Warden MCP Server (icoretech/warden-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 1 tool. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Emerging
74/100
2 months ago

Warden MCP Server

MCP server for Vaultwarden/Bitwarden vault management. Enables AI agents to securely create, search, read, and update vault items via the official Bitwarden CLI, with safe-by-default redaction and support for both stdio and SSE transports.

→ icoretech/warden-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

icoretech

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
1 tools verified — handlers match their declared behaviour
1 read-only tool verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: BW_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configBW_BINif you set it explicitly
configBW_CLIENTIDuser.xxxxx \
configBW_CLIENTSECRETThe examples below use Bitwarden API-key auth. If you prefer username/password login, replace BW_CLIENTID + with BW_USER.
configBW_HOSTenv =https://vaultwarden.example.com \
🔐 secretBW_PASSWORD'your-master-password' \
configBW_UNLOCK_INTERVAL
configBW_USERuser@example.com \
configBW_USERNAME
configKEYCHAIN_ALLOW_ENV_FALLBACKBW_ configuration when =true. You can use
configKEYCHAIN_BW_HOME_ROOT
configKEYCHAIN_DEBUG_BW
configKEYCHAIN_DEBUG_HTTP
configKEYCHAIN_FLOOD_BASE_URL
configKEYCHAIN_FLOOD_CONCURRENCY
configKEYCHAIN_FLOOD_DEBUG
configKEYCHAIN_FLOOD_REQUESTS
configKEYCHAIN_FLOOD_TIMEOUT_MS
configKEYCHAIN_INTEGRATION_PROFILE
configKEYCHAIN_MAX_HEAP_USED_MB(default 1536, set 0 to disable memory fuse)
configKEYCHAIN_METRICS_LOG_INTERVAL_MS(default 0, disabled)
configKEYCHAIN_METRICS_URL
configKEYCHAIN_REQUIRE_ORG_TESTS
configKEYCHAIN_SESSION_MAX_COUNT(default 32)
configKEYCHAIN_SESSION_SWEEP_INTERVAL_MS(default 60000)
configKEYCHAIN_SESSION_TTL_MS(default 900000)
configKEYCHAIN_SYNC_ON_WRITE
configKEYCHAIN_TEXT_COMPAT_MODEIf =structured_json is enabled, supported success and
configMCP_APP_NAME
configREADONLYSet =true to hide mutating tools from the advertised MCP catalog and reject direct write calls (create/edit/delete/move/restore/attachments).
configTOOL_PREFIXTool names default to keychain_. Override to change the namespace and TOOL_SEPARATOR to change the separator (default _, set . for legacy clients).
configTOOL_SEPARATORTool names default to keychain_. Override TOOL_PREFIX to change the namespace and to change the separator (default _, set . for legacy clients).
configVW_APIKEY_ENV_FILE
configVW_BOOTSTRAP_TIMEOUT_MS
configVW_NAME
configVW_ORG_NAME
configWARDEN_MCP_STDIO
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployPORT
// quality suggestions

Dependencies

9 dependencies, 1 flagged: playwright

All four hints declared on every tool

1/1 tools missing one or more hints — described_tool (missing: destructiveHint, idempotentHint, openWorldHint). OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool handlers catch errors

Only 0/1 tool handlers wrap calls in try/catch (0%)

Wrap each tool handler body in try/catch and return a structured error response.

Tool test coverage

Only 0/1 tools referenced in tests (0%)

Write tests that reference each tool by name so every tool has at least one test.

No arbitrary install scripts

Has postinstall/preinstall script — runs arbitrary code on npm install

Remove postinstall/preinstall hooks unless they’re essential.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/icoretech/warden-mcp)](https://m8ven.ai/mcp/icoretech/warden-mcp)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 41d49b1027d71c398b3880c7c4bc1f63e272ac11
code hash: 657fc5f21ccd90ad048d75883f65a599cad3ca653e8d01306157f59b7c350e59
verified: 6/16/2026, 12:05:30 PM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client