icoretech/warden-mcp

warden-mcp

Programmatic Vaultwarden/Bitwarden vault management over MCP (Model Context Protocol), backed by the official Bitwarden CLI (bw).

This project exists to let agents and automation create/search/read/update/move vault items without re-implementing Bitwarden’s client-side crypto.

Published package: @icoretech/warden-mcp

Highlights

• MCP Streamable HTTP (SSE) endpoint at POST /sse + health check at GET /healthz
• Runtime guardrail metrics at GET /metricsz
• Item types: login, secure note, card, identity, plus an SSH key convention (secure note + standard fields)
• Attachments: create/delete/download
• Organization + collection helpers (list + org-collection CRUD)
• Safe-by-default: item reads are redacted unless explicitly revealed; secret helper tools return null unless reveal: true
• Strong fit for LLM automation: pair it with a browser-capable MCP host so an agent can fetch credentials, complete sign-in flows, read TOTP codes, and keep automating after login

Text-Only MCP Client Behavior

Some MCP hosts, including agent shells that optimize tool output for the model, only forward content[] text blocks and do not expose structuredContent to the agent. warden-mcp therefore mirrors the non-secret identifiers needed for follow-up calls into visible text by default.

For search/list tools, the text output includes concise rows with s