— env =https://vaultwarden.example.com \🔐 secret
BW_PASSWORD— 'your-master-password' \config
BW_UNLOCK_INTERVALconfig
BW_USER— user@example.com \config
BW_USERNAMEconfig
KEYCHAIN_ALLOW_ENV_FALLBACK— BW_ configuration when =true. You can useconfig
KEYCHAIN_BW_HOME_ROOTconfig
KEYCHAIN_DEBUG_BWconfig
KEYCHAIN_DEBUG_HTTPconfig
KEYCHAIN_FLOOD_BASE_URLconfig
KEYCHAIN_FLOOD_CONCURRENCYconfig
KEYCHAIN_FLOOD_DEBUGconfig
KEYCHAIN_FLOOD_REQUESTSconfig
KEYCHAIN_FLOOD_TIMEOUT_MSconfig
KEYCHAIN_INTEGRATION_PROFILEconfig
KEYCHAIN_MAX_HEAP_USED_MB— (default 1536, set 0 to disable memory fuse)config
KEYCHAIN_METRICS_LOG_INTERVAL_MS— (default 0, disabled)config
KEYCHAIN_METRICS_URLconfig
KEYCHAIN_REQUIRE_ORG_TESTSconfig
KEYCHAIN_SESSION_MAX_COUNT— (default 32)config
KEYCHAIN_SESSION_SWEEP_INTERVAL_MS— (default 60000)config
KEYCHAIN_SESSION_TTL_MS— (default 900000)config
KEYCHAIN_SYNC_ON_WRITEconfig
KEYCHAIN_TEXT_COMPAT_MODE— If =structured_json is enabled, supported success andconfig
MCP_APP_NAMEconfig
PORTconfig
READONLY— Set =true to hide mutating tools from the advertised MCP catalog and reject direct write calls (create/edit/delete/move/restore/attachments).config
TOOL_PREFIX— Tool names default to keychain_. Override to change the namespace and TOOL_SEPARATOR to change the separator (default _, set . for legacy clients).config
TOOL_SEPARATOR— Tool names default to keychain_. Override TOOL_PREFIX to change the namespace and to change the separator (default _, set . for legacy clients).config
VW_APIKEY_ENV_FILEconfig
VW_BOOTSTRAP_TIMEOUT_MSconfig
VW_NAMEconfig
VW_ORG_NAMEconfig
WARDEN_MCP_STDIO// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/icoretech-warden-mcp-1fj4o9)commit: 41d49b1027d71c398b3880c7c4bc1f63e272ac11
code hash: 657fc5f21ccd90ad048d75883f65a599cad3ca653e8d01306157f59b7c350e59
verified: 6/16/2026, 12:05:30 PM