← MCP Security Catalog

Bitwarden MCP Server 2026.7.0

npm · @bitwarden/mcp-server · latest release

Verified with no proven findings
Security result
59
Observed tools
45
Version rating
—
Change risk

Independent inventory

Observed 2026-08-14T06:12:47.165Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
confirmConfirm an invited organization member who has accepted their invitation
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "memberId": {
      "type": "string",
      "description": "Member ID (user identifier) to confirm"
    }
  },
  "required": [
    "organizationId",
    "memberId"
  ]
}
——
create_attachmentAttach a file to an existing vault item
Input schema
{
  "type": "object",
  "properties": {
    "filePath": {
      "type": "string",
      "description": "Path to the file to attach"
    },
    "itemId": {
      "type": "string",
      "description": "ID of the vault item to attach the file to"
    }
  },
  "required": [
    "filePath",
    "itemId"
  ]
}
——
create_file_sendCreate a new Bitwarden Send for securely sharing a file
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Name of the Send"
    },
    "filePath": {
      "type": "string",
      "description": "Path to the file to share"
    },
    "notes": {
      "type": "string",
      "description": "Private notes (not shared with recipient)"
    },
    "password": {
      "type": "string",
      "description": "Access password for the Send"
    },
    "maxAccessCount": {
      "type": "number",
      "description": "Maximum number of times the Send can be accessed"
    },
    "expirationDate": {
      "type": "string",
      "description": "Expiration date in ISO 8601 format"
    },
    "deletionDate": {
      "type": "string",
      "description": "Deletion date in ISO 8601 format"
    }
  },
  "required": [
    "name",
    "filePath"
  ]
}
——
create_folderCreate a new folder in your vault
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Name of the folder"
    }
  },
  "required": [
    "name"
  ]
}
——
create_itemCreate a new item (login, secure note, card, or identity) in your vault
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Name of the item"
    },
    "type": {
      "type": "number",
      "description": "Type of item to create (1: Login, 2: Secure Note, 3: Card, 4: Identity)",
      "enum": [
        1,
        2,
        3,
        4
      ]
    },
    "notes": {
      "type": "string",
      "description": "Notes for the item"
    },
    "login": {
      "type": "object",
      "description": "Login information (required for type 1 - login items)",
      "properties": {
        "username": {
          "type": "string",
          "description": "Username for the login"
        },
        "password": {
          "type": "string",
          "description": "Password for the login"
        },
        "uris": {
          "type": "array",
          "description": "List of URIs associated with the login",
          "items": {
            "type": "object",
            "properties": {
              "uri": {
                "type": "string",
                "description": "URI for the login (e.g., https://example.com)"
              },
              "match": {
                "type": "number",
                "description": "URI match type (0: Domain, 1: Host, 2: Starts With, 3: Exact, 4: Regular Expression, 5: Never)",
                "enum": [
                  0,
                  1,
                  2,
                  3,
                  4,
                  5
                ]
              }
            },
            "required": [
              "uri"
            ]
          }
        },
        "totp": {
          "type": "string",
          "description": "TOTP secret for the login"
        }
      }
    },
    "secureNote": {
      "type": "object",
      "description": "Secure note information (required for type 2 - secure note items)",
      "properties": {
        "type": {
          "type": "number",
          "description": "Type of secure note (0: Generic)",
          "enum": [
            0
          ]
        }
      }
    },
    "card": {
      "type": "object",
      "description": "Card information (required for type 3 - card items)",
      "properties": {
        "cardholderName": {
          "type": "string",
          "description": "Cardholder name"
        },
        "number": {
          "type": "string",
          "description": "Card number"
        },
        "brand": {
          "type": "string",
          "description": "Card brand (Visa, Mastercard, Amex, Discover, etc.)"
        },
        "expMonth": {
          "type": "string",
          "description": "Expiration month (MM)"
        },
        "expYear": {
          "type": "string",
          "description": "Expiration year (YYYY)"
        },
        "code": {
          "type": "string",
          "description": "Security code (CVV)"
        }
      }
    },
    "identity": {
      "type": "object",
      "description": "Identity information (required for type 4 - identity items)",
      "properties": {
        "title": {
          "type": "string",
          "description": "Title (Mr, Mrs, Ms, Dr, etc.)"
        },
        "firstName": {
          "type": "string",
          "description": "First name"
        },
        "middleName": {
          "type": "string",
          "description": "Middle name"
        },
        "lastName": {
          "type": "string",
          "description": "Last name"
        },
        "address1": {
          "type": "string",
          "description": "Address line 1"
        },
        "address2": {
          "type": "string",
          "description": "Address line 2"
        },
        "address3": {
          "type": "string",
          "description": "Address line 3"
        },
        "city": {
          "type": "string",
          "description": "City"
        },
        "state": {
          "type": "string",
          "description": "State or province"
        },
        "postalCode": {
          "type": "string",
          "description": "Postal code"
        },
        "country": {
          "type": "string",
          "description": "Country"
        },
        "company": {
          "type": "string",
          "description": "Company name"
        },
        "email": {
          "type": "string",
          "description": "Email address"
        },
        "phone": {
          "type": "string",
          "description": "Phone number"
        },
        "ssn": {
          "type": "string",
          "description": "Social Security Number"
        },
        "username": {
          "type": "string",
          "description": "Username"
        },
        "passportNumber": {
          "type": "string",
          "description": "Passport number"
        },
        "licenseNumber": {
          "type": "string",
          "description": "License number"
        }
      }
    },
    "folderId": {
      "type": "string",
      "description": "Folder ID to assign the item to"
    }
  },
  "required": [
    "name",
    "type"
  ]
}
——
create_org_collectionCreate a new organization collection
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "name": {
      "type": "string",
      "description": "Name of the collection"
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the collection (optional)"
    },
    "groups": {
      "type": "array",
      "description": "Array of group IDs with access to this collection",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Group ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether the group has read-only access"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether passwords are hidden from the group"
          }
        },
        "required": [
          "id"
        ]
      }
    }
  },
  "required": [
    "organizationId",
    "name"
  ]
}
——
create_org_groupCreate a group
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Name of the group",
      "maxLength": 100
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the group (optional)",
      "maxLength": 300
    },
    "collections": {
      "type": "array",
      "description": "Array of collection IDs the group has access to",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Collection ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether access is read-only"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether to hide passwords"
          },
          "manage": {
            "type": "boolean",
            "description": "Whether the group can manage the collection"
          }
        },
        "required": [
          "id"
        ]
      }
    }
  },
  "required": [
    "name"
  ]
}
——
create_text_sendCreate a new Bitwarden Send for securely sharing text
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Name of the Send"
    },
    "text": {
      "type": "string",
      "description": "Text content to share"
    },
    "hidden": {
      "type": "boolean",
      "description": "Hide text content (requires visibility toggle)"
    },
    "notes": {
      "type": "string",
      "description": "Private notes (not shared with recipient)"
    },
    "password": {
      "type": "string",
      "description": "Access password for the Send"
    },
    "maxAccessCount": {
      "type": "number",
      "description": "Maximum number of times the Send can be accessed"
    },
    "expirationDate": {
      "type": "string",
      "description": "Expiration date in ISO 8601 format"
    },
    "deletionDate": {
      "type": "string",
      "description": "Deletion date in ISO 8601 format"
    }
  },
  "required": [
    "name",
    "text"
  ]
}
——
deleteDelete an item from your vault
Input schema
{
  "type": "object",
  "properties": {
    "object": {
      "type": "string",
      "description": "Type of object to delete",
      "enum": [
        "item",
        "attachment",
        "folder",
        "org-collection"
      ]
    },
    "id": {
      "type": "string",
      "description": "ID of the object to delete"
    },
    "permanent": {
      "type": "boolean",
      "description": "Permanently delete the item instead of moving to trash"
    }
  },
  "required": [
    "object",
    "id"
  ]
}
——
delete_org_collectionDelete a collection
Input schema
{
  "type": "object",
  "properties": {
    "collectionId": {
      "type": "string",
      "description": "ID of the collection"
    }
  },
  "required": [
    "collectionId"
  ]
}
——
delete_org_groupDelete a group
Input schema
{
  "type": "object",
  "properties": {
    "groupId": {
      "type": "string",
      "description": "ID of the group"
    }
  },
  "required": [
    "groupId"
  ]
}
——
delete_sendDelete a Bitwarden Send
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the Send to delete"
    }
  },
  "required": [
    "id"
  ]
}
——
device_approval_approveApprove a pending device authorization request
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "requestId": {
      "type": "string",
      "description": "Device approval request ID"
    }
  },
  "required": [
    "organizationId",
    "requestId"
  ]
}
——
device_approval_approve_allApprove all current pending device authorization requests
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    }
  },
  "required": [
    "organizationId"
  ]
}
——
device_approval_denyDeny a pending device authorization request
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "requestId": {
      "type": "string",
      "description": "Device approval request ID"
    }
  },
  "required": [
    "organizationId",
    "requestId"
  ]
}
——
device_approval_deny_allDeny all pending device authorization requests
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    }
  },
  "required": [
    "organizationId"
  ]
}
——
device_approval_listList all pending device approval requests for an organization
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    }
  },
  "required": [
    "organizationId"
  ]
}
——
edit_folderEdit an existing folder in your vault
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the folder to edit"
    },
    "name": {
      "type": "string",
      "description": "New name for the folder"
    }
  },
  "required": [
    "id",
    "name"
  ]
}
——
edit_itemEdit an existing item (login, secure note, card, or identity) in your vault
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the item to edit"
    },
    "name": {
      "type": "string",
      "description": "New name for the item"
    },
    "notes": {
      "type": "string",
      "description": "New notes for the item"
    },
    "login": {
      "type": "object",
      "description": "Login information to update",
      "properties": {
        "username": {
          "type": "string",
          "description": "New username for the login"
        },
        "password": {
          "type": "string",
          "description": "New password for the login"
        },
        "uris": {
          "type": "array",
          "description": "List of URIs associated with the login",
          "items": {
            "type": "object",
            "properties": {
              "uri": {
                "type": "string",
                "description": "URI for the login (e.g., https://example.com)"
              },
              "match": {
                "type": "number",
                "description": "URI match type (0: Domain, 1: Host, 2: Starts With, 3: Exact, 4: Regular Expression, 5: Never)",
                "enum": [
                  0,
                  1,
                  2,
                  3,
                  4,
                  5
                ]
              }
            },
            "required": [
              "uri"
            ]
          }
        },
        "totp": {
          "type": "string",
          "description": "TOTP secret for the login"
        }
      }
    },
    "secureNote": {
      "type": "object",
      "description": "Secure note information to update",
      "properties": {
        "type": {
          "type": "number",
          "description": "Type of secure note (0: Generic)",
          "enum": [
            0
          ]
        }
      }
    },
    "card": {
      "type": "object",
      "description": "Card information to update",
      "properties": {
        "cardholderName": {
          "type": "string",
          "description": "Cardholder name"
        },
        "number": {
          "type": "string",
          "description": "Card number"
        },
        "brand": {
          "type": "string",
          "description": "Card brand (Visa, Mastercard, Amex, Discover, etc.)"
        },
        "expMonth": {
          "type": "string",
          "description": "Expiration month (MM)"
        },
        "expYear": {
          "type": "string",
          "description": "Expiration year (YYYY)"
        },
        "code": {
          "type": "string",
          "description": "Security code (CVV)"
        }
      }
    },
    "identity": {
      "type": "object",
      "description": "Identity information to update",
      "properties": {
        "title": {
          "type": "string",
          "description": "Title (Mr, Mrs, Ms, Dr, etc.)"
        },
        "firstName": {
          "type": "string",
          "description": "First name"
        },
        "middleName": {
          "type": "string",
          "description": "Middle name"
        },
        "lastName": {
          "type": "string",
          "description": "Last name"
        },
        "address1": {
          "type": "string",
          "description": "Address line 1"
        },
        "address2": {
          "type": "string",
          "description": "Address line 2"
        },
        "address3": {
          "type": "string",
          "description": "Address line 3"
        },
        "city": {
          "type": "string",
          "description": "City"
        },
        "state": {
          "type": "string",
          "description": "State or province"
        },
        "postalCode": {
          "type": "string",
          "description": "Postal code"
        },
        "country": {
          "type": "string",
          "description": "Country"
        },
        "company": {
          "type": "string",
          "description": "Company name"
        },
        "email": {
          "type": "string",
          "description": "Email address"
        },
        "phone": {
          "type": "string",
          "description": "Phone number"
        },
        "ssn": {
          "type": "string",
          "description": "Social Security Number"
        },
        "username": {
          "type": "string",
          "description": "Username"
        },
        "passportNumber": {
          "type": "string",
          "description": "Passport number"
        },
        "licenseNumber": {
          "type": "string",
          "description": "License number"
        }
      }
    },
    "folderId": {
      "type": "string",
      "description": "New folder ID to assign the item to"
    }
  },
  "required": [
    "id"
  ]
}
——
edit_item_collectionsEdit which collections an item belongs to
Input schema
{
  "type": "object",
  "properties": {
    "itemId": {
      "type": "string",
      "description": "Item ID to edit collections for"
    },
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "collectionIds": {
      "type": "array",
      "description": "Array of collection IDs the item should belong to",
      "items": {
        "type": "string"
      }
    }
  },
  "required": [
    "itemId",
    "organizationId",
    "collectionIds"
  ]
}
——
edit_org_collectionEdit an existing organization collection
Input schema
{
  "type": "object",
  "properties": {
    "organizationId": {
      "type": "string",
      "description": "Organization ID"
    },
    "collectionId": {
      "type": "string",
      "description": "Collection ID to edit"
    },
    "name": {
      "type": "string",
      "description": "New name for the collection"
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the collection (optional)"
    },
    "groups": {
      "type": "array",
      "description": "Array of group IDs with access to this collection",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Group ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether the group has read-only access"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether passwords are hidden from the group"
          }
        },
        "required": [
          "id"
        ]
      }
    }
  },
  "required": [
    "organizationId",
    "collectionId"
  ]
}
——
edit_sendEdit an existing Bitwarden Send
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the Send to edit"
    },
    "name": {
      "type": "string",
      "description": "New name for the Send"
    },
    "notes": {
      "type": "string",
      "description": "New private notes"
    },
    "password": {
      "type": "string",
      "description": "New access password"
    },
    "maxAccessCount": {
      "type": "number",
      "description": "New maximum access count"
    },
    "expirationDate": {
      "type": "string",
      "description": "New expiration date in ISO 8601 format"
    },
    "deletionDate": {
      "type": "string",
      "description": "New deletion date in ISO 8601 format"
    },
    "disabled": {
      "type": "boolean",
      "description": "Disable the Send"
    }
  },
  "required": [
    "id"
  ]
}
——
generateGenerate a secure password or passphrase
Input schema
{
  "type": "object",
  "properties": {
    "length": {
      "type": "number",
      "description": "Length of the password (minimum 5)",
      "minimum": 5
    },
    "uppercase": {
      "type": "boolean",
      "description": "Include uppercase characters"
    },
    "lowercase": {
      "type": "boolean",
      "description": "Include lowercase characters"
    },
    "number": {
      "type": "boolean",
      "description": "Include numeric characters"
    },
    "special": {
      "type": "boolean",
      "description": "Include special characters"
    },
    "passphrase": {
      "type": "boolean",
      "description": "Generate a passphrase instead of a password"
    },
    "words": {
      "type": "number",
      "description": "Number of words in the passphrase"
    },
    "separator": {
      "type": "string",
      "description": "Character that separates words in the passphrase"
    },
    "capitalize": {
      "type": "boolean",
      "description": "Capitalize the first letter of each word in the passphrase"
    }
  }
}
——
getGet a specific item from your vault or organization
Input schema
{
  "type": "object",
  "properties": {
    "object": {
      "type": "string",
      "description": "Type of object to retrieve",
      "enum": [
        "item",
        "username",
        "password",
        "uri",
        "totp",
        "notes",
        "exposed",
        "attachment",
        "folder",
        "collection",
        "organization",
        "org-collection",
        "fingerprint"
      ]
    },
    "id": {
      "type": "string",
      "description": "ID or search term for the object (use \"me\" for your own fingerprint, or filename for attachment)"
    },
    "organizationid": {
      "type": "string",
      "description": "Organization ID (required for org-collection)"
    },
    "itemid": {
      "type": "string",
      "description": "Item ID (required for attachment)"
    },
    "output": {
      "type": "string",
      "description": "Output directory path for downloading attachment (optional, should end with /)"
    }
  },
  "required": [
    "object",
    "id"
  ]
}
——
get_org_collectionRetrieve a collection
Input schema
{
  "type": "object",
  "properties": {
    "collectionId": {
      "type": "string",
      "description": "ID of the collection"
    }
  },
  "required": [
    "collectionId"
  ]
}
——
get_org_eventsList all events
Input schema
{
  "type": "object",
  "properties": {
    "start": {
      "type": "string",
      "description": "Start date for events (ISO 8601 format)"
    },
    "end": {
      "type": "string",
      "description": "End date for events (ISO 8601 format)"
    },
    "actingUserId": {
      "type": "string",
      "description": "Filter by acting user ID (optional)"
    },
    "itemId": {
      "type": "string",
      "description": "Filter by item ID (optional)"
    },
    "collectionId": {
      "type": "string",
      "description": "Filter by collection ID (optional)"
    },
    "groupId": {
      "type": "string",
      "description": "Filter by group ID (optional)"
    },
    "policyId": {
      "type": "string",
      "description": "Filter by policy ID (optional)"
    },
    "memberId": {
      "type": "string",
      "description": "Filter by member ID (optional)"
    }
  },
  "required": [
    "start",
    "end"
  ]
}
——
get_org_groupRetrieve a group
Input schema
{
  "type": "object",
  "properties": {
    "groupId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the group"
    }
  },
  "required": [
    "groupId"
  ]
}
——
get_org_group_membersRetrieve a group's member ids
Input schema
{
  "type": "object",
  "properties": {
    "groupId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the group"
    }
  },
  "required": [
    "groupId"
  ]
}
——
get_org_memberRetrieve a member
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "description": "ID of the member"
    }
  },
  "required": [
    "memberId"
  ]
}
——
get_org_member_groupsRetrieve a member's group ids
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member"
    }
  },
  "required": [
    "memberId"
  ]
}
——
get_org_policyRetrieve a policy
Input schema
{
  "type": "object",
  "properties": {
    "policyType": {
      "type": "integer",
      "description": "Type of the policy (0=TwoFactorAuthentication, 1=MasterPassword, 2=PasswordGenerator, 3=SingleOrg, 4=RequireSso, 5=OrganizationDataOwnership, 6=DisableSend, 7=SendOptions, 8=ResetPassword, 9=MaximumVaultTimeout, 10=DisablePersonalVaultExport, 11=ActivateAutofill, 12=AutomaticAppLogIn, 13=FreeFamiliesSponsorshipPolicy, 14=RemoveUnlockWithPin, 15=RestrictedItemTypesPolicy)",
      "minimum": 0,
      "maximum": 15
    }
  },
  "required": [
    "policyType"
  ]
}
——
get_org_subscriptionRetrieve the subscription details for the current organization
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
get_sendGet details of a specific Bitwarden Send
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the Send to retrieve"
    }
  },
  "required": [
    "id"
  ]
}
——
import_org_users_and_groupsImport members and groups from an external system
Input schema
{
  "type": "object",
  "properties": {
    "groups": {
      "type": "array",
      "description": "Groups to import",
      "items": {
        "type": "object",
        "properties": {
          "name": {
            "type": "string",
            "description": "Name of the group",
            "maxLength": 100
          },
          "externalId": {
            "type": "string",
            "description": "External ID for the group",
            "maxLength": 300
          },
          "memberExternalIds": {
            "type": "array",
            "description": "External IDs of members in this group",
            "items": {
              "type": "string"
            }
          }
        },
        "required": [
          "name",
          "externalId"
        ]
      }
    },
    "members": {
      "type": "array",
      "description": "Members to import",
      "items": {
        "type": "object",
        "properties": {
          "email": {
            "type": "string",
            "format": "email",
            "description": "Email address (required for non-deleted users)",
            "maxLength": 256
          },
          "externalId": {
            "type": "string",
            "description": "External ID for the member",
            "maxLength": 300
          },
          "deleted": {
            "type": "boolean",
            "description": "Whether this member should be removed from the organization",
            "default": false
          }
        },
        "required": [
          "externalId"
        ]
      }
    },
    "overwriteExisting": {
      "type": "boolean",
      "description": "Whether to overwrite existing data or append to it",
      "default": false
    },
    "largeImport": {
      "type": "boolean",
      "description": "Indicates an import of over 2000 users and/or groups is expected",
      "default": false
    }
  },
  "required": [
    "overwriteExisting"
  ]
}
——
invite_org_memberCreate a member
Input schema
{
  "type": "object",
  "properties": {
    "email": {
      "type": "string",
      "format": "email",
      "description": "Email address to invite",
      "maxLength": 256
    },
    "type": {
      "type": "number",
      "description": "User type (0: Owner, 1: Admin, 2: User, 4: Custom)",
      "enum": [
        0,
        1,
        2,
        4
      ]
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the member (optional)",
      "maxLength": 300
    },
    "permissions": {
      "type": "object",
      "description": "Custom permissions if the member has a Custom role",
      "properties": {
        "accessEventLogs": {
          "type": "boolean"
        },
        "accessImportExport": {
          "type": "boolean"
        },
        "accessReports": {
          "type": "boolean"
        },
        "createNewCollections": {
          "type": "boolean"
        },
        "editAnyCollection": {
          "type": "boolean"
        },
        "deleteAnyCollection": {
          "type": "boolean"
        },
        "manageGroups": {
          "type": "boolean"
        },
        "managePolicies": {
          "type": "boolean"
        },
        "manageSso": {
          "type": "boolean"
        },
        "manageUsers": {
          "type": "boolean"
        },
        "manageResetPassword": {
          "type": "boolean"
        },
        "manageScim": {
          "type": "boolean"
        }
      }
    },
    "collections": {
      "type": "array",
      "description": "Array of collection IDs the member has access to",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Collection ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether access is read-only"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether to hide passwords"
          },
          "manage": {
            "type": "boolean",
            "description": "Whether the member can manage the collection"
          }
        },
        "required": [
          "id"
        ]
      }
    },
    "groups": {
      "type": "array",
      "description": "Array of group IDs the member belongs to",
      "items": {
        "type": "string",
        "format": "uuid",
        "description": "Group ID"
      }
    }
  },
  "required": [
    "email",
    "type"
  ]
}
——
listList items from your vault or organization
Input schema
{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "description": "Type of items to list (items, folders, collections, organizations, org-collections, org-members)",
      "enum": [
        "items",
        "folders",
        "collections",
        "organizations",
        "org-collections",
        "org-members"
      ]
    },
    "search": {
      "type": "string",
      "description": "Optional search term to filter results"
    },
    "organizationid": {
      "type": "string",
      "description": "Organization ID (required for org-collections and org-members)"
    },
    "url": {
      "type": "string",
      "description": "Filter items by URL (items only, supports \"null\" and \"notnull\" literals)"
    },
    "folderid": {
      "type": "string",
      "description": "Filter items by folder ID (items only, supports \"null\" and \"notnull\" literals)"
    },
    "collectionid": {
      "type": "string",
      "description": "Filter items by collection ID (items only, supports \"null\" and \"notnull\" literals)"
    },
    "trash": {
      "type": "boolean",
      "description": "Filter for items in trash (items only)"
    }
  },
  "required": [
    "type"
  ]
}
——
list_org_collectionsList all collections
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
list_org_groupsList all groups
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
list_org_membersList all members
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
list_org_policiesList all policies
Input schema
{
  "type": "object",
  "properties": {},
  "required": []
}
——
list_sendList all Bitwarden Sends
Input schema
{
  "type": "object",
  "properties": {}
}
——
lockLock the vault
Input schema
{
  "type": "object",
  "properties": {}
}
——
moveMove (share) a vault item to an organization (formerly the share command)
Input schema
{
  "type": "object",
  "properties": {
    "itemId": {
      "type": "string",
      "description": "Item ID to move to organization"
    },
    "organizationId": {
      "type": "string",
      "description": "Organization ID to move the item to"
    },
    "collectionIds": {
      "type": "array",
      "description": "Array of collection IDs the item should be added to in the organization",
      "items": {
        "type": "string"
      }
    }
  },
  "required": [
    "itemId",
    "organizationId",
    "collectionIds"
  ]
}
——
reinvite_org_memberRe-invite a member
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member to re-invite"
    }
  },
  "required": [
    "memberId"
  ]
}
——
remove_org_memberRemove a member
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "description": "ID of the member"
    }
  },
  "required": [
    "memberId"
  ]
}
——
remove_send_passwordRemove the access password from a Bitwarden Send
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "ID of the Send to remove password from"
    }
  },
  "required": [
    "id"
  ]
}
——
restoreRestore an item from trash
Input schema
{
  "type": "object",
  "properties": {
    "object": {
      "type": "string",
      "description": "Type of object to restore",
      "enum": [
        "item"
      ]
    },
    "id": {
      "type": "string",
      "description": "ID of the object to restore"
    }
  },
  "required": [
    "object",
    "id"
  ]
}
——
restore_org_memberRestore a previously revoked member
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member to restore"
    }
  },
  "required": [
    "memberId"
  ]
}
——
revoke_org_memberRevoke a member's access to an organization
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member to revoke"
    }
  },
  "required": [
    "memberId"
  ]
}
——
statusCheck the status of the Bitwarden CLI
Input schema
{
  "type": "object",
  "properties": {}
}
——
syncSync vault data from the Bitwarden server
Input schema
{
  "type": "object",
  "properties": {}
}
——
unlockUnlock the Bitwarden vault. Takes no parameters. Prompts the user for their master password through a native OS dialog; the password is never exposed to the MCP protocol or the LLM. Not supported in headless or non-interactive environments — run "bw unlock --raw" manually and set BW_SESSION in that case.
Input schema
{
  "type": "object",
  "properties": {}
}
——
update_org_collectionUpdate a collection
Input schema
{
  "type": "object",
  "properties": {
    "collectionId": {
      "type": "string",
      "description": "ID of the collection"
    },
    "externalId": {
      "type": "string",
      "description": "External identifier for reference or linking this collection to another system",
      "maxLength": 300
    },
    "groups": {
      "type": "array",
      "description": "The associated groups that this collection is assigned to",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "format": "uuid",
            "description": "The associated object's unique identifier"
          },
          "readOnly": {
            "type": "boolean",
            "description": "When true, the read only permission will not allow the user or group to make changes to items"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "When true, the hide passwords permission will not allow the user or group to view passwords"
          },
          "manage": {
            "type": "boolean",
            "description": "When true, the manage permission allows a user to both edit the ciphers within a collection and edit the users/groups that are assigned to the collection"
          }
        },
        "required": [
          "id",
          "readOnly"
        ]
      }
    }
  },
  "required": [
    "collectionId"
  ]
}
——
update_org_groupUpdate a group
Input schema
{
  "type": "object",
  "properties": {
    "groupId": {
      "type": "string",
      "description": "ID of the group"
    },
    "name": {
      "type": "string",
      "description": "New name for the group"
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the group (optional)"
    },
    "collections": {
      "type": "array",
      "description": "Array of collection IDs the group has access to",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Collection ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether access is read-only"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether to hide passwords"
          },
          "manage": {
            "type": "boolean",
            "description": "Whether the group can manage the collection"
          }
        },
        "required": [
          "id"
        ]
      }
    }
  },
  "required": [
    "groupId",
    "name"
  ]
}
——
update_org_group_membersUpdate a group's members
Input schema
{
  "type": "object",
  "properties": {
    "groupId": {
      "type": "string",
      "description": "ID of the group"
    },
    "memberIds": {
      "type": "array",
      "description": "Array of member IDs to add to the group",
      "items": {
        "type": "string"
      }
    }
  },
  "required": [
    "groupId",
    "memberIds"
  ]
}
——
update_org_memberUpdate a member
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member"
    },
    "type": {
      "type": "number",
      "description": "User type (0: Owner, 1: Admin, 2: User, 4: Custom)",
      "enum": [
        0,
        1,
        2,
        4
      ]
    },
    "externalId": {
      "type": "string",
      "description": "External ID for the member (optional)",
      "maxLength": 300
    },
    "permissions": {
      "type": "object",
      "description": "Custom permissions if the member has a Custom role",
      "properties": {
        "accessEventLogs": {
          "type": "boolean"
        },
        "accessImportExport": {
          "type": "boolean"
        },
        "accessReports": {
          "type": "boolean"
        },
        "createNewCollections": {
          "type": "boolean"
        },
        "editAnyCollection": {
          "type": "boolean"
        },
        "deleteAnyCollection": {
          "type": "boolean"
        },
        "manageGroups": {
          "type": "boolean"
        },
        "managePolicies": {
          "type": "boolean"
        },
        "manageSso": {
          "type": "boolean"
        },
        "manageUsers": {
          "type": "boolean"
        },
        "manageResetPassword": {
          "type": "boolean"
        },
        "manageScim": {
          "type": "boolean"
        }
      }
    },
    "collections": {
      "type": "array",
      "description": "Array of collection IDs the member has access to",
      "items": {
        "type": "object",
        "properties": {
          "id": {
            "type": "string",
            "description": "Collection ID"
          },
          "readOnly": {
            "type": "boolean",
            "description": "Whether access is read-only"
          },
          "hidePasswords": {
            "type": "boolean",
            "description": "Whether to hide passwords"
          },
          "manage": {
            "type": "boolean",
            "description": "Whether the member can manage the collection"
          }
        },
        "required": [
          "id"
        ]
      }
    },
    "groups": {
      "type": "array",
      "description": "Array of group IDs the member belongs to",
      "items": {
        "type": "string",
        "format": "uuid",
        "description": "Group ID"
      }
    }
  },
  "required": [
    "memberId",
    "type"
  ]
}
——
update_org_member_groupsUpdate a member's groups
Input schema
{
  "type": "object",
  "properties": {
    "memberId": {
      "type": "string",
      "format": "uuid",
      "description": "ID of the member"
    },
    "groupIds": {
      "type": "array",
      "description": "Array of group IDs that the member should belong to",
      "items": {
        "type": "string",
        "format": "uuid"
      }
    }
  },
  "required": [
    "memberId",
    "groupIds"
  ]
}
——
update_org_policyUpdate a policy
Input schema
{
  "type": "object",
  "properties": {
    "policyType": {
      "type": "integer",
      "description": "Type of the policy (0=TwoFactorAuthentication, 1=MasterPassword, 2=PasswordGenerator, 3=SingleOrg, 4=RequireSso, 5=OrganizationDataOwnership, 6=DisableSend, 7=SendOptions, 8=ResetPassword, 9=MaximumVaultTimeout, 10=DisablePersonalVaultExport, 11=ActivateAutofill, 12=AutomaticAppLogIn, 13=FreeFamiliesSponsorshipPolicy, 14=RemoveUnlockWithPin, 15=RestrictedItemTypesPolicy)",
      "minimum": 0,
      "maximum": 15
    },
    "enabled": {
      "type": "boolean",
      "description": "Whether the policy is enabled"
    },
    "data": {
      "type": "object",
      "description": "Policy configuration data"
    }
  },
  "required": [
    "policyType",
    "enabled"
  ]
}
——
update_org_subscriptionUpdate the organization's current subscription for Password Manager and/or Secrets Manager
Input schema
{
  "type": "object",
  "properties": {
    "passwordManager": {
      "type": "object",
      "description": "Password Manager subscription details",
      "properties": {
        "seats": {
          "type": "integer",
          "description": "Number of Password Manager seats"
        },
        "storage": {
          "type": "integer",
          "description": "Storage in GB"
        },
        "maxAutoScaleSeats": {
          "type": "integer",
          "description": "Maximum auto-scale seats for Password Manager"
        }
      }
    },
    "secretsManager": {
      "type": "object",
      "description": "Secrets Manager subscription details",
      "properties": {
        "seats": {
          "type": "integer",
          "description": "Number of Secrets Manager seats"
        },
        "maxAutoScaleSeats": {
          "type": "integer",
          "description": "Maximum auto-scale seats for Secrets Manager"
        },
        "serviceAccounts": {
          "type": "integer",
          "description": "Number of Secrets Manager service accounts"
        },
        "maxAutoScaleServiceAccounts": {
          "type": "integer",
          "description": "Maximum auto-scale service accounts"
        }
      }
    }
  },
  "required": []
}
——

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 65cbb47fa3623d99bfdd21e769796fc1bc4494d83f0db49b20d335ff3381658e

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.