An access review
Sarah Chen, IT manager at BigCo, asked who could reach the finance collection before the quarterly audit. Memtro read the collection's groups and their access levels, then listed each group's members by name and email.
Bitwarden + Memtro
Who has access to our finance collection in Bitwarden, and who was revoked this month?
Bitwarden shows you your organization's members with their role and status, and the groups they belong to. Memtro also reads which collections each group reaches and at what level, the organization's event log and its policies. When asked and granted, it can invite, re-invite, revoke, restore or remove a member, or change a member's role or groups. It can create, rename or delete a group, set its members, set which groups reach a collection, or delete a collection. It never reads vault items or passwords, and only an organization owner can view the API key.
In Memtro
What you can do with Bitwarden in Memtro
Ask in plain English from chat, your editor, a scheduled job or your own agent. The model picks the right Bitwarden tool, reads what it needs, and answers with the source cited.
What it does
- 01Lists members with name, email, role and status, and reads one member's groups and the collections they reach.
- 02Lists groups with the collections each reaches and the access level, view, edit or manage, plus each group's members.
- 03Reads the event log of who was invited, revoked or removed and what changed, and the organization's policies.
- 04When asked and granted, invites a person, who Bitwarden emails, or re-invites, revokes, restores or removes a member.
- 05When asked and granted, changes a member's role or groups, or creates, renames, deletes or sets the members of a group.
- 06When asked and granted, sets which groups reach a collection, or deletes a collection and the items only it holds.
Acts when asked
When you ask it to
These tools change something in Bitwarden. The model is told to use them only when you ask for exactly that, and an administrator grants each one by name to the teams that may use it; a personal connection acts only after its owner allows it.
- 01Invite a person to the organization by email
- 02Re-send a member's invitation
- 03Revoke a member's access (reversible)
- 04Restore a revoked member
- 05Remove a member from the organization
- 06Change a member's role
- 07Set which groups a member belongs to
- 08Create a group
- 09Rename a group or change its collection access
- 10Delete a group
- 11Set a group's members
- 12Set which groups can reach a collection
- 13Delete a collection and its items
In practice
Ask it like you would a colleague
Once Bitwarden is connected, these are the kinds of things people ask. Plain questions, no syntax. If the answer lives partly in another system you have connected, Memtro looks there too.
Bitwarden + Memtro
Who can reach the finance collection, and at what level?
Which members are still invited but not confirmed?
Who was revoked or removed this month?
Is two-step login required by policy?
Revoke Tom Reilly's access to the organization.
Offboarding a leaver
Dan Fletcher, operations lead at Acme Ltd, asked Memtro to revoke a departing contractor's access. With the action granted, Memtro revoked the member. They lost access to the collections at once, but stayed listed so they could be restored.
Teams
Where it fits
The teams that lean on Bitwarden most, a question each of them asks, and what they connect beside it.
- EngineeringKeep decisions from evaporatingEngineer, Tech lead, On call, New joiner“Who owns the billing migration, and what did we decide about retries?”Used alongside GitHub, Linear, Jira, Confluence, Slack and 5 more.
- ProductHear what customers actually ask forProduct manager, Researcher, Designer, Head of product“Which customers asked for SSO this quarter, and what is their combined ARR?”Used alongside Help Scout, HubSpot, Linear, Jira, Slack and 6 more.
- Agent buildersMemory and tools for the agents you buildSolo builder, Platform team, Automation engineer, Whoever signs it off“Search memtro for what we know about Acme before drafting the proposal”Used alongside GitHub, Linear and Slack.
Better together
Works with
A record in Bitwarden is rarely the whole story. Connect the systems that hold the rest and Memtro checks them together, then remembers what it learned so the next question starts further along.
- Work managementBitwarden with JiraJQL search, issue details and projects from Jira Cloud.
- Work managementBitwarden with Clio ManageAsk the matter: its client, its fee earner, the time on it and what is still unbilled.
- Work managementBitwarden with LinearIssues, projects and teams, synced hourly into memory.
- SupportBitwarden with Help ScoutAI that reads your support conversations and cross-references the customer everywhere else.
- SupportBitwarden with ZendeskEvery ticket, reply and internal note, ready to be asked about.
- SupportBitwarden with IntercomCustomer conversations and the people behind them, in your company memory.
- Documents and wikisBitwarden with NotionSearch pages and query databases, and write to them when you ask.
- Documents and wikisBitwarden with Google DriveSearch Drive and read Docs, Sheets and Slides as text, and write a Doc when you ask.
- Documents and wikisBitwarden with ConfluenceSearch and read wiki pages, and write them when you ask.
Also in Engineering and operations
Using something else for the same job, or both? Each connector has its own tools; connect as many as you like.
- GitHub
- AWS CloudWatch
- Sentry
- ServiceNow
- Okta
- Twilio
- AWS CloudTrail
- GitLab
- Bitbucket
- Vercel
- PagerDuty
- Datadog
- Grafana
- incident.io
- Azure DevOps
- CircleCI
- Cloudflare
- LaunchDarkly
- New Relic
- Rollbar
- Snyk
- Better Stack
- Buildkite
- DigitalOcean
- Heroku
- Netlify
- SonarQube Cloud
- Statuspage
UptimeRobot- Axiom
- BugSnag
- Checkly
- Hetzner Cloud
Honeycomb- Pingdom
- Render
- Statsig
- Sumo Logic
- Supabase
- HCP Terraform
- Vultr
- Airbrake
- Codecov
Cronitor- Dynatrace
FireHydrant- Fly.io
- Honeybadger
- Akamai Linode
- Octopus Deploy
- Pulumi
- Rootly
- Semgrep
- Splunk
StatusCake- Tailscale
- Argo CD
- authentik
- Coolify
- Gitea
GlitchTip
GLPI- Jenkins
Langfuse
LibreNMS- n8n
NetBox- Portainer
- Prefect
Snipe-IT
Woodpecker CI
Zabbix
LangSmith
Helicone- OpenAI (usage and cost)
- Anthropic (usage and cost)
- Algolia
- Flagsmith
- Unleash
GrowthBook
Drata
Intruder
GitGuardian
Secureframe
ilert- KnowBe4
JumpCloud
ConfigCat- Railway
- Fastly
- Postman
- Make
- Braintrust
- OpenRouter
- ElevenLabs
Split- Scaleway
Aikido Security- AssemblyAI
Astronomer- Bamboo
- Baseten
- Bitrise
- BrowserStack
- bunny.net
- Cachet
- Checkmk
- Civo
- Cloudsmith
- Codacy
- Codemagic
Comet Opik- Coralogix
CrowdStrike Falcon- Dagster+
- DeepSource
Detectify- Docker Hub
Domotz- Grafana OnCall
- Harness
- Hugging Face
- Instatus
- Koyeb
- Lambda Cloud
LambdaTest
LangWatch
LlamaCloud
Logz.io
Lunary- Mezmo
NinjaOne- Nomad
Northflank- Oh Dear
- OVHcloud
Portkey- Probely (Snyk API & Web)
PromptLayer- Proxmox VE
PRTG Network Monitor- Qase
Raygun
Retell AI- Retool
Runpod- SecurityScorecard
- Semaphore CI
Shodan- SigNoz
- Socket
Spike.sh
Squadcast- SwaggerHub
- TeamCity
Tenable- Together AI
- Travis CI
UpGuard
Uptime.com
Vanta- Vapi
- Windmill
Zenduty- OpsLevel
Cortex- Auth0
- Clerk
WorkOS
Kandji
Automox
Huntress- HackerOne
SimpleMDM- AppSignal
Healthchecks.io
Rapid7 InsightVM- 1Password Events
- JFrog Artifactory
- Sauce Labs
Zenhub- Deepgram
- Replicate
Setup
How to connect
Connect withclient_id, client_secret and server
- 1
In the Bitwarden web vault, open Admin Console → Settings → Organization info → API key → View API key. Only an organization owner can view it, and a personal key does not work.
- 2
Open Connections → Bitwarden in Memtro and paste the client_id and client_secret. Set Server to us, eu or your self-hosted host name.
- 3
An administrator grants actions such as revoke a member or delete a group by name, only to the teams that run access.
- 4
Ask who can reach the finance collection.
Also works from
Chat in the dashboard, the OpenAI-compatible API, scheduled jobs, and any MCP client: Claude Code, OpenCode, Cursor, Claude Desktop. The Bitwarden tools are the same everywhere.
FAQ
Questions
Can Memtro change anything in Bitwarden?+
Only when you ask, and only what it has been granted: invite a person to the organization by email; re-send a member's invitation; revoke a member's access (reversible); restore a revoked member; remove a member from the organization; change a member's role; set which groups a member belongs to; create a group; rename a group or change its collection access; delete a group; set a group's members; set which groups can reach a collection; delete a collection and its items. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.
Who can use a Bitwarden connection?+
A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.
Does Memtro store my Bitwarden data?+
Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.
How do I connect Bitwarden?+
client_id, client_secret and server. In the Bitwarden web vault, open Admin Console → Settings → Organization info → API key → View API key. Only an organization owner can view it, and a personal key does not work.
Connect Bitwarden in a few minutes
Seven-day free trial, then one monthly price per organisation. Connectors, jobs and memory are never metered.